-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 25 Mar 2026 17:08:59 +0100
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: i386
Version: 1:9.20.21-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: i386 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.21-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.21
    - [CVE-2026-1519]: Fix unbounded NSEC3 iterations when validating
      referrals to unsigned delegations.
    - [CVE-2026-3104]: Fix memory leaks in code preparing DNSSEC proofs of
      non-existence.
    - [CVE-2026-3119]: Prevent a crash in code processing queries
      containing a TKEY record.
    - [CVE-2026-3591]: Fix a stack use-after-return flaw in SIG(0) handling
      code.
Checksums-Sha1:
 64e20a69f4be699c7b9e249a3e23e5d37ad0f9c8 613864 bind9-dbgsym_9.20.21-1~deb13u1_i386.deb
 efeb1621039ab11e5910a447445f33202a22fd21 294596 bind9-dev_9.20.21-1~deb13u1_i386.deb
 ac39985ff6b3e1421d3b432cd34630b5b5ede55f 392392 bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_i386.deb
 68281415a3e8237372f722dbee75785b827dc75a 170060 bind9-dnsutils_9.20.21-1~deb13u1_i386.deb
 6361405832651e35c49729d32ba5ba642e43f795 93936 bind9-host-dbgsym_9.20.21-1~deb13u1_i386.deb
 2bda2eacad5f5df7259446c0790cf32b5e955c34 57476 bind9-host_9.20.21-1~deb13u1_i386.deb
 475d2d94e68ed4d93a0970737b1c75f69d44a932 3530060 bind9-libs-dbgsym_9.20.21-1~deb13u1_i386.deb
 31f8cd22950472e588fb8e1c8352d0f2757a38b3 1322092 bind9-libs_9.20.21-1~deb13u1_i386.deb
 fce538ebc1bfc273e2ec8d72e2f6439b4ebd7fe4 448280 bind9-utils-dbgsym_9.20.21-1~deb13u1_i386.deb
 d305264a23b8d630eecb65c14ee3d203f314989c 185648 bind9-utils_9.20.21-1~deb13u1_i386.deb
 9a7c1f4969fb657d82b4a5b82ef2d9c8af30afa4 10225 bind9_9.20.21-1~deb13u1_i386-buildd.buildinfo
 8b10327f6e9fcf8c183b5e07d4c000ba876eecb7 269464 bind9_9.20.21-1~deb13u1_i386.deb
Checksums-Sha256:
 314d6da08da6b04d525ebadf61e0766f26bfaf3199801203f9186e0842ac699a 613864 bind9-dbgsym_9.20.21-1~deb13u1_i386.deb
 fa7f48661f7f37af8993acb35f5240b4e4ee5db1364ef05fc96e573416a00448 294596 bind9-dev_9.20.21-1~deb13u1_i386.deb
 4f08d303ba3eccaea341e03b9d75c1ca0ecb49cf7d938e50f2b0be54d71d96ae 392392 bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_i386.deb
 7932841bce617d612bf722bcd222d8d206bffc8e7c10d199a1913529d348fb9c 170060 bind9-dnsutils_9.20.21-1~deb13u1_i386.deb
 ee09e5b86b663ee7c5c09604ee2de3241da0f7d97123f85c087f2433295b0fc0 93936 bind9-host-dbgsym_9.20.21-1~deb13u1_i386.deb
 2428b327b206ae5b7783f99d8d29f7325e9872534bac052f97e16327ed2212cb 57476 bind9-host_9.20.21-1~deb13u1_i386.deb
