-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 14 Dec 2025 15:24:14 +0100 Source: c-ares Binary: libc-ares-dev libcares2 libcares2-dbgsym Architecture: amd64 Version: 1.34.5-1+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Gregor Jasny Description: libc-ares-dev - asynchronous name resolver - development files libcares2 - asynchronous name resolver Changes: c-ares (1.34.5-1+deb13u1) trixie-security; urgency=medium . * Apply patch to fix use-after-free (fixes CVE-2025-62408) Checksums-Sha1: 7247ba77452736dba23aef44e104b493f1d80ccc 7153 c-ares_1.34.5-1+deb13u1_amd64-buildd.buildinfo df85291570dde99d0e36b489aa0faeda720ec09b 226168 libc-ares-dev_1.34.5-1+deb13u1_amd64.deb 0de13a2c0e2c34a3c15ce73b8e4785c82c4a879b 334188 libcares2-dbgsym_1.34.5-1+deb13u1_amd64.deb 82c30b2adc94d31141729fd7aa7a86d6f72218dd 98272 libcares2_1.34.5-1+deb13u1_amd64.deb Checksums-Sha256: 477b0dcd1ceaa487f8493379c6a1f9ce5e165c99dcc146dd6a9caeeb63423fe1 7153 c-ares_1.34.5-1+deb13u1_amd64-buildd.buildinfo 0270c69a1229fdb60e198e8ba84c8c38cdfd020009cfefee59ad253bcec26d44 226168 libc-ares-dev_1.34.5-1+deb13u1_amd64.deb fdd210e7dd19d81505a3ebfd407be0299041976cc6f6f85c0bcd08e9c7efb3c7 334188 libcares2-dbgsym_1.34.5-1+deb13u1_amd64.deb 5034a2c34ea4730797df1a5f6a0ec142d7d09ce6923c06e167f08ad2e69a4218 98272 libcares2_1.34.5-1+deb13u1_amd64.deb Files: 5d51b31c7eb6bfc2769eafe3a5fc978b 7153 libs optional c-ares_1.34.5-1+deb13u1_amd64-buildd.buildinfo 23ceed1d3c4f93e62d39443b36803303 226168 libdevel optional libc-ares-dev_1.34.5-1+deb13u1_amd64.deb 3ba61cd17235c5997bc369dea38faa30 334188 debug optional libcares2-dbgsym_1.34.5-1+deb13u1_amd64.deb 8903a84cac9be97a92a558c84ea54067 98272 libs optional libcares2_1.34.5-1+deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXNeYFUF3FbHcrtSeIy3Pg040HrAFAmlCW90ACgkQIy3Pg040 HrDRvRAAmxKanHWi0lRImfz9nbf/l3dZuMGebI1XyR1oYRgnbXgm18JcezAH9ioh stftRucGgMhGQKgVeGmjHzW5p18xQhiUKMd4bJcE9GYJ34xaunQe1H0XYj5KieqR 34yzh6P05bW+4PqglEZ1YgzvZl7ADJ77fv/ORGc05vEUhhH5WV3qIg1E6flRrqOn BuffFrv+iBEgfFmI66SgU3QVtUlUvqKeV2hawPIiVSndzskGaTWT7oYEDPbe+nKg KGpowksaNr+pOcra+Vk3rOsKH0EY0VrKfMYMXb1ig7XZVxXoEqcIatw+DH8b2Iuv y5YB7fyDJnTjPjK/aPB1kz19whvOWrgyAAbTgAHPpg8YCmkTbDDw8IZKl1KUl8Rw mF22y59zbTAo+6ez77yIpgLyISqgBpzt6c8mIZ7pesTdwa3avSlPbEnuaRBw9gwz IOZpiwbCxFZrkZReAE70k57p6DMZxTVxTwygSL/CWmzFPOwQsZLo8wbnvzhjGlaV +AfPAViIj0ily5d5bUqnr6Vko4u9mXCbXWI2RP/MzoHBXy0eMJO5tpFC8fr/2iXb KhahRNUB6ETQLjXVYHQpRui5+J49lIfjOdXhaBb81SkvHVYU9Tc32+n6c9SX7um3 aqFfT1LjLPmwCb5wp5SZZIU8DXidO/FhvOQM/CAjljii7uz1RG4= =dFFv -----END PGP SIGNATURE-----