-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 30 Oct 2026 21:28:27 +0800
Source: squid
Binary: squid squid-cgi squid-cgi-dbgsym squid-dbgsym squid-openssl squid-openssl-dbgsym squid-purge squid-purge-dbgsym squidclient squidclient-dbgsym
Architecture: amd64
Version: 6.13-2+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: amd64 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 squid      - Full featured Web Proxy cache (HTTP proxy GnuTLS flavour)
 squid-cgi  - Full featured Web Proxy cache (HTTP proxy) - control CGI
 squid-openssl - Full featured Web Proxy cache (HTTP proxy OpenSSL flavour)
 squid-purge - Full featured Web Proxy cache (HTTP proxy) - cache management uti
 squidclient - Full featured Web Proxy cache (HTTP proxy) - HTTP(S) message util
Changes:
 squid (6.13-2+deb13u4) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-2026-61642: Reject prohibited bare identity Transfer-Encoding.
     Add debian/patches/CVE-2026-61642.patch.
   * CVE-2026-104786: Bound HTTP authentication credential encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * SQUID-2026:8: Bound ICAP authentication annotation encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * ICAP username encoding follow-up: Bound the independent X-Client-Username
     encoder. Add debian/patches/icap-username-encoding.patch.
   * CVE-2026-62846: Reject illegal FTP command framing. Add
     debian/patches/CVE-2026-62846-523ed3b0.patch.
Checksums-Sha1:
 bcc3a8b0ab0ee170741bec6a71f9111f36b49424 150128 squid-cgi-dbgsym_6.13-2+deb13u4_amd64.deb
 49dfb3145007327e13a3194885c0a0108e96ce01 164400 squid-cgi_6.13-2+deb13u4_amd64.deb
 42c0a6b93658a439c04f5db2d1668daaa0db4e41 23698012 squid-dbgsym_6.13-2+deb13u4_amd64.deb
 5f68677255d767cef63f53d9e9b70e41d4a13b10 25475500 squid-openssl-dbgsym_6.13-2+deb13u4_amd64.deb
 56c212aca7ea82404459b6353465bff4fa1b4cb8 2681808 squid-openssl_6.13-2+deb13u4_amd64.deb
 c77bb6e3dab1060ff86bf5901103183ca28c0fb5 88600 squid-purge-dbgsym_6.13-2+deb13u4_amd64.deb
 ecce5306d0f6036dc61750dee47c1788a2e6e10b 156632 squid-purge_6.13-2+deb13u4_amd64.deb
 2c810c0129b9d4679936a46bcf260fe94e68a3dd 10456 squid_6.13-2+deb13u4_amd64-buildd.buildinfo
 17426852c09c531a53037ae80fe80d4208835abd 2799148 squid_6.13-2+deb13u4_amd64.deb
 632d80dd420e4046a5e39e91986a6b9417759c53 194636 squidclient-dbgsym_6.13-2+deb13u4_amd64.deb
 4d9baa16a99e9f697abc4d45c8be258df0b7c232 167700 squidclient_6.13-2+deb13u4_amd64.deb
Checksums-Sha256:
 88eb32c7e4a25e45d9ea4c35ed7ee3df68861a71bd44735f99752bed711776ec 150128 squid-cgi-dbgsym_6.13-2+deb13u4_amd64.deb
 5c405cee2d22fe2b25a854e3e983dc149ce60300b58b0f466d82c14143e67d8c 164400 squid-cgi_6.13-2+deb13u4_amd64.deb
 7d4f1bd88df30feaa05eb790b6e025b3647dedac77b7ebc79e99a4083d74beac 23698012 squid-dbgsym_6.13-2+deb13u4_amd64.deb
 9effbc65c41b1381ba4a5d05796054b88934f587f7b1b91fafceef5ba61454c1 25475500 squid-openssl-dbgsym_6.13-2+deb13u4_amd64.deb
 28b98cfafd0fa84605999c034c20f5ba26ddd4f2f13d6d8648867db1d1c1bd0d 2681808 squid-openssl_6.13-2+deb13u4_amd64.deb
 09810fa5ddf4a734f35df0d2da3716ee4a5bf652c4b7e5e97ea2220b64d9205f 88600 squid-purge-dbgsym_6.13-2+deb13u4_amd64.deb
 f68a21e925245dbcc82585e85248325bab4046e361de36de4598af1811aa675c 156632 squid-purge_6.13-2+deb13u4_amd64.deb
 af4d7a9e76d08c1a21c4236cffcd04fce06930f3566b0e3d647fbf60fad98745 10456 squid_6.13-2+deb13u4_amd64-buildd.buildinfo
 77f18142d8bb0e5cccf9845accf20007c3c4ea09eb216e6d98b2c43c746c96da 2799148 squid_6.13-2+deb13u4_amd64.deb
 6db6e1d30fd88fab47f33aaabd9ffdcf016053f13063d1ba801bb5ae6906bf73 194636 squidclient-dbgsym_6.13-2+deb13u4_amd64.deb
 e6cf7ce88ca2d7d137bb60137c858c951320a32abe3db5f82a143febb947ed30 167700 squidclient_6.13-2+deb13u4_amd64.deb
Files:
 683f12204353a91e16fd2a518dedf658 150128 debug optional squid-cgi-dbgsym_6.13-2+deb13u4_amd64.deb
 4f754ae86b225c39704f704dc45941e5 164400 web optional squid-cgi_6.13-2+deb13u4_amd64.deb
 9ad47f8cbea0b77b2db87972327cab88 23698012 debug optional squid-dbgsym_6.13-2+deb13u4_amd64.deb
 dac0c3e1574132b17944091ff9684e40 25475500 debug optional squid-openssl-dbgsym_6.13-2+deb13u4_amd64.deb
 4f109f534214b2ec4f685a71fe81efb1 2681808 web optional squid-openssl_6.13-2+deb13u4_amd64.deb
 a7def262bec6d27e67bb246489323ce3 88600 debug optional squid-purge-dbgsym_6.13-2+deb13u4_amd64.deb
 f24de0a6f9b1854a91eb1bbdbc1384bc 156632 web optional squid-purge_6.13-2+deb13u4_amd64.deb
 c8f7bdc9e6e0858e62d2c55e9c6b1cb1 10456 web optional squid_6.13-2+deb13u4_amd64-buildd.buildinfo
 9d9928d2bb6a56127bdbbc45eaee3463 2799148 web optional squid_6.13-2+deb13u4_amd64.deb
 67bd99bc54bb6fd7fc8ff46bc442ed43 194636 debug optional squidclient-dbgsym_6.13-2+deb13u4_amd64.deb
 233793c6319a324eaffd0d8d407f8162 167700 web optional squidclient_6.13-2+deb13u4_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=0EG/
-----END PGP SIGNATURE-----