-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 22 Oct 2025 18:00:33 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: amd64
Version: 1:9.20.15-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.20.15-1~deb13u1) trixie-security; urgency=high
 .
   * New upstream version 9.20.15
    - [CVE-2025-8677]: DNSSEC validation fails if matching but invalid
      DNSKEY is found
    - [CVE-2025-40778]: Address various spoofing attacks.
    - [CVE-2025-40780]: Cache-poisoning due to weak pseudo-random number
      generator
Checksums-Sha1:
 922c5a7806c38fc90f7277bcd3e5089c686e74ef 689452 bind9-dbgsym_9.20.15-1~deb13u1_amd64.deb
 7ea2d0dffbd3829d012cd4750a69a65152cbf452 293164 bind9-dev_9.20.15-1~deb13u1_amd64.deb
 bb5ba4edaacfd8a6a706132a397af48eefbc9f0e 435232 bind9-dnsutils-dbgsym_9.20.15-1~deb13u1_amd64.deb
 ac6bef800c72ad6080b88a59df061f2232aa2268 165344 bind9-dnsutils_9.20.15-1~deb13u1_amd64.deb
 9e479effcccb41a06636841abcd0df79e4571380 107276 bind9-host-dbgsym_9.20.15-1~deb13u1_amd64.deb
 94a9525d9ef1fad7058198c0489a857a71e95611 55424 bind9-host_9.20.15-1~deb13u1_amd64.deb
 65092e81083745f87e7b6d4f9a5ad2477384acc8 4176692 bind9-libs-dbgsym_9.20.15-1~deb13u1_amd64.deb
 cc368eed5b5f30990d2aa775a4ba42a359375382 1238128 bind9-libs_9.20.15-1~deb13u1_amd64.deb
 7d20947d933c28537a785eb8459e40807ae96d49 493148 bind9-utils-dbgsym_9.20.15-1~deb13u1_amd64.deb
 b2c13deea85d2700f73acf761b2b405e6c3bce9c 184124 bind9-utils_9.20.15-1~deb13u1_amd64.deb
 cccf25066ec00b1a1348ebd840b7f2056cc6bfc4 10312 bind9_9.20.15-1~deb13u1_amd64-buildd.buildinfo
 e61218b8b7e96206c07084de80a40e65b6a22f38 254108 bind9_9.20.15-1~deb13u1_amd64.deb
Checksums-Sha256:
 dc2115096a41dabd0a8dfe310f71d4213a23bacca16430c69e1b68e68ed1e040 689452 bind9-dbgsym_9.20.15-1~deb13u1_amd64.deb
 c28e814fd438ba91b87446dba4300901afb1b11472ac57951eb2046d0757aa79 293164 bind9-dev_9.20.15-1~deb13u1_amd64.deb
 4e07d1883c69a4f53e2a2ce4762344017f124221ea49aedfe6128797cef43bb8 435232 bind9-dnsutils-dbgsym_9.20.15-1~deb13u1_amd64.deb
 654787a41005ac5a5edc099ce5ce976340737c6ac69e6cc169ca3bded17a900b 165344 bind9-dnsutils_9.20.15-1~deb13u1_amd64.deb
 628114cf0a43448eaeca4a7fc8e630b6b6a6841387e5cc74a37094cd14cb8d39 107276 bind9-host-dbgsym_9.20.15-1~deb13u1_amd64.deb
 ac2dc2952b1f4a061d413c8a524e3f00f9b627b864b64398af359193ecfa1d83 55424 bind9-host_9.20.15-1~deb13u1_amd64.deb
 175733c54ee3b6e1656ae3ffe1c465328ccd4af3d2740410952f7b6d65fe77db 4176692 bind9-libs-dbgsym_9.20.15-1~deb13u1_amd64.deb
 b8a24e6966da84dac97e95809f2b49d3484ac7c0c04583fef07fb70055d98492 1238128 bind9-libs_9.20.15-1~deb13u1_amd64.deb
 afb05c14d939b3d0132a48048ebd8efd428a22faed89aaf67e702c7571c78d67 493148 bind9-utils-dbgsym_9.20.15-1~deb13u1_amd64.deb
 5857db9eb717c25f2131486179b0910f80e50a9f7614157c8d0a8e9136f2aac8 184124 bind9-utils_9.20.15-1~deb13u1_amd64.deb
 81e9a9170c81bcfaddec3829a2c31ddab8bfaf4e3a3c2c05c474b98234c8660a 10312 bind9_9.20.15-1~deb13u1_amd64-buildd.buildinfo
 2aeafae43fe8aa9baf1761d3a0cd39563016c8d0c9fa96d8a4d552688a97cabc 254108 bind9_9.20.15-1~deb13u1_amd64.deb
Files:
 2eb75b1d315f13b2415c749d54046e9c 689452 debug optional bind9-dbgsym_9.20.15-1~deb13u1_amd64.deb
 b8d55775d1ce3ea4a76e9a89dc367703 293164 devel optional bind9-dev_9.20.15-1~deb13u1_amd64.deb
 b07980ca2463c215e85a54d4cd6aad77 435232 debug optional bind9-dnsutils-dbgsym_9.20.15-1~deb13u1_amd64.deb
 a7b0545313a3bd4bea0629adab6c20d9 165344 net standard bind9-dnsutils_9.20.15-1~deb13u1_amd64.deb
 0557e267e6faf37b14bc765c6a37c8a6 107276 debug optional bind9-host-dbgsym_9.20.15-1~deb13u1_amd64.deb
 468e266d4a535630519ea4ec5afa0ce2 55424 net standard bind9-host_9.20.15-1~deb13u1_amd64.deb
 381bcc1bed2fc7d6b95ef14373f21289 4176692 debug optional bind9-libs-dbgsym_9.20.15-1~deb13u1_amd64.deb
 f459e555a570ccf502d346c2833b66c9 1238128 libs standard bind9-libs_9.20.15-1~deb13u1_amd64.deb
 908311322eb5bd60c884db99ccb62841 493148 debug optional bind9-utils-dbgsym_9.20.15-1~deb13u1_amd64.deb
 46d2aa21d0f1cc02cb31ddd43a2315f1 184124 net optional bind9-utils_9.20.15-1~deb13u1_amd64.deb
 557c4b1b19755f5a6afdb4fe2d0c4326 10312 net optional bind9_9.20.15-1~deb13u1_amd64-buildd.buildinfo
 3a8a3d9695ebb22f1b32f75b6825d368 254108 net optional bind9_9.20.15-1~deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=GAmY
-----END PGP SIGNATURE-----