-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 25 Mar 2026 17:08:59 +0100
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: armhf
Version: 1:9.20.21-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.21-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.21
    - [CVE-2026-1519]: Fix unbounded NSEC3 iterations when validating
      referrals to unsigned delegations.
    - [CVE-2026-3104]: Fix memory leaks in code preparing DNSSEC proofs of
      non-existence.
    - [CVE-2026-3119]: Prevent a crash in code processing queries
      containing a TKEY record.
    - [CVE-2026-3591]: Fix a stack use-after-return flaw in SIG(0) handling
      code.
Checksums-Sha1:
 72d810cd82433e8502155164b5d24a67b1feea82 653036 bind9-dbgsym_9.20.21-1~deb13u1_armhf.deb
 7132de8fee05059a57b5be4cf9f655abe4332b0d 294604 bind9-dev_9.20.21-1~deb13u1_armhf.deb
 19c914974bfe5bd1e3b403bf304efe36cf69a2c5 395788 bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_armhf.deb
 09b099b02185405e561bcafad097083d199a6ce3 156660 bind9-dnsutils_9.20.21-1~deb13u1_armhf.deb
 9baf747fe2f6c4bb2087c514fc29897cd670be38 103716 bind9-host-dbgsym_9.20.21-1~deb13u1_armhf.deb
 f2d847945180df7f3c710e0166ca2f8494a88e5e 51928 bind9-host_9.20.21-1~deb13u1_armhf.deb
 be916a183a0dc80258f490da55d06d06f30ff8bd 4128088 bind9-libs-dbgsym_9.20.21-1~deb13u1_armhf.deb
 58574e65dc4f9585988e3a813d9cddf1fd82adde 1107156 bind9-libs_9.20.21-1~deb13u1_armhf.deb
 77ab1c84dd873fefafd9843b33635f4679914a84 380292 bind9-utils-dbgsym_9.20.21-1~deb13u1_armhf.deb
 f3d40ce0202e5f2d1d44675633d986c343504483 174904 bind9-utils_9.20.21-1~deb13u1_armhf.deb
 effeb8786c43cb84970850889053f8b19b796e8a 10220 bind9_9.20.21-1~deb13u1_armhf-buildd.buildinfo
 4b59c25a4dd8054fa5247550c82591b56bec9379 242128 bind9_9.20.21-1~deb13u1_armhf.deb
Checksums-Sha256:
 4a5f048ff88666a31047ebf0c6fbe988b9f6600315f9a354dd94d599369088ce 653036 bind9-dbgsym_9.20.21-1~deb13u1_armhf.deb
 b480939a281b6523818931dc4376e829a55a470db33c71b1d347752661f4e2fc 294604 bind9-dev_9.20.21-1~deb13u1_armhf.deb
 75dd6981d18d93d1df39174549b671d09db19cec90692862a10e9c2e582652e0 395788 bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_armhf.deb
 efa713621161d6571994d5bfac2e67eb047e488bff620af0da327e5becdcefcd 156660 bind9-dnsutils_9.20.21-1~deb13u1_armhf.deb
 ecccfc079954d9450e4cf5255cc571c38b95ca7d60be1017c3d6227b93c55108 103716 bind9-host-dbgsym_9.20.21-1~deb13u1_armhf.deb
 79cc4f94dd6e1467cda0ca0c55fb7d4daab62643da13a04c92c24620caf43723 51928 bind9-host_9.20.21-1~deb13u1_armhf.deb
 7f083ff3e7d7599b9112f3aaf3c5a835644d93b584035f7cb4d2ca45971cb61d 4128088 bind9-libs-dbgsym_9.20.21-1~deb13u1_armhf.deb
