-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 21 Jan 2026 17:32:52 +0100
Source: bind9
Architecture: source
Version: 1:9.20.18-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian DNS Team <team+dns@tracker.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Changes:
bind9 (1:9.20.18-1~deb13u1) trixie-security; urgency=high
.
* New upstream version 9.20.18
+ [CVE-2025-13878]: Fix incorrect length checks for BRID and HHIT
records.
Checksums-Sha1:
caa705d31fda2cc43ba3f2ce680b148a99124999 3197 bind9_9.20.18-1~deb13u1.dsc
d5b414aab3a53c5523e6b46a7282dfbd7ba3c24c 5775248 bind9_9.20.18.orig.tar.xz
4904ac8b3d2ee5bf695d3e000dd6f92eefaf4293 833 bind9_9.20.18.orig.tar.xz.asc
52f31cc0a7cc0c420f2e4a7a6fb8f908f50b6198 61968 bind9_9.20.18-1~deb13u1.debian.tar.xz
d2db3c549ae428642598f5857a3138b988cf3866 14802 bind9_9.20.18-1~deb13u1_amd64.buildinfo
Checksums-Sha256:
b53f64dde0b5c42be3cd56410481899fca8dfaec7e6f08dc94d5fb50a8fc8b35 3197 bind9_9.20.18-1~deb13u1.dsc
dfc546c990ac4515529cd45c4dd995862b18ae8a2d0cb29208e8896a5d325331 5775248 bind9_9.20.18.orig.tar.xz
d56f087e30a8efd1b624acdf06203bb45fe8cfca18e9565c8a566957edacf069 833 bind9_9.20.18.orig.tar.xz.asc
8637cc9863804bac64b896fa0a2957506731b02b5975b8afab9a52efd77c5f28 61968 bind9_9.20.18-1~deb13u1.debian.tar.xz
b876f8dc67f98e93e0b858bbae9128276a48a10c224255a433934f98f6dda90d 14802 bind9_9.20.18-1~deb13u1_amd64.buildinfo
Files:
a5da262af7401d4c83d233dac0559306 3197 net optional bind9_9.20.18-1~deb13u1.dsc
cb5cf30e0a66d259cba3ed98cba45bbe 5775248 net optional bind9_9.20.18.orig.tar.xz
d6a52189ccf01693bda76b381a5b9476 833 net optional bind9_9.20.18.orig.tar.xz.asc
a3cc856ad9e06394f5e3f5d105f16d32 61968 net optional bind9_9.20.18-1~deb13u1.debian.tar.xz
d6a5028245b81107c8d1eec807f932be 14802 net optional bind9_9.20.18-1~deb13u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=kfIu
-----END PGP SIGNATURE-----