-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 11 Nov 2026 13:51:11 +0800
Source: c-ares
Binary: libc-ares2
Architecture: all
Version: 1.34.9-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libc-ares2 - transitional package
Changes:
 c-ares (1.34.9-1~deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * New upstream stable point release.
   * CVE-2026-33630: Fix query-completion use-after-free and double-free.
   * CVE-2026-69184: Bound DNS compression pointer traversal.
   * CVE-2026-69186: Limit record-count memory amplification.
   * GHSA-wpr3-8q3r-4q8c: Fix cancellation after connection failure.
   * GHSA-fqh5-3x7m-wp44: Reject replies from the wrong server.
   * GHSA-97vq-4mxv-7vhm: Fix lookup use-after-free after failed shutdown.
   * GHSA-rf6g-ww74-97qh: Fix cancellation and channel shutdown use-after-free.
   * GHSA-mw23-pfg6-2x9r: Fix connection use-after-free in socket callback.
   * GHSA-v33j-65h4-4ch8: Fix cancellation in server-status callback.
   * GHSA-pj7p-v3cw-hq66: Fix server-record use-after-free on reconfiguration.
   * GHSA-grv7-fq5q-9vfc: Fix cached-answer use-after-free.
   * GHSA-ph6c-3cvx-mq6v: Fix concurrent server update buffer overflow.
   * GHSA-cfcv-8v2j-qj6r: Fix uninitialized IPv6 address data.
   * GHSA-wrgc-prmw-27xh: Prevent cache reuse with different EDNS options.
   * Drop CVE-2025-62408 patch, included upstream.
Checksums-Sha1:
 89b8fdada73fe7ddab19142ee5ab6c6f279bacc3 6829 c-ares_1.34.9-1~deb13u1_all-buildd.buildinfo
 b0b73b83d58124f24213ead485262dd3daaeb68c 9464 libc-ares2_1.34.9-1~deb13u1_all.deb
Checksums-Sha256:
 c98801a21c601a96c7d8ef2565ff5e63bba35c64c1f98a65a5ff104ce7c2e7f8 6829 c-ares_1.34.9-1~deb13u1_all-buildd.buildinfo
 4de4c70bfe7e62f8dd176783a08a8075a6c753b3030d0933a1a572877a92fdb4 9464 libc-ares2_1.34.9-1~deb13u1_all.deb
Files:
 2abe827db8893ebc4e3140af0483965c 6829 libs optional c-ares_1.34.9-1~deb13u1_all-buildd.buildinfo
 c2e0f83cafb73944bbbd806c9ac971ab 9464 oldlibs optional libc-ares2_1.34.9-1~deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=5+ll
-----END PGP SIGNATURE-----