-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 11 Nov 2026 13:51:11 +0800
Source: c-ares
Binary: libc-ares-dev libcares2 libcares2-dbgsym
Architecture: riscv64
Version: 1.34.9-1~deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-manda-03) <buildd_riscv64-rv-manda-03@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libc-ares-dev - asynchronous name resolver - development files
 libcares2  - asynchronous name resolver
Changes:
 c-ares (1.34.9-1~deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * New upstream stable point release.
   * CVE-2026-33630: Fix query-completion use-after-free and double-free.
   * CVE-2026-69184: Bound DNS compression pointer traversal.
   * CVE-2026-69186: Limit record-count memory amplification.
   * GHSA-wpr3-8q3r-4q8c: Fix cancellation after connection failure.
   * GHSA-fqh5-3x7m-wp44: Reject replies from the wrong server.
   * GHSA-97vq-4mxv-7vhm: Fix lookup use-after-free after failed shutdown.
   * GHSA-rf6g-ww74-97qh: Fix cancellation and channel shutdown use-after-free.
   * GHSA-mw23-pfg6-2x9r: Fix connection use-after-free in socket callback.
   * GHSA-v33j-65h4-4ch8: Fix cancellation in server-status callback.
   * GHSA-pj7p-v3cw-hq66: Fix server-record use-after-free on reconfiguration.
   * GHSA-grv7-fq5q-9vfc: Fix cached-answer use-after-free.
   * GHSA-ph6c-3cvx-mq6v: Fix concurrent server update buffer overflow.
   * GHSA-cfcv-8v2j-qj6r: Fix uninitialized IPv6 address data.
   * GHSA-wrgc-prmw-27xh: Prevent cache reuse with different EDNS options.
   * Drop CVE-2025-62408 patch, included upstream.
Checksums-Sha1:
 81996df4535160d579588a1b53ebcdfaa916ea94 7401 c-ares_1.34.9-1~deb13u1_riscv64-buildd.buildinfo
 e58faaef15028122f4c1e1b2da9c4cba7521f0da 425280 libc-ares-dev_1.34.9-1~deb13u1_riscv64.deb
 364acca5ff2081b55f22b89bdc2b1c22ccf53f6e 334312 libcares2-dbgsym_1.34.9-1~deb13u1_riscv64.deb
 9c8dad76187994503a5e1670ec69c29626e42731 107648 libcares2_1.34.9-1~deb13u1_riscv64.deb
Checksums-Sha256:
 88602f9290dda9df4fafaa420f2084b1a07740db06c9471c9084502196ead243 7401 c-ares_1.34.9-1~deb13u1_riscv64-buildd.buildinfo
 bce6dcf4734418918f276c039d26d8ee6614b6fda01e4ae382eca7cea59b0d20 425280 libc-ares-dev_1.34.9-1~deb13u1_riscv64.deb
 3dfe30a7e71046ac22e663a19d29bfd0ac8bbedd957a7640a743f16a1d92ba1e 334312 libcares2-dbgsym_1.34.9-1~deb13u1_riscv64.deb
 785e06ba7cf0bd4e9d7b6a9888cda56c26aab5eacc96e08d8fdb72fe10202cca 107648 libcares2_1.34.9-1~deb13u1_riscv64.deb
Files:
 01c5355ea5bf2e060455e482831fab7a 7401 libs optional c-ares_1.34.9-1~deb13u1_riscv64-buildd.buildinfo
 f7467d0f35f3d10c16fcd435eda9af61 425280 libdevel optional libc-ares-dev_1.34.9-1~deb13u1_riscv64.deb
 594d774810dc8f62d57f81473af8393b 334312 debug optional libcares2-dbgsym_1.34.9-1~deb13u1_riscv64.deb
 b62e293ac5b63ecc561486c7dc9317a4 107648 libs optional libcares2_1.34.9-1~deb13u1_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=tQwu
-----END PGP SIGNATURE-----