-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 11 Nov 2026 13:51:11 +0800
Source: c-ares
Binary: libc-ares-dev libcares2 libcares2-dbgsym
Architecture: armel
Version: 1.34.9-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libc-ares-dev - asynchronous name resolver - development files
 libcares2  - asynchronous name resolver
Changes:
 c-ares (1.34.9-1~deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * New upstream stable point release.
   * CVE-2026-33630: Fix query-completion use-after-free and double-free.
   * CVE-2026-69184: Bound DNS compression pointer traversal.
   * CVE-2026-69186: Limit record-count memory amplification.
   * GHSA-wpr3-8q3r-4q8c: Fix cancellation after connection failure.
   * GHSA-fqh5-3x7m-wp44: Reject replies from the wrong server.
   * GHSA-97vq-4mxv-7vhm: Fix lookup use-after-free after failed shutdown.
   * GHSA-rf6g-ww74-97qh: Fix cancellation and channel shutdown use-after-free.
   * GHSA-mw23-pfg6-2x9r: Fix connection use-after-free in socket callback.
   * GHSA-v33j-65h4-4ch8: Fix cancellation in server-status callback.
   * GHSA-pj7p-v3cw-hq66: Fix server-record use-after-free on reconfiguration.
   * GHSA-grv7-fq5q-9vfc: Fix cached-answer use-after-free.
   * GHSA-ph6c-3cvx-mq6v: Fix concurrent server update buffer overflow.
   * GHSA-cfcv-8v2j-qj6r: Fix uninitialized IPv6 address data.
   * GHSA-wrgc-prmw-27xh: Prevent cache reuse with different EDNS options.
   * Drop CVE-2025-62408 patch, included upstream.
Checksums-Sha1:
 4cf0b821708f5b8f1ad221efac7442367d6ecd64 7300 c-ares_1.34.9-1~deb13u1_armel-buildd.buildinfo
 75ef69e08114e93081e0662fe9d189a5aad9da34 222336 libc-ares-dev_1.34.9-1~deb13u1_armel.deb
 2f27c5f18e0aaed60622ecb7402d91bb08f5b0a8 343428 libcares2-dbgsym_1.34.9-1~deb13u1_armel.deb
 2dca98c6a9e751eb4afc2f0bcbd14afcf07fa5e7 82336 libcares2_1.34.9-1~deb13u1_armel.deb
Checksums-Sha256:
 0e30b781a93a271516e81736063846d21f7ca9a7d19a1ae986fb90d85ee69a68 7300 c-ares_1.34.9-1~deb13u1_armel-buildd.buildinfo
 0651b1052160e3ea4d929caf48da38b26bfe8f80907c84a5010bcd79ca742cc7 222336 libc-ares-dev_1.34.9-1~deb13u1_armel.deb
 27a95e17a2499e57359d5e511af618d0c2007acd3c5788e59f886d8dfd819671 343428 libcares2-dbgsym_1.34.9-1~deb13u1_armel.deb
 d126f4580ac5b0b6b0cc4f9f40bb6df77c62a8825c7a9ab0aac4820586758075 82336 libcares2_1.34.9-1~deb13u1_armel.deb
Files:
 100e0191c0353a9eb8607c4447b34565 7300 libs optional c-ares_1.34.9-1~deb13u1_armel-buildd.buildinfo
 f4708cb7df469cf734aa2e29d9efc5a8 222336 libdevel optional libc-ares-dev_1.34.9-1~deb13u1_armel.deb
 be9bdc553dd3384ca9f33a3a166ceb75 343428 debug optional libcares2-dbgsym_1.34.9-1~deb13u1_armel.deb
 8c209325dbde57e52cb544c9615beddd 82336 libs optional libcares2_1.34.9-1~deb13u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=B0bN
-----END PGP SIGNATURE-----