-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 11 Nov 2026 13:51:11 +0800 Source: c-ares Binary: libc-ares-dev libcares2 libcares2-dbgsym Architecture: ppc64el Version: 1.34.9-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Aron Xu Description: libc-ares-dev - asynchronous name resolver - development files libcares2 - asynchronous name resolver Changes: c-ares (1.34.9-1~deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * New upstream stable point release. * CVE-2026-33630: Fix query-completion use-after-free and double-free. * CVE-2026-69184: Bound DNS compression pointer traversal. * CVE-2026-69186: Limit record-count memory amplification. * GHSA-wpr3-8q3r-4q8c: Fix cancellation after connection failure. * GHSA-fqh5-3x7m-wp44: Reject replies from the wrong server. * GHSA-97vq-4mxv-7vhm: Fix lookup use-after-free after failed shutdown. * GHSA-rf6g-ww74-97qh: Fix cancellation and channel shutdown use-after-free. * GHSA-mw23-pfg6-2x9r: Fix connection use-after-free in socket callback. * GHSA-v33j-65h4-4ch8: Fix cancellation in server-status callback. * GHSA-pj7p-v3cw-hq66: Fix server-record use-after-free on reconfiguration. * GHSA-grv7-fq5q-9vfc: Fix cached-answer use-after-free. * GHSA-ph6c-3cvx-mq6v: Fix concurrent server update buffer overflow. * GHSA-cfcv-8v2j-qj6r: Fix uninitialized IPv6 address data. * GHSA-wrgc-prmw-27xh: Prevent cache reuse with different EDNS options. * Drop CVE-2025-62408 patch, included upstream. Checksums-Sha1: 34821ca1d10acd43d34e8518702b94bedefd238e 7456 c-ares_1.34.9-1~deb13u1_ppc64el-buildd.buildinfo ca92b0804d2b344c8df64bed2988e4637e692375 257156 libc-ares-dev_1.34.9-1~deb13u1_ppc64el.deb 178d05de982eb4092c2949549615dccdff9decf9 360300 libcares2-dbgsym_1.34.9-1~deb13u1_ppc64el.deb 2ff43f9f3016e49d6213370dba8ec6f20b8e4424 116704 libcares2_1.34.9-1~deb13u1_ppc64el.deb Checksums-Sha256: e7871ffe9d0b81abfe8bc58f5a479096c80bf82b23b58e7acf6202a6bf0f6fbd 7456 c-ares_1.34.9-1~deb13u1_ppc64el-buildd.buildinfo 1a9ac2bb6878182b41aa1d697427650de693d3ca614f6b77b9027ad0fb1461a3 257156 libc-ares-dev_1.34.9-1~deb13u1_ppc64el.deb c27b989b948a5d8c2a11a604fdda5c7982af2d3745498824446cd6f807ad767d 360300 libcares2-dbgsym_1.34.9-1~deb13u1_ppc64el.deb bd605b06a490e83bc3df81b972b8ab12d29753199583b1c7e847cccc76279567 116704 libcares2_1.34.9-1~deb13u1_ppc64el.deb Files: 9706135d74e528c3460483463c41c49b 7456 libs optional c-ares_1.34.9-1~deb13u1_ppc64el-buildd.buildinfo fe0c92d258f06daab7e10bc4e113dde5 257156 libdevel optional libc-ares-dev_1.34.9-1~deb13u1_ppc64el.deb 3f48d983880e274f75be995ce67eaee7 360300 debug optional libcares2-dbgsym_1.34.9-1~deb13u1_ppc64el.deb 7dcb2475e743b16f43ae424e22620368 116704 libs optional libcares2_1.34.9-1~deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETLpi2USYGUNSlYhoNINNphgym2QFAmr2CtgACgkQNINNphgy m2Q+mRAAsEUi9LsyOFaqDI+Wa7CKJsKETNG6mdfreJqmyOJlHN3QLtqFwTI40Tu2 9u64/9NLzHkzcMWrIEcIQTVRj5NlkKNxWLIcbKpI90SosbWqgq+7zLqqoN32mGEz BkuZF8O75OztDK/4K7ad74cYtN4K6SsIW1BTPG+C3PBtUCRuW0VW5u1od4EoJa7B koS9xdX6Q9yktjLv9wsUKdJb1HTOgSK8sdVsCfNEvFNT4PZ2RS+l+atUEOV3FjTJ iXvpuGihn0A5sUtfi3BembPNy36v14mFYGEO4Oc+VvyIb4+LYQMUzDeuhqh95knC +WhahwV2DGSk6BbaU2sbsKu0IbEqb8OB8edRzJ2A21J9GtbnUK2VHd7hX3EYnGez c0GGKhr5xgI8fDBnuIK+2kG1iDJlXkGFWni3jJ8DbkMLmlBWLEkMbgPcytRXhe+U GLcibD6u63ROnOaMcmiOuIwc2JF0gW6DjLfktjmjDQu6d8jCut/MY29ak4bqnjG7 wezPLeaIQcOUlJsgrS/GRl3qC5oS69xt4waDxHbgBJ+UDhJTCVU+gmqoA4wfFUBz j3wjyDSVAvomhlxL64cbqQgYpXaFk84A6Fe1tQ/IeLdjj1etlysRPln0bmHku5pS 6Gs/pGzsJ3uJBeEaXn51gQxvX417A8lCz+n4weroo3AFl58okc8= =CIUF -----END PGP SIGNATURE-----