 1d9290c3043fced4450213c6823ccd9bc31090fe2272cb46b2186ed477ed460a 3530060 bind9-libs-dbgsym_9.20.21-1~deb13u1_i386.deb
 e86e4401ce1c6297e3dc35f712830b4f2e982e4394a7e3c2877c8cdd2ac8ec43 1322092 bind9-libs_9.20.21-1~deb13u1_i386.deb
 cfb78be06a03ad26286ebacf2e1aa58963415e5bfd2f64e48e11eb1405d27c45 448280 bind9-utils-dbgsym_9.20.21-1~deb13u1_i386.deb
 ae89f8af7fdcf91f590e9c93181810c4c46060568c7b0edbc7ecc0382423b1ee 185648 bind9-utils_9.20.21-1~deb13u1_i386.deb
 e492c180e7bee0dc3165e0d04a830d79920548b484fba5469ebd6b7e69744049 10225 bind9_9.20.21-1~deb13u1_i386-buildd.buildinfo
 b028b94ee42adb502be01c9d754bfaef4c57b18cca12b83fd64ea182b3775889 269464 bind9_9.20.21-1~deb13u1_i386.deb
Files:
 8ffc0a6dab7ce5dc72cb8d0a884efdd0 613864 debug optional bind9-dbgsym_9.20.21-1~deb13u1_i386.deb
 e8a7867761f07e28167683466d2e9cc4 294596 devel optional bind9-dev_9.20.21-1~deb13u1_i386.deb
 52c7dafacd34f13f8da16e6b28a55fce 392392 debug optional bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_i386.deb
 df63afcddf965bd70811e9607b2c41ec 170060 net standard bind9-dnsutils_9.20.21-1~deb13u1_i386.deb
 f6e12de11cbee9f96c8043e86e765e59 93936 debug optional bind9-host-dbgsym_9.20.21-1~deb13u1_i386.deb
 2ae9554ebd1fe3edb0a9213f52c4663a 57476 net standard bind9-host_9.20.21-1~deb13u1_i386.deb
 a319fa79edb7bd453b24f7c25db19fd7 3530060 debug optional bind9-libs-dbgsym_9.20.21-1~deb13u1_i386.deb
 215851b4dcbf95a55821f51d40434ec1 1322092 libs standard bind9-libs_9.20.21-1~deb13u1_i386.deb
 e5feff3fc798fa221b9fce004805da41 448280 debug optional bind9-utils-dbgsym_9.20.21-1~deb13u1_i386.deb
 2abc49604e109822b67a251a308ee6ac 185648 net optional bind9-utils_9.20.21-1~deb13u1_i386.deb
 4e2d93312864cdc8a9a40c831fad7dce 10225 net optional bind9_9.20.21-1~deb13u1_i386-buildd.buildinfo
 052ad172589fcaf7fdad4d3df4afb0dc 269464 net optional bind9_9.20.21-1~deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmnEFMAACgkQf2INRiCd
aWKK/A/+Is7NIcBWZMOClB3YJnC49ppgqScjGgRkm4bD99VxDKebElTcGPHM1EBp
7soeBnDHWMlccmbcCkSd44+Id0Gwj5N2dGVmOeQi92bjG9UrbVW3EWs9IvV8+zdp
8fPx3kNNsOgradEy9LwOTgAgAmkwBoblw/D2eJsh77o3OKD1qsOVeEy9qHsd7i9R
/w2c2EqT0AJuM50+1B0o+gKoWoVmCOCRTPQ3WeASpyj8sCpfdkaVndmZoMWZUifu
u5B1DAi36yPqdy1KxyJSMrwPfWFVJOfXsxHMf1y2ViVu+EgjSeZVHpMGcTzCAVm4
dtqy0kmrNLZgSHNrUdudmaUPQcBPaIYIMMVIWbG5U8FmRuFlxqugBkYp8cDOGzoe
05Q0YzH6DSomoPU6mVk04y1jAwTmgZjBVLeHsaFZZYo/3EbeLA2w/IUVB+8QlVSN
MgoCvTwvKl7C/e5584ZGB1NoVtD4amOR/HZJDgzpAgQYQdUh3+fLmSQLdIdrGEqm
i+6XqKab5+ndmAS6XKOi6uUBMRGa0c2LKSsf/hT0v/g32zAiy7RciMOm3F+HjcwT
wpy/Y3OHEi/IkccmVNGkP7QRJkMcPXnD3ruuWBx97cYTF6VfohLCoDJVcz31jThf
roM0DTl8w9JZJzJErONWzOoweiSdwTUFwvmhsi+QAySVZMP62sA=
=pcIk
-----END PGP SIGNATURE-----