 0c11bfe5da75a391b3ddd70a0e9a707f3a149cc4df3955211432cb7d5e073ec8 1107156 bind9-libs_9.20.21-1~deb13u1_armhf.deb
 0faf2e20c033a5aa2573e175380f3ffa228854c44d19b50ac3628d24bac35c04 380292 bind9-utils-dbgsym_9.20.21-1~deb13u1_armhf.deb
 a1b3bd2e900bef45b3ca0be94667f9c97cb5fbdc0f5dbd6efbc0f26f0280dfa2 174904 bind9-utils_9.20.21-1~deb13u1_armhf.deb
 039a3912b5f8fd52e0fac77deb699a6842552dc3d9e47c871f2e84e163f1eda9 10220 bind9_9.20.21-1~deb13u1_armhf-buildd.buildinfo
 4802c72f0c93e69ab6832866bb98ce97572da5844f78e179cbc185e9577e38fb 242128 bind9_9.20.21-1~deb13u1_armhf.deb
Files:
 db8c84e2104f3c24f0d73c86929f0b52 653036 debug optional bind9-dbgsym_9.20.21-1~deb13u1_armhf.deb
 7d45c45c11389aae7eed2110b3590b1f 294604 devel optional bind9-dev_9.20.21-1~deb13u1_armhf.deb
 3744fa7e684846ff81fe8a17b6bf2ff1 395788 debug optional bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_armhf.deb
 b1133b9f20661d77185077eade3d2c9e 156660 net standard bind9-dnsutils_9.20.21-1~deb13u1_armhf.deb
 e8045140e2453950845124057142d810 103716 debug optional bind9-host-dbgsym_9.20.21-1~deb13u1_armhf.deb
 75d6e0582d991f9387f349b86ccafb1c 51928 net standard bind9-host_9.20.21-1~deb13u1_armhf.deb
 5e5c1f9e6dbe064a5ab9a4edd97bfe7c 4128088 debug optional bind9-libs-dbgsym_9.20.21-1~deb13u1_armhf.deb
 eab48035bb1b3d0ee40319f6095e07bc 1107156 libs standard bind9-libs_9.20.21-1~deb13u1_armhf.deb
 688d2c6e1298f39edaf1d7d417b930e0 380292 debug optional bind9-utils-dbgsym_9.20.21-1~deb13u1_armhf.deb
 c00a39ee19bcefc8701d84ad3d6a7923 174904 net optional bind9-utils_9.20.21-1~deb13u1_armhf.deb
 68354b7c6913a09af397ee758401a67d 10220 net optional bind9_9.20.21-1~deb13u1_armhf-buildd.buildinfo
 7b6e5ce00e3f2050c0d8b91b25e6c266 242128 net optional bind9_9.20.21-1~deb13u1_armhf.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmnEFK4ACgkQ8U6eOZMp
j6/UkA/+N/ptgkIaYV1C4KqlaUXpg0Nwxe9uIvnLLXiOEwZGabgB4OaHnY4FrJjY
KxhdVpihjbRTH74CsqbE4Kjwix6rIiD3i8KBfHLUAMEq8EfRS0iFu056B0/SO/gv
qPF88npx6uTxEKeRDaPYzjXEeiDuy6W5jQJ92bja3ofYoFgpxb3ehuTi2Eqw/d+j
eMuqGL/5Cne0uxIsxynJBxPzeK3Hpg4RwKmOau333R64ynmng3+4WGP5e9G4lnZc
KZIOZXS0WUe44QPqtCHxN4CvlBEVvpMlXmthwggxqNk1/mFA/Mm7UZzDkmAr99EO
oMeTI6ddAI+bEMuPsbL210jcje2TU5YsIAQKusHNUVDLbAHuiAphD7w7+sbZsKgi
5NlEv1wbQJFAdWIe3pLyDNDcTwGyw/zHyo2XSPDQqdqIfHPPBlb17h6UNEVuPX/i
uK/9xufLZtxPTwkjxfsHMtbbzCVpLp0SbNcxQiwHsc9Z08SSOo99fTKCsnHx11Sf
wSDQHhfkTP+iG7GqHDJhWa836EjKZ1tfheFyrL9LcHBTuU1Trq9KwaGCLC4SZa6C
JiUWHELSkTacIUZKh3Jzmn4OYFeq6eN+eb5Okk60cDpnp1XtQvyjjjm2jYVkicap
V4KSo07dumbmIm7gZ7w6NxLp/V6NQYh5fBPGRgVAGQQsVw7nMTo=
=PiCq
-----END PGP SIGNATURE-----