-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 25 Mar 2026 17:08:59 +0100
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: riscv64
Version: 1:9.20.21-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-manda-01) <buildd_riscv64-rv-manda-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.21-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.21
    - [CVE-2026-1519]: Fix unbounded NSEC3 iterations when validating
      referrals to unsigned delegations.
    - [CVE-2026-3104]: Fix memory leaks in code preparing DNSSEC proofs of
      non-existence.
    - [CVE-2026-3119]: Prevent a crash in code processing queries
      containing a TKEY record.
    - [CVE-2026-3591]: Fix a stack use-after-return flaw in SIG(0) handling
      code.
Checksums-Sha1:
 cf1d2e449069a4f17df05d787a4e8857a56cff81 672264 bind9-dbgsym_9.20.21-1~deb13u1_riscv64.deb
 fc86124b0664bf23c4ee33114de855ce989cab0a 294592 bind9-dev_9.20.21-1~deb13u1_riscv64.deb
 5f1ee355db060b7ed7bee9270f694c7016c2b04f 424764 bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_riscv64.deb
 38f3349221a45a062aa8938ef120cf1f949dc8ef 166796 bind9-dnsutils_9.20.21-1~deb13u1_riscv64.deb
 a900dfd590a39a2517bac78b1acc251b82a69a18 103160 bind9-host-dbgsym_9.20.21-1~deb13u1_riscv64.deb
 f3d3e800242965e708436f68010316a166046986 56180 bind9-host_9.20.21-1~deb13u1_riscv64.deb
 06a1df2f881b305f99ca561b9e91783941f415c4 4009408 bind9-libs-dbgsym_9.20.21-1~deb13u1_riscv64.deb
 bffb25b0c989771cd4094656a6bc4066c7e12b1d 1263960 bind9-libs_9.20.21-1~deb13u1_riscv64.deb
 8b881531223491e31708d7528844806101614ba2 488592 bind9-utils-dbgsym_9.20.21-1~deb13u1_riscv64.deb
 2054ba74006efb8953a97821dc0df1bfcb32ecbd 180764 bind9-utils_9.20.21-1~deb13u1_riscv64.deb
 cb9e47c2592de698a99e167e04e7de64365c78a3 10352 bind9_9.20.21-1~deb13u1_riscv64-buildd.buildinfo
 9665622f0854796f2a44202523aae2a2a22f1d33 252616 bind9_9.20.21-1~deb13u1_riscv64.deb
Checksums-Sha256:
 51cf43baa45e2f3a4c939f3dfe19d893304e08761a34c48a613713bc578f0458 672264 bind9-dbgsym_9.20.21-1~deb13u1_riscv64.deb
 c8744e6f18bcc180bca83cf3f1006b944f517d1fe0b0f78ac252acbb309a7950 294592 bind9-dev_9.20.21-1~deb13u1_riscv64.deb
 2f4922c5c6b54623430ad86e5d389a79f484f6134e4ce4254b3179be84b5de58 424764 bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_riscv64.deb
 14ff70a3c603f678f6d5bf50955d0a82154031a52cb86faf7913785082652c74 166796 bind9-dnsutils_9.20.21-1~deb13u1_riscv64.deb
 1da23306b28b0f520821f5f9a7387b26cd7d2f5c722c7e72c9e2fcc4c640d243 103160 bind9-host-dbgsym_9.20.21-1~deb13u1_riscv64.deb
 cc93f65d226ca56bfff54c143aa1fea04160f0c1d54494cf8ac929bbc802ae11 56180 bind9-host_9.20.21-1~deb13u1_riscv64.deb
 8c995d6bf120c8ae3cb016c48fbd261898655b4f00e549304d6d204c777246cc 4009408 bind9-libs-dbgsym_9.20.21-1~deb13u1_riscv64.deb
 c5572bee451d0ff397dda6aafe449a6347ddccc55a6e2c5296b85d3dac77746b 1263960 bind9-libs_9.20.21-1~deb13u1_riscv64.deb
 a87b6fc68e3e3f04eb57f427a2e785f3888ccc1216831c6b8b7dcf96364bf51b 488592 bind9-utils-dbgsym_9.20.21-1~deb13u1_riscv64.deb
 d8c51404517d236950367cecf1230f74585b3689d0c1ffbe62f5965b6e60ff24 180764 bind9-utils_9.20.21-1~deb13u1_riscv64.deb
 16636d1b10c83c28201a9dbc5aa028dca07412a1d23be47949ffe6420f04df8c 10352 bind9_9.20.21-1~deb13u1_riscv64-buildd.buildinfo
 d063ebfb1021eb30b511835f1c2ae1c853f982d85c686913d1d9ae5ff1d6118b 252616 bind9_9.20.21-1~deb13u1_riscv64.deb
Files:
 d6b7929985d019e282f1214141a17d57 672264 debug optional bind9-dbgsym_9.20.21-1~deb13u1_riscv64.deb
 f83f324842b5aa07f9b8718582577ac4 294592 devel optional bind9-dev_9.20.21-1~deb13u1_riscv64.deb
 40df7f21bb27acdc73ba9c87d898ed8c 424764 debug optional bind9-dnsutils-dbgsym_9.20.21-1~deb13u1_riscv64.deb
 350a982c39a6a69754d7ef27cdda424e 166796 net standard bind9-dnsutils_9.20.21-1~deb13u1_riscv64.deb
 8c0bbfafc68bcecdc6e7e88ed47cf002 103160 debug optional bind9-host-dbgsym_9.20.21-1~deb13u1_riscv64.deb
 10e43f4939cde9c10006b08720aaef34 56180 net standard bind9-host_9.20.21-1~deb13u1_riscv64.deb
 e1f29f20987b0d0fc295e432f8e5fcaf 4009408 debug optional bind9-libs-dbgsym_9.20.21-1~deb13u1_riscv64.deb
 c7530f02a780fe8c841f4924ac1b33b7 1263960 libs standard bind9-libs_9.20.21-1~deb13u1_riscv64.deb
 afb1496f26b9e87fd58db0bd49c22612 488592 debug optional bind9-utils-dbgsym_9.20.21-1~deb13u1_riscv64.deb
 955b607629e760ce113b1973ec7392e3 180764 net optional bind9-utils_9.20.21-1~deb13u1_riscv64.deb
 40dc11b4e96e8d923da0584a7e6adf5a 10352 net optional bind9_9.20.21-1~deb13u1_riscv64-buildd.buildinfo
 1664c767af443b0487b8ff02b03dd327 252616 net optional bind9_9.20.21-1~deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=okm9
-----END PGP SIGNATURE-----