-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 30 Oct 2026 21:28:27 +0800
Source: squid
Binary: squid squid-cgi squid-cgi-dbgsym squid-dbgsym squid-openssl squid-openssl-dbgsym squid-purge squid-purge-dbgsym squidclient squidclient-dbgsym
Architecture: armel
Version: 6.13-2+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-conova-02) <buildd_arm64-arm-conova-02@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 squid      - Full featured Web Proxy cache (HTTP proxy GnuTLS flavour)
 squid-cgi  - Full featured Web Proxy cache (HTTP proxy) - control CGI
 squid-openssl - Full featured Web Proxy cache (HTTP proxy OpenSSL flavour)
 squid-purge - Full featured Web Proxy cache (HTTP proxy) - cache management uti
 squidclient - Full featured Web Proxy cache (HTTP proxy) - HTTP(S) message util
Changes:
 squid (6.13-2+deb13u4) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-2026-61642: Reject prohibited bare identity Transfer-Encoding.
     Add debian/patches/CVE-2026-61642.patch.
   * CVE-2026-104786: Bound HTTP authentication credential encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * SQUID-2026:8: Bound ICAP authentication annotation encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * ICAP username encoding follow-up: Bound the independent X-Client-Username
     encoder. Add debian/patches/icap-username-encoding.patch.
   * CVE-2026-62846: Reject illegal FTP command framing. Add
     debian/patches/CVE-2026-62846-523ed3b0.patch.
Checksums-Sha1:
 408e68991d8cddeaeb7e4342252742824323c769 146300 squid-cgi-dbgsym_6.13-2+deb13u4_armel.deb
 f01d678c1ffd12048b525c1d99a921dac16594c6 159900 squid-cgi_6.13-2+deb13u4_armel.deb
 b289403876a00d428597673bdf99bd2732d15836 23026096 squid-dbgsym_6.13-2+deb13u4_armel.deb
 bc4f618b4533fd14f897f421ecea8cc7e9bb0892 24715080 squid-openssl-dbgsym_6.13-2+deb13u4_armel.deb
 96e72b3e727910fc9b1a409e87950d0c28d93c76 2353744 squid-openssl_6.13-2+deb13u4_armel.deb
 7aee8201637de1299abbd4d391b9aebf702627f1 89716 squid-purge-dbgsym_6.13-2+deb13u4_armel.deb
 fbce4af5cf236eee62179ddb638ad3fded3f487b 154808 squid-purge_6.13-2+deb13u4_armel.