-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 22 Oct 2025 17:38:58 +0200
Source: bind9
Binary: bind9-doc bind9utils dnsutils
Architecture: all
Version: 1:9.18.41-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9-doc  - Documentation for BIND 9
 bind9utils - Transitional package for bind9-utils
 dnsutils   - Transitional package for bind9-dnsutils
Changes:
 bind9 (1:9.18.41-1~deb12u1) bookworm-security; urgency=high
 .
   * New upstream version 9.18.41
    - [CVE-2025-8677]: DNSSEC validation fails if matching but invalid
      DNSKEY is found
    - [CVE-2025-40778]: Address various spoofing attacks.
    - [CVE-2025-40780]: Cache-poisoning due to weak pseudo-random number
      generator
Checksums-Sha1:
 0496cdfcb4a51b4099b35cd66e51f70446d9ed96 3509060 bind9-doc_9.18.41-1~deb12u1_all.deb
 0e9a98d92b37a3e3d7d3b039d7647ee0d5818cd6 12014 bind9_9.18.41-1~deb12u1_all-buildd.buildinfo
 78afc3f848234c4d262a95e841469e6ec3a8962a 11244 bind9utils_9.18.41-1~deb12u1_all.deb
 8e39e2f26e5b9f59269b2cc4095572e4f131b1d8 11240 dnsutils_9.18.41-1~deb12u1_all.deb
Checksums-Sha256:
 d3f55d922d9efdd5f41ce6d964174c395b4952f5fcee3afb31220eb77bf630a1 3509060 bind9-doc_9.18.41-1~deb12u1_all.deb
 326a30f40e2bec99843a44a02d1e558e10e882bf09893f6a6987cc465c4ae69b 12014 bind9_9.18.41-1~deb12u1_all-buildd.buildinfo
 5396e80eb1ede0d71d20947a93d9c32aa7be71b5aaaae264031891267b2f32bd 11244 bind9utils_9.18.41-1~deb12u1_all.deb
 ab57ab9fcd78a0f0858160ebb4e66424563b403d64120d4faf3da43e0829b845 11240 dnsutils_9.18.41-1~deb12u1_all.deb
Files:
 8e53fb4f26c52837bb6dee28e9caba4e 3509060 doc optional bind9-doc_9.18.41-1~deb12u1_all.deb
 93456410f65df82ed6bc5e84d209489e 12014 net optional bind9_9.18.41-1~deb12u1_all-buildd.buildinfo
 9e6a59fe2dcd4d0f6c36e1bf5a6213f9 11244 oldlibs optional bind9utils_9.18.41-1~deb12u1_all.deb
 13212909d62e0d3294cd1164fe2c4a02 11240 oldlibs optional dnsutils_9.18.41-1~deb12u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=PcT7
-----END PGP SIGNATURE-----