-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 22 Oct 2025 17:38:58 +0200
Source: bind9
Binary: bind9 bind9-dbgsym bind9-dev bind9-dnsutils bind9-dnsutils-dbgsym bind9-host bind9-host-dbgsym bind9-libs bind9-libs-dbgsym bind9-utils bind9-utils-dbgsym
Architecture: amd64
Version: 1:9.18.41-1~deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Description:
 bind9      - Internet Domain Name Server
 bind9-dev  - Static Libraries and Headers used by BIND 9
 bind9-dnsutils - Clients provided with BIND 9
 bind9-host - DNS Lookup Utility
 bind9-libs - Shared Libraries used by BIND 9
 bind9-utils - Utilities for BIND 9
Changes:
 bind9 (1:9.18.41-1~deb12u1) bookworm-security; urgency=high
 .
   * New upstream version 9.18.41
    - [CVE-2025-8677]: DNSSEC validation fails if matching but invalid
      DNSKEY is found
    - [CVE-2025-40778]: Address various spoofing attacks.
    - [CVE-2025-40780]: Cache-poisoning due to weak pseudo-random number
      generator
Checksums-Sha1:
 12e45d2454ca01c73f2d2f0696a70ea2944e60d0 647848 bind9-dbgsym_9.18.41-1~deb12u1_amd64.deb
 e8c03d743b263f9146adcd839a04959f2a47ce2d 267316 bind9-dev_9.18.41-1~deb12u1_amd64.deb
 ba532a4ace3d69229c12cbcb94db9bd1fe0fb536 391588 bind9-dnsutils-dbgsym_9.18.41-1~deb12u1_amd64.deb
 07627168d526c21407607b373860dbbb426be6e7 155444 bind9-dnsutils_9.18.41-1~deb12u1_amd64.deb
 3f8875cb7fcd1d3117cbf205d7ceb14b59311ff4 103996 bind9-host-dbgsym_9.18.41-1~deb12u1_amd64.deb
 80b6d7a0c2ebe57f7512e5d902843fbe0aace5b7 54708 bind9-host_9.18.41-1~deb12u1_amd64.deb
 9a0f2202056b0db6ab5517427c68af7fa033e3fb 3742096 bind9-libs-dbgsym_9.18.41-1~deb12u1_amd64.deb
 e994de208f84f07a5ae7fd82e8ba380c579099e8 1180884 bind9-libs_9.18.41-1~deb12u1_amd64.deb
 eda256d3ebb57e96d16b93cd336d7eaf6fbe8808 387772 bind9-utils-dbgsym_9.18.41-1~deb12u1_amd64.deb
 dcf92f8d0578c29400402e1cd2e0b01117b73c1a 159944 bind9-utils_9.18.41-1~deb12u1_amd64.deb
 f86e6aacaefced82e5bfd4835092e3a06cab644c 11138 bind9_9.18.41-1~deb12u1_amd64-buildd.buildinfo
 a55bdc3b15d02e9e6a9a06398b9350b9b09d8daf 249708 bind9_9.18.41-1~deb12u1_amd64.deb
Checksums-Sha256:
 14f3bf3020c5f70ec4cab75862242377695baafcb0c55d96eff60b8d0627aa28 647848 bind9-dbgsym_9.18.41-1~deb12u1_amd64.deb
 a7b1016442a66baf2f208e26847d21ff89fd70c30f8907b91f5cd58badf2f00b 267316 bind9-dev_9.18.41-1~deb12u1_amd64.deb
 b59b4a98011ff81f056922a69caab33569d8bfa4f9a4c1d9d332152d8ee0fbd2 391588 bind9-dnsutils-dbgsym_9.18.41-1~deb12u1_amd64.deb
 911a2f67e9554d194f4f84b2a5203047e4de35de885d95d52ee49ae3b0af7157 155444 bind9-dnsutils_9.18.41-1~deb12u1_amd64.deb
 c2f8fc54750395cd9da73878436bc5474a1447bfcc123676f22fe30bfd94b7b0 103996 bind9-host-dbgsym_9.18.41-1~deb12u1_amd64.deb
 cfa7349b41ea6283edd70c62728ded42129d9f69fc30c023698bfa968e2959e0 54708 bind9-host_9.18.41-1~deb12u1_amd64.deb
 21c51c28d53272e16a5f9e39bb39bd2ab05b3caf4a92fa187d4d08440914cd87 3742096 bind9-libs-dbgsym_9.18.41-1~deb12u1_amd64.deb
 3204944757ad0da425b5deb218dacd285a0bde0000f91d6de3290e3a29f9bb60 1180884 bind9-libs_9.18.41-1~deb12u1_amd64.deb
 992279f04206ad7e8f5a9cd0c02427c0f48a46067621f6914b4697b942d4248e 387772 bind9-utils-dbgsym_9.18.41-1~deb12u1_amd64.deb
 a7af6ed862f52c75b3ef8e208915b07bd5ecc05215a50db2cc07094fddfb9827 159944 bind9-utils_9.18.41-1~deb12u1_amd64.deb
 b1aeec24f9065fa2b8b4cd1df10646ad22f8f4320728d6bdc9815536e394bd87 11138 bind9_9.18.41-1~deb12u1_amd64-buildd.buildinfo
 5b0f2d053ea603fc039a3d5363e4736156e7a67c02d8410a239afe5a9989db02 249708 bind9_9.18.41-1~deb12u1_amd64.deb
Files:
 4dd966cdd19608e3112a8235e71d087e 647848 debug optional bind9-dbgsym_9.18.41-1~deb12u1_amd64.deb
 d0dc2e2b18d48bfb7ec3ed2c5ae0a10f 267316 devel optional bind9-dev_9.18.41-1~deb12u1_amd64.deb
 ee540f6acbf4b1c515fb4de644dd93c4 391588 debug optional bind9-dnsutils-dbgsym_9.18.41-1~deb12u1_amd64.deb
 fffd2b22803e1976364fe7d61c54b06f 155444 net standard bind9-dnsutils_9.18.41-1~deb12u1_amd64.deb
 598d1f9e63c5bb64c0bc36e0b6422689 103996 debug optional bind9-host-dbgsym_9.18.41-1~deb12u1_amd64.deb
 814201a68d4e11750de8c1bb234bb129 54708 net standard bind9-host_9.18.41-1~deb12u1_amd64.deb
 2a54f67693f132e28dfa3364d1879116 3742096 debug optional bind9-libs-dbgsym_9.18.41-1~deb12u1_amd64.deb
 4c3f18c70be87df0703212207e8acfbd 1180884 libs standard bind9-libs_9.18.41-1~deb12u1_amd64.deb
 ce3b1207580442f10df397c5437028ad 387772 debug optional bind9-utils-dbgsym_9.18.41-1~deb12u1_amd64.deb
 099a666c91acd5d6b725f25eaffb16e5 159944 net optional bind9-utils_9.18.41-1~deb12u1_amd64.deb
 1d696bddc9c38abb1047fc5bde0343d1 11138 net optional bind9_9.18.41-1~deb12u1_amd64-buildd.buildinfo
 d9c67b6700b9f1f256624840ecbecf4e 249708 net optional bind9_9.18.41-1~deb12u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=D5eL
-----END PGP SIGNATURE-----