-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 11 Nov 2026 13:51:11 +0800
Source: c-ares
Binary: libc-ares-dev libcares2 libcares2-dbgsym
Architecture: i386
Version: 1.34.9-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: i386 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libc-ares-dev - asynchronous name resolver - development files
 libcares2  - asynchronous name resolver
Changes:
 c-ares (1.34.9-1~deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * New upstream stable point release.
   * CVE-2026-33630: Fix query-completion use-after-free and double-free.
   * CVE-2026-69184: Bound DNS compression pointer traversal.
   * CVE-2026-69186: Limit record-count memory amplification.
   * GHSA-wpr3-8q3r-4q8c: Fix cancellation after connection failure.
   * GHSA-fqh5-3x7m-wp44: Reject replies from the wrong server.
   * GHSA-97vq-4mxv-7vhm: Fix lookup use-after-free after failed shutdown.
   * GHSA-rf6g-ww74-97qh: Fix cancellation and channel shutdown use-after-free.
   * GHSA-mw23-pfg6-2x9r: Fix connection use-after-free in socket callback.
   * GHSA-v33j-65h4-4ch8: Fix cancellation in server-status callback.
   * GHSA-pj7p-v3cw-hq66: Fix server-record use-after-free on reconfiguration.
   * GHSA-grv7-fq5q-9vfc: Fix cached-answer use-after-free.
   * GHSA-ph6c-3cvx-mq6v: Fix concurrent server update buffer overflow.
   * GHSA-cfcv-8v2j-qj6r: Fix uninitialized IPv6 address data.
   * GHSA-wrgc-prmw-27xh: Prevent cache reuse with different EDNS options.
   * Drop CVE-2025-62408 patch, included upstream.
Checksums-Sha1:
 5f681becdd0a8713cbb424530101e3b07692ef11 7349 c-ares_1.34.9-1~deb13u1_i386-buildd.buildinfo
 a2eae2a61b7de6a825bc70c15cae12e463b9be78 258268 libc-ares-dev_1.34.9-1~deb13u1_i386.deb
 ba3eb7fe9e16bfd7b8ab602bf098eeb17b269175 305344 libcares2-dbgsym_1.34.9-1~deb13u1_i386.deb
 8c1d2d99fbbbc87d30d735e8f0526860c6a5b735 118416 libcares2_1.34.9-1~deb13u1_i386.deb
Checksums-Sha256:
 f1b8be01c50882f206bb1eb9bd62428454fb29973cf3da8624eb5ef38744b12f 7349 c-ares_1.34.9-1~deb13u1_i386-buildd.buildinfo
 6469dc30d0f04dc7fa3816f9b87d5659b0d7a6e5da2d03a06ed8ce396118b4ce 258268 libc-ares-dev_1.34.9-1~deb13u1_i386.deb
 aae5bfbf3ec82f8b8ac6e24e06b07d0673d13367305bc3ba380a1cee51febdf2 305344 libcares2-dbgsym_1.34.9-1~deb13u1_i386.deb
 de59417385338a9deeeb87d489d480cc5f9dbccdbb17547e093a42c1204e1d65 118416 libcares2_1.34.9-1~deb13u1_i386.deb
Files:
 d77662742809518d521d85e5ad87f608 7349 libs optional c-ares_1.34.9-1~deb13u1_i386-buildd.buildinfo
 afc230a25a58b5d2ed6043a53f615986 258268 libdevel optional libc-ares-dev_1.34.9-1~deb13u1_i386.deb
 2bf970829287fd5cd2ccddbd3312d4ed 305344 debug optional libcares2-dbgsym_1.34.9-1~deb13u1_i386.deb
 119402ab66feae60c3ed00d25fe7d07d 118416 libs optional libcares2_1.34.9-1~deb13u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=s/oC
-----END PGP SIGNATURE-----