From: ftpmaster@ftp-master.debian.org   
      
   -----BEGIN PGP SIGNED MESSAGE-----   
   Hash: SHA512   
      
   Format: 1.8   
   Date: Wed, 22 Oct 2025 18:00:33 +0200   
   Source: bind9   
   Architecture: source   
   Version: 1:9.20.15-1~deb13u1   
   Distribution: trixie-security   
   Urgency: high   
   Maintainer: Debian DNS Team    
   Changed-By: Ondřej Surý    
   Changes:   
    bind9 (1:9.20.15-1~deb13u1) trixie-security; urgency=high   
    .   
      * New upstream version 9.20.15   
       - [CVE-2025-8677]: DNSSEC validation fails if matching but invalid   
         DNSKEY is found   
       - [CVE-2025-40778]: Address various spoofing attacks.   
       - [CVE-2025-40780]: Cache-poisoning due to weak pseudo-random number   
         generator   
   Checksums-Sha1:   
    e2b9d8dc1b37e62b547f1bcbcc71f5a97c1d71a1 3197 bind9_9.20.15-1~deb13u1.dsc   
    ec1cdd69dee34b0b3a3fc126146e26a172873110 5765964 bind9_9.20.15.orig.tar.xz   
    5c30cd697e5bc4bdafbc5e28296781dac1225dd4 833 bind9_9.20.15.orig.tar.xz.asc   
    3a12069874106e5d12d073fbff9398a8eeef2e7f 61900 bind9_9.20.15-1~   
   eb13u1.debian.tar.xz   
    d3cc415e56af487b90979f9b0d5d6c4bcd19668b 14746 bind9_9.20.15-1~   
   eb13u1_amd64.buildinfo   
   Checksums-Sha256:   
    a327e32c45d6b72613a20a2a36edf6650f234735d1c9d1dc33f55544aa263a60 3197   
   bind9_9.20.15-1~deb13u1.dsc   
    d62b38fae48ba83fca6181112d0c71018d8b0f2ce285dc79dc6a0367722ccabb 5765964   
   bind9_9.20.15.orig.tar.xz   
    2e9215f01c68734fd03b207dc1dd62fe32af79d02fe8182002529faaca6c9361 833   
   bind9_9.20.15.orig.tar.xz.asc   
    ab95e35c4eb58cedf6fb3dece49ba2e4323a0cfd0ed6fc7ac03e1dfe5deec781 61900   
   bind9_9.20.15-1~deb13u1.debian.tar.xz   
    344e40e9175fb9e0b3076bb7559f9046b2bbeccea5166cd5ef80bce05c36d281 14746   
   bind9_9.20.15-1~deb13u1_amd64.buildinfo   
   Files:   
    30bce310499febfd32e92f76c6d96536 3197 net optional bind9_9.20.15-1~deb13u1.dsc   
    cb2486bdfed8959e58e36805c0f3e9f7 5765964 net optional bind9_9.2   
   .15.orig.tar.xz   
    9c93fed4851f94156a17f993eb394590 833 net optional bind9_9.20.15   
   orig.tar.xz.asc   
    54277e1adce642564778cd84b77ca74c 61900 net optional bind9_9.20.   
   5-1~deb13u1.debian.tar.xz   
    2d919656db6f49ae5f8d400b7d0f5d78 14746 net optional bind9_9.20.   
   5-1~deb13u1_amd64.buildinfo   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQKTBAEBCgB9FiEEw2Gx4wKVQ+vGJel9g3Kkd++uWcIFAmj5TTdfFIAAAAAALgAo   
   aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEMz   
   NjFCMUUzMDI5NTQzRUJDNjI1RTk3RDgzNzJBNDc3RUZBRTU5QzIACgkQg3Kkd++u   
   WcIDiQ/7BoxrVHnrR9JbXCtE8hX7qz/iAqRFBW0eR1En0V8UVDAZCMhxsIGoodWG   
   PxLlOM7i7Hyd4+KxqcCSw3OdvnGa8fjbNa6UQzZMcpCHaRSXOCqxjRlNSRf6GNDO   
   aZHygrF+c7biIz/VZ47gouidB5kPivoYOla4uRixDXYTg+gThj5EYlHm/A8cqLJs   
   9RTFKEixPjncSWY6ml3yk3XhvKmDGZyW3S+LMafKLU4s65GMZc9vczssgHRXRdDR   
   fil0tLcBUI3Q3iqajeh0P9JYPoKqdNL+/uPf3EwWhZAI+6hb4MewX6Jw34RtFc/P   
   +8uHoLJ8FhBX3LkvojzVwcAsCEsxKiUgddB+N/uf7LCJ0XDkzD5qx0vysnf87zVM   
   1SESsGduyLfXtCLbMLW6v+DKrA/nhIO+kFDB9e7FaT8zgIvory1rWWmVn4DJ+Ib5   
   edtMhJWokvyNOasQO6kNjGlRQn2FDXhV4XMnKeZqYXnrQPfcSjCe5mKEOdi7mLmT   
   gszwOYoMd7JH073ACkEEbmZdc+M82lkbEEu1jB2DMzLIqgPvY/bbsJ5h4mGj0AF1   
   dX3Ermato6qUBA8FvxA9TPak6cw6E1gGm6mhw2Vr59Km2zclW3lY8IOGfvHLeBoK   
   eoASI7r3wuxdityRr+mTCG+ZYfZjg9lpXVwXH/cI363/nXpOghY=   
   =rJqu   
   -----END PGP SIGNATURE-----   
      
      
   --==============S24858713674717831=Content-Type: application/pgp-signature   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaP3jtQAKCRCb9qggYcy5   
   IRjbAP95BOqQIxfI0DOveZ+0c/46p6PspruhtHH4L8/msjG8vQD/Z3ORnGv80Fhc   
   T1nTzaRYeLCjlnVNsnWaZ+8jni+BOQI=WOD5   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)