-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 11 Nov 2026 13:51:11 +0800
Source: c-ares
Binary: libc-ares-dev libcares2 libcares2-dbgsym
Architecture: armhf
Version: 1.34.9-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-ubc-03) <buildd_arm64-arm-ubc-03@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libc-ares-dev - asynchronous name resolver - development files
 libcares2  - asynchronous name resolver
Changes:
 c-ares (1.34.9-1~deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * New upstream stable point release.
   * CVE-2026-33630: Fix query-completion use-after-free and double-free.
   * CVE-2026-69184: Bound DNS compression pointer traversal.
   * CVE-2026-69186: Limit record-count memory amplification.
   * GHSA-wpr3-8q3r-4q8c: Fix cancellation after connection failure.
   * GHSA-fqh5-3x7m-wp44: Reject replies from the wrong server.
   * GHSA-97vq-4mxv-7vhm: Fix lookup use-after-free after failed shutdown.
   * GHSA-rf6g-ww74-97qh: Fix cancellation and channel shutdown use-after-free.
   * GHSA-mw23-pfg6-2x9r: Fix connection use-after-free in socket callback.
   * GHSA-v33j-65h4-4ch8: Fix cancellation in server-status callback.
   * GHSA-pj7p-v3cw-hq66: Fix server-record use-after-free on reconfiguration.
   * GHSA-grv7-fq5q-9vfc: Fix cached-answer use-after-free.
   * GHSA-ph6c-3cvx-mq6v: Fix concurrent server update buffer overflow.
   * GHSA-cfcv-8v2j-qj6r: Fix uninitialized IPv6 address data.
   * GHSA-wrgc-prmw-27xh: Prevent cache reuse with different EDNS options.
   * Drop CVE-2025-62408 patch, included upstream.
Checksums-Sha1:
 77e6aa9245aeb09abbbefe0e998e7316e6f2bc4c 7314 c-ares_1.34.9-1~deb13u1_armhf-buildd.buildinfo
 3c16bb609e4de613149cb3d7a478201c77d35bb8 222572 libc-ares-dev_1.34.9-1~deb13u1_armhf.deb
 43b38230fdd7ae34004f73fdc0d7f7bc6f49a06d 349656 libcares2-dbgsym_1.34.9-1~deb13u1_armhf.deb
 71b9d72f70a9181f031c0795eb3556472cfe5400 83748 libcares2_1.34.9-1~deb13u1_armhf.deb
Checksums-Sha256:
 43fa406eb1dd566ad03bc0bd55c1233d5e17abc49f28aba626b828b1fb078f03 7314 c-ares_1.34.9-1~deb13u1_armhf-buildd.buildinfo
 f1d793465a9ad19d958dffeb06a0840eca35824b243ac3694dcadfec5da0459a 222572 libc-ares-dev_1.34.9-1~deb13u1_armhf.deb
 3d44ad48d5706ba0a1366299a5030c982d96c89180e496b5d8bb5382d89c9c57 349656 libcares2-dbgsym_1.34.9-1~deb13u1_armhf.deb
 c24f13f23d3c1b80d48c1c559e19720e6ef954b5f5800969850fe3b877217b8a 83748 libcares2_1.34.9-1~deb13u1_armhf.deb
Files:
 2a9e75536a20aa72f80baf773fd9cbc3 7314 libs optional c-ares_1.34.9-1~deb13u1_armhf-buildd.buildinfo
 c84f74459e11327a63ee609dd6c07e25 222572 libdevel optional libc-ares-dev_1.34.9-1~deb13u1_armhf.deb
 96eed0994828473c97a8efead6d46ed0 349656 debug optional libcares2-dbgsym_1.34.9-1~deb13u1_armhf.deb
 e9dded985e012e27df857eea6baac12b 83748 libs optional libcares2_1.34.9-1~deb13u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=60TM
-----END PGP SIGNATURE-----