-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 21 Jan 2026 16:47:34 +0100
Source: bind9
Architecture: source
Version: 1:9.20.18-1
Distribution: unstable
Urgency: medium
Maintainer: Debian DNS Team <team+dns@tracker.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Changes:
bind9 (1:9.20.18-1) unstable; urgency=medium
.
* New upstream version 9.20.18
+ [CVE-2025-13878]: Fix incorrect length checks for BRID and HHIT
records.
Checksums-Sha1:
4bad9ca113587a028fa0e3e7f89c2ba4ae0cbff5 3154 bind9_9.20.18-1.dsc
d5b414aab3a53c5523e6b46a7282dfbd7ba3c24c 5775248 bind9_9.20.18.orig.tar.xz
4904ac8b3d2ee5bf695d3e000dd6f92eefaf4293 833 bind9_9.20.18.orig.tar.xz.asc
bee91e5926098bb6153826eb4667a5f7370b6ae6 62000 bind9_9.20.18-1.debian.tar.xz
ca2861703cbf0305a8643ea0b5f0271af24ec4c3 14415 bind9_9.20.18-1_amd64.buildinfo
Checksums-Sha256:
b4a4c34ce84560d8e2675d8b001d736b37dd9e9be365b3afcbaa595008865065 3154 bind9_9.20.18-1.dsc
dfc546c990ac4515529cd45c4dd995862b18ae8a2d0cb29208e8896a5d325331 5775248 bind9_9.20.18.orig.tar.xz
d56f087e30a8efd1b624acdf06203bb45fe8cfca18e9565c8a566957edacf069 833 bind9_9.20.18.orig.tar.xz.asc
12c32230c1a2a429263a4246a90672c202145438334d7e339626d231d3ac91a0 62000 bind9_9.20.18-1.debian.tar.xz
9aa1131e2265a63924a730c2813b1177afdec77116a1e873fcb9363da33d3906 14415 bind9_9.20.18-1_amd64.buildinfo
Files:
58cf9d8bde4fc353feafe1ac61b4deb4 3154 net optional bind9_9.20.18-1.dsc
cb5cf30e0a66d259cba3ed98cba45bbe 5775248 net optional bind9_9.20.18.orig.tar.xz
d6a52189ccf01693bda76b381a5b9476 833 net optional bind9_9.20.18.orig.tar.xz.asc
b79ca1194a2252d3ea1aab0f15126501 62000 net optional bind9_9.20.18-1.debian.tar.xz
c718da54e4a452ce27ea68d15ae6f3f6 14415 net optional bind9_9.20.18-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAml5/DZfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEMz
NjFCMUUzMDI5NTQzRUJDNjI1RTk3RDgzNzJBNDc3RUZBRTU5QzIACgkQg3Kkd++u
WcInBhAAr70cJiiwL9pKIlfMFIEM/KHSZyV+j8PgkcQKfvFFrZlq+M13UTyYGmtQ
pom3X8UK0CWbkaDhvYQvR7F0qvlRzJUeE+xT1phW2pIrMbQtrq6cIeTFQITUyiv+
U0Jz6It/L+aLwRY3Tdz5GX0EiGTtEWZItKN778zLwtPRbMNr3miJkJGZR7HO0T2Y
KOGyU8e+4jffrWBF6DYknXiLnGynZljpRvJ6O+svGgYxwXrYfDUg4kfNFy8Z0/qz
XsRZYbJZISC5C3kQr1pzZ7+sySwHFgCZFYePwIQeQY1DgMsfrfOdVNL4yB+OhzET
c7jJZME/3N+AFiBQUx4sTINB1xKbAxQy30aGOZbB/sbPrylXdl9GcEIJk+GEuqP5
vRhsabLGWrhgJAE1H/VgZEGcjsCmnQj1XMTJrlZc7EfsQ1DsWTMr+PY6RzLjgPNt
eZc/2TZnJDbzgG2MZfv4GlBQ3xazB9TTMZXmtTrJcQbI+5ayr9QeUwAIMBPihXEa
2PzkMdWAZ/MrnwSAg3o5ShS8k8UuqapcNZJmSQfebX5D6RGZDLJGzkiDlXqrkvGY
i/llpHnnFwLAYe9FvQqSvOxKPxLDgwuKhFWogy4JtvKcmEVS6R3TrjOQTmOLPjSq
HFzglwgGy4LpDH0wz4LUdm7Qza9Prux7FO40valh4EGg1qlT6Wk=
=JkwU
-----END PGP SIGNATURE-----
