-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 11 Nov 2026 13:51:11 +0800
Source: c-ares
Architecture: source
Version: 1.34.9-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Gregor Jasny <gjasny@googlemail.com>
Changed-By: Aron Xu <aron@debian.org>
Changes:
 c-ares (1.34.9-1~deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * New upstream stable point release.
   * CVE-2026-33630: Fix query-completion use-after-free and double-free.
   * CVE-2026-69184: Bound DNS compression pointer traversal.
   * CVE-2026-69186: Limit record-count memory amplification.
   * GHSA-wpr3-8q3r-4q8c: Fix cancellation after connection failure.
   * GHSA-fqh5-3x7m-wp44: Reject replies from the wrong server.
   * GHSA-97vq-4mxv-7vhm: Fix lookup use-after-free after failed shutdown.
   * GHSA-rf6g-ww74-97qh: Fix cancellation and channel shutdown use-after-free.
   * GHSA-mw23-pfg6-2x9r: Fix connection use-after-free in socket callback.
   * GHSA-v33j-65h4-4ch8: Fix cancellation in server-status callback.
   * GHSA-pj7p-v3cw-hq66: Fix server-record use-after-free on reconfiguration.
   * GHSA-grv7-fq5q-9vfc: Fix cached-answer use-after-free.
   * GHSA-ph6c-3cvx-mq6v: Fix concurrent server update buffer overflow.
   * GHSA-cfcv-8v2j-qj6r: Fix uninitialized IPv6 address data.
   * GHSA-wrgc-prmw-27xh: Prevent cache reuse with different EDNS options.
   * Drop CVE-2025-62408 patch, included upstream.
Checksums-Sha1:
 93e8e66cc16ab41ef165918764a757e55ffa9067 1888 c-ares_1.34.9-1~deb13u1.dsc
 0c75a56e0bf179fe796fcdec5bedd24decabc2a5 1083895 c-ares_1.34.9.orig.tar.gz
 ecb6b8155ac1dd202de73ee11e3c168085b17f2d 265 c-ares_1.34.9.orig.tar.gz.asc
 868222caecf47fffb8d94a4a4b431d4d3f7c900f 19132 c-ares_1.34.9-1~deb13u1.debian.tar.xz
 a35dccd569bec6121dea9583cc018ac412a195c4 7055 c-ares_1.34.9-1~deb13u1_source.buildinfo
Checksums-Sha256:
 497dd2e71ac7ddb45cf6c540916e693db8767433c18f6ddd8e5c7653623c225a 1888 c-ares_1.34.9-1~deb13u1.dsc
 9364b70a12eb59a06830fb488d9357f90100dff0d98b23ea3593a183d43e6f2f 1083895 c-ares_1.34.9.orig.tar.gz
 47c70be87138c8b67c0d7dd5b14557a3f545a7047bd7c28ed5aab1b66aae2f84 265 c-ares_1.34.9.orig.tar.gz.asc
 85c330a08d892a3b91d9678954512763fa2022395a67ee11c30f74fd3e9166be 19132 c-ares_1.34.9-1~deb13u1.debian.tar.xz
 44a60c6ce75eb85cd6a81a7850a101fd52988a1201b7abb721d4e865108dc289 7055 c-ares_1.34.9-1~deb13u1_source.buildinfo
Files:
 aae93c247c1a29ead1fe8626be570434 1888 libs optional c-ares_1.34.9-1~deb13u1.dsc
 1d60941afcc95e5ae08f2d27001bb751 1083895 libs optional c-ares_1.34.9.orig.tar.gz
 0b54ecbb31b1cbb88038f51fa693cee7 265 libs optional c-ares_1.34.9.orig.tar.gz.asc
 13d2ebedb07f3e50f1ee2952337c5362 19132 libs optional c-ares_1.34.9-1~deb13u1.debian.tar.xz
 1319927fde5ad72cccaefd5465b5b04f 7055 libs optional c-ares_1.34.9-1~deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmr2BSYACgkQ+GQ1dHE8
m66QLAf/Sq//YhQX1qKCU1YbmSq1MkhqAjvM770uiZdQ5k3TGrEhDF06kMdrBe1A
IgTCDyi6MDyVLlemVa7Xh8wJblmYVVPnMqrzxMIZWBjon8P8N1SKiB5XSwMqd/g+
Y/XZaNiUlaB65vqRQvAjX8WR24aeaMgkrAqn4wggrBsNJU7y6oH3FVcf4Cl4Sn+m
uxdnV0m945kgkVgy/rdmuU/pKGCuZuzB7OnbpCcRAfX5X89s7ZxyjGj2fGF8BJhY
vYGp9wZLg+yG7aB9V045ToITwqqnFzz9oMiOfbm/tRR3USZsj3e49A9Fe0URwQK+
CaZophcZ4c/49iSvmqU1PqzsXUBU0A==
=7+W9
-----END PGP SIGNATURE-----