-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 16 Sep 2026 15:42:29 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: s390x
Version: 1:9.20.29-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (zani) <buildd_s390x-zani@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.29-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.29
    - [CVE-2026-19668] Prevent excessive CPU use validating crafted DNSSEC responses.
    - [CVE-2026-19033] Require a TSIG on every message of incoming zone
      transfers.
    - [CVE-2026-77119] Prevent a DNSSEC downgrade of secure delegations via
      unrelated NSEC3 records.
    - [CVE-2026-19666] DNS64 with `break-dnssec` could cause an assertion
      failure.
    - [CVE-2026-19667] Reject oversized negative cache records.
    - [CVE-2026-19662] Prevent resolver crash with cached DNSSEC proofs.
    - [CVE-2026-75029] Discard repeated SOA, CNAME, and DNAME records when
      parsing DNS messages.
    - [CVE-2026-77692] Fix an unauthenticated crash on HTTPS using SIG(0).
    - [CVE-2026-81736] Cached HTTPS/SVCB aliases could exhaust resolver
      CPU.
    - [CVE-2026-76163] Prevent TKEY queries from terminating `named`
      without global options.
    - [CVE-2026-80274] Fix crash on wildcard answers carrying both NSEC and
      NSEC3 proofs.
    - [CVE-2026-81563] Following HTTPS/SVCB aliases could leak resolver
      cache memory.
Checksums-Sha1:
 696e706400ea281263596aa35c78c2a5c0e806cb 654104 bind9-dbgsym_9.20.29-1~deb13u1_s390x.deb
 285b680b9d1b54cdc3ef0f037133877957970b12 297300 bind9-dev_9.20.29-1~deb13u1_s390x.deb
 878aed94a1e14bc18a22c848e7744dec04fe44db 400880 bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_s390x.deb
 7c7bd4297beecdc834cd79e7b5ab2ac34f4bdbd7 160116 bind9-dnsutils_9.20.29-1~deb13u1_s390x.deb
 8fd8bd3487ab20848423a33d7dd4d4ed45285a83 104932 bind9-host-dbgsym_9.20.29-1~deb13u1_s390x.deb
 75b3e5896e05ef9cb907c7655a905f89ef1e9eac 54076 bind9-host_9.20.29-1~deb13u1_s390x.deb
 8055d90ea05719a487986a45b77c916bf0849135 4190024 bind9-libs-dbgsym_9.20.29-1~deb13u1_s390x.deb
 2132d2622bfb24cd6b2d7e6ddef334caea64ca11 1159552 bind9-libs_9.20.29-1~deb13u1_s390x.deb
 cafa8f0f754b80e4c926b86304fe3e712434e6e9 392840 bind9-utils-dbgsym_9.20.29-1~deb13u1_s390x.deb
 a90cf7635e29f5c0e7d248237d21fd54ed68b72f 179176 bind9-utils_9.20.29-1~deb13u1_s390x.deb
 dce3a7382b9264858135a9b3ad10c2b49cf7e13b 10506 bind9_9.20.29-1~deb13u1_s390x-buildd.buildinfo
 91ef55a7df533066ce7f65e86e86b703204c1923 244724 bind9_9.20.29-1~deb13u1_s390x.deb
Checksums-Sha256:
 8f47adac313f99a7d1bb859f25fb4103e524a2b5dc3a39480761470f962f87de 654104 bind9-dbgsym_9.20.29-1~deb13u1_s390x.deb
 0ce991c7f574db1a243da0835ed29b3243cad3b3f1b7dd50e1a1a1c1ed7c4e0d 297300 bind9-dev_9.20.29-1~deb13u1_s390x.deb
 440fcd193917a9c47ccdb368d99503c7db17ef28e9af645309136138c5f20fec 400880 bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_s390x.deb
 d1af52c57f4ff4e8b12326848fa9e78c6e3b5b9f73b32a02406d6541eeeb0657 160116 bind9-dnsutils_9.20.29-1~deb13u1_s390x.deb
 a2e940b48f6af9546ec6a6dda13c71c393aba93ec41fefbf7f7be188b930450c 104932 bind9-host-dbgsym_9.20.29-1~deb13u1_s390x.deb
 6f9196230ad3ba8f18eb35c23bb6a598d704c44e2c0f3184239bed98052614fe 54076 bind9-host_9.20.29-1~deb13u1_s390x.deb
 fef5ad142131ca601631967fa4aad36e7bc6100e281911a8e4afc4d03e192525 4190024 bind9-libs-dbgsym_9.20.29-1~deb13u1_s390x.deb
 1461c38efc6605c5d469612e9d91cb4d1eb7d1713025b08d4e4c604188666f15 1159552 bind9-libs_9.20.29-1~deb13u1_s390x.deb
 488f3c9e873daf94bf947d3a3eb942e079957778d60e8ada0469058484ccf8c4 392840 bind9-utils-dbgsym_9.20.29-1~deb13u1_s390x.deb
 5f7bf59b6e8b051605a7721ad4edfb5d9b20f6fc45d0891142802ca605647596 179176 bind9-utils_9.20.29-1~deb13u1_s390x.deb
 963e4fe92476582e941fe645caa300ed19f98f9eabbec44503eccee63cdc807b 10506 bind9_9.20.29-1~deb13u1_s390x-buildd.buildinfo
 0b6c8049d23dee11b85f8a728e5816cea423dbc931985d08a51a0a6720ff8b2e 244724 bind9_9.20.29-1~deb13u1_s390x.deb
Files:
 389ca43213f9dc0901195b694d8bda7c 654104 debug optional bind9-dbgsym_9.20.29-1~deb13u1_s390x.deb
 f006b7631f32bfaf41c1b448f3f988e4 297300 devel optional bind9-dev_9.20.29-1~deb13u1_s390x.deb
 6968adff3afba967818564affffe741e 400880 debug optional bind9-dnsutils-dbgsym_9.20.29-1~deb13u1_s390x.deb
 0f5e0c6299330797be3285a17546d0f5 160116 net standard bind9-dnsutils_9.20.29-1~deb13u1_s390x.deb
 bd4564e8ec919d848a1647668d7d4776 104932 debug optional bind9-host-dbgsym_9.20.29-1~deb13u1_s390x.deb
 4fc71f8ae31c346e25a76b57c0e439ed 54076 net standard bind9-host_9.20.29-1~deb13u1_s390x.deb
 df4f71e1db5fa9b5f4e9f8c61ef2de82 4190024 debug optional bind9-libs-dbgsym_9.20.29-1~deb13u1_s390x.deb
 ea521fc689a09bcf8814e0104d9877e1 1159552 libs standard bind9-libs_9.20.29-1~deb13u1_s390x.deb
 4297085b285b14dcc6e693077249b94a 392840 debug optional bind9-utils-dbgsym_9.20.29-1~deb13u1_s390x.deb
 9ee060de22074e750034851ad3d8dd44 179176 net optional bind9-utils_9.20.29-1~deb13u1_s390x.deb
 331de7fa90158597619336203605bfd7 10506 net optional bind9_9.20.29-1~deb13u1_s390x-buildd.buildinfo
 0b7c4c6efd63ed7b53073b303042b719 244724 net optional bind9_9.20.29-1~deb13u1_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=DpND
-----END PGP SIGNATURE-----