-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 11 Nov 2026 13:51:11 +0800
Source: c-ares
Binary: libc-ares-dev libcares2 libcares2-dbgsym
Architecture: arm64
Version: 1.34.9-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-conova-02) <buildd_arm64-arm-conova-02@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libc-ares-dev - asynchronous name resolver - development files
 libcares2  - asynchronous name resolver
Changes:
 c-ares (1.34.9-1~deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * New upstream stable point release.
   * CVE-2026-33630: Fix query-completion use-after-free and double-free.
   * CVE-2026-69184: Bound DNS compression pointer traversal.
   * CVE-2026-69186: Limit record-count memory amplification.
   * GHSA-wpr3-8q3r-4q8c: Fix cancellation after connection failure.
   * GHSA-fqh5-3x7m-wp44: Reject replies from the wrong server.
   * GHSA-97vq-4mxv-7vhm: Fix lookup use-after-free after failed shutdown.
   * GHSA-rf6g-ww74-97qh: Fix cancellation and channel shutdown use-after-free.
   * GHSA-mw23-pfg6-2x9r: Fix connection use-after-free in socket callback.
   * GHSA-v33j-65h4-4ch8: Fix cancellation in server-status callback.
   * GHSA-pj7p-v3cw-hq66: Fix server-record use-after-free on reconfiguration.
   * GHSA-grv7-fq5q-9vfc: Fix cached-answer use-after-free.
   * GHSA-ph6c-3cvx-mq6v: Fix concurrent server update buffer overflow.
   * GHSA-cfcv-8v2j-qj6r: Fix uninitialized IPv6 address data.
   * GHSA-wrgc-prmw-27xh: Prevent cache reuse with different EDNS options.
   * Drop CVE-2025-62408 patch, included upstream.
Checksums-Sha1:
 55bce14a4eebeb31a254302a8c2a68c028b5ba1d 7435 c-ares_1.34.9-1~deb13u1_arm64-buildd.buildinfo
 0d5106aa8cade9a69b7290393b49f246b35c4419 238216 libc-ares-dev_1.34.9-1~deb13u1_arm64.deb
 b16b87bb74791e0b019ffd73195a24a72a977a0a 344616 libcares2-dbgsym_1.34.9-1~deb13u1_arm64.deb
 73d533624189c26e557a6cc62d86194adb59ff6a 96088 libcares2_1.34.9-1~deb13u1_arm64.deb
Checksums-Sha256:
 83169941f19c9f5ffd41d3f331e2b0d76c495adbf5883cff4d5bdc798edb3b9b 7435 c-ares_1.34.9-1~deb13u1_arm64-buildd.buildinfo
 ef5d4d00d42e17a1fa6e4762fdc1b92ce8bd37cf76fe79e29a184c34f5973ff3 238216 libc-ares-dev_1.34.9-1~deb13u1_arm64.deb
 a657799ff94855c5fb5d409e306647f70a878ae20a9b796bfebf3b0414502d77 344616 libcares2-dbgsym_1.34.9-1~deb13u1_arm64.deb
 52720d35356f24b133a15fcc7409b7b4680cc3f1e09a7dede0d02a2ded504171 96088 libcares2_1.34.9-1~deb13u1_arm64.deb
Files:
 02452a774d5510d1e56b4ff1d8fe7dd8 7435 libs optional c-ares_1.34.9-1~deb13u1_arm64-buildd.buildinfo
 ad86125257d01afa68d961c5d11095d5 238216 libdevel optional libc-ares-dev_1.34.9-1~deb13u1_arm64.deb
 e63bda787a35ba24fd4b1dbfc0440647 344616 debug optional libcares2-dbgsym_1.34.9-1~deb13u1_arm64.deb
 d1192adb60c424c8e0683e5f2b139ffa 96088 libs optional libcares2_1.34.9-1~deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=zmRf
-----END PGP SIGNATURE-----