-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 11 Nov 2026 13:51:11 +0800
Source: c-ares
Binary: libc-ares-dev libcares2 libcares2-dbgsym
Architecture: s390x
Version: 1.34.9-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (ziehrer) <buildd_s390x-ziehrer@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libc-ares-dev - asynchronous name resolver - development files
 libcares2  - asynchronous name resolver
Changes:
 c-ares (1.34.9-1~deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * New upstream stable point release.
   * CVE-2026-33630: Fix query-completion use-after-free and double-free.
   * CVE-2026-69184: Bound DNS compression pointer traversal.
   * CVE-2026-69186: Limit record-count memory amplification.
   * GHSA-wpr3-8q3r-4q8c: Fix cancellation after connection failure.
   * GHSA-fqh5-3x7m-wp44: Reject replies from the wrong server.
   * GHSA-97vq-4mxv-7vhm: Fix lookup use-after-free after failed shutdown.
   * GHSA-rf6g-ww74-97qh: Fix cancellation and channel shutdown use-after-free.
   * GHSA-mw23-pfg6-2x9r: Fix connection use-after-free in socket callback.
   * GHSA-v33j-65h4-4ch8: Fix cancellation in server-status callback.
   * GHSA-pj7p-v3cw-hq66: Fix server-record use-after-free on reconfiguration.
   * GHSA-grv7-fq5q-9vfc: Fix cached-answer use-after-free.
   * GHSA-ph6c-3cvx-mq6v: Fix concurrent server update buffer overflow.
   * GHSA-cfcv-8v2j-qj6r: Fix uninitialized IPv6 address data.
   * GHSA-wrgc-prmw-27xh: Prevent cache reuse with different EDNS options.
   * Drop CVE-2025-62408 patch, included upstream.
Checksums-Sha1:
 a662a98ee1738b764313a9e2132629a0f69f8075 7310 c-ares_1.34.9-1~deb13u1_s390x-buildd.buildinfo
 7f9f1220d4b83d2781bb2fd8a80599caed0e4730 237440 libc-ares-dev_1.34.9-1~deb13u1_s390x.deb
 b77e17b3d81753be47e50abeda9383d3eb563276 351616 libcares2-dbgsym_1.34.9-1~deb13u1_s390x.deb
 307a1342387f6fadaa3a08b98ce4c80102c0b55a 99432 libcares2_1.34.9-1~deb13u1_s390x.deb
Checksums-Sha256:
 f8ff23e883e71deecdfb67302739d24cd7391736bcec1804fea671e3168ce29e 7310 c-ares_1.34.9-1~deb13u1_s390x-buildd.buildinfo
 b4566e29292b8edac83be2a328fabd08f93c5126c7385102dea8460da71b809b 237440 libc-ares-dev_1.34.9-1~deb13u1_s390x.deb
 1057d10f16ffae9e334008ee096884377a6edb88348aa94371803239d14683ca 351616 libcares2-dbgsym_1.34.9-1~deb13u1_s390x.deb
 f484d53b97ec2e0b9b7679b454a05471a66e1f657f6e62bb5f057aca556ec737 99432 libcares2_1.34.9-1~deb13u1_s390x.deb
Files:
 903a3abe1419dbe17882d0cd77d1a3dd 7310 libs optional c-ares_1.34.9-1~deb13u1_s390x-buildd.buildinfo
 e32f76296b9ac0f40f007961873b73ba 237440 libdevel optional libc-ares-dev_1.34.9-1~deb13u1_s390x.deb
 96178ac1b29a61cc566577cdb7240264 351616 debug optional libcares2-dbgsym_1.34.9-1~deb13u1_s390x.deb
 7514486afbdf12e5add2d583fef3e5b2 99432 libs optional libcares2_1.34.9-1~deb13u1_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=qJ1g
-----END PGP SIGNATURE-----