-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 11 Nov 2026 13:51:11 +0800
Source: c-ares
Binary: libc-ares-dev libcares2 libcares2-dbgsym
Architecture: amd64
Version: 1.34.9-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libc-ares-dev - asynchronous name resolver - development files
 libcares2  - asynchronous name resolver
Changes:
 c-ares (1.34.9-1~deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * New upstream stable point release.
   * CVE-2026-33630: Fix query-completion use-after-free and double-free.
   * CVE-2026-69184: Bound DNS compression pointer traversal.
   * CVE-2026-69186: Limit record-count memory amplification.
   * GHSA-wpr3-8q3r-4q8c: Fix cancellation after connection failure.
   * GHSA-fqh5-3x7m-wp44: Reject replies from the wrong server.
   * GHSA-97vq-4mxv-7vhm: Fix lookup use-after-free after failed shutdown.
   * GHSA-rf6g-ww74-97qh: Fix cancellation and channel shutdown use-after-free.
   * GHSA-mw23-pfg6-2x9r: Fix connection use-after-free in socket callback.
   * GHSA-v33j-65h4-4ch8: Fix cancellation in server-status callback.
   * GHSA-pj7p-v3cw-hq66: Fix server-record use-after-free on reconfiguration.
   * GHSA-grv7-fq5q-9vfc: Fix cached-answer use-after-free.
   * GHSA-ph6c-3cvx-mq6v: Fix concurrent server update buffer overflow.
   * GHSA-cfcv-8v2j-qj6r: Fix uninitialized IPv6 address data.
   * GHSA-wrgc-prmw-27xh: Prevent cache reuse with different EDNS options.
   * Drop CVE-2025-62408 patch, included upstream.
Checksums-Sha1:
 912d2e9dd8150ae333f4e5ca6b87dcf14a26a6e7 7451 c-ares_1.34.9-1~deb13u1_amd64-buildd.buildinfo
 5826ae66033d298773a4b0831c4379dfdc2aa4d0 239552 libc-ares-dev_1.34.9-1~deb13u1_amd64.deb
 4388bf6ce813f0d443c41b565d4069f3c34a7a5e 345552 libcares2-dbgsym_1.34.9-1~deb13u1_amd64.deb
 621b7d567d8fc89a2631ac6ffa937619c223a206 102504 libcares2_1.34.9-1~deb13u1_amd64.deb
Checksums-Sha256:
 40378438b98f7ba860a9b1c2fce0227a64951fa2d55c729f80778ebf20534039 7451 c-ares_1.34.9-1~deb13u1_amd64-buildd.buildinfo
 3b60750a4cc2ee94c16723d6f67e8294da04036affc0edb9db045205f6b9f0d9 239552 libc-ares-dev_1.34.9-1~deb13u1_amd64.deb
 d1bf57137ff4c3b3510590427eeebd4ecad66c03e4984cb8718cc4dd85a598c1 345552 libcares2-dbgsym_1.34.9-1~deb13u1_amd64.deb
 acbe0ab2f6e5b41aabf9e03b6a65ca3fb0d48aeccc4550c418e3349b3008360a 102504 libcares2_1.34.9-1~deb13u1_amd64.deb
Files:
 6c1fd8d2e351d94aa8ef67c9871c6ebb 7451 libs optional c-ares_1.34.9-1~deb13u1_amd64-buildd.buildinfo
 21c9800c7a47a735a05ace2c57f3b921 239552 libdevel optional libc-ares-dev_1.34.9-1~deb13u1_amd64.deb
 1854477343a948fd1a659362937f5b41 345552 debug optional libcares2-dbgsym_1.34.9-1~deb13u1_amd64.deb
 bc531a7aabfa4be6dc85d6d490c827d3 102504 libs optional libcares2_1.34.9-1~deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=OS0r
-----END PGP SIGNATURE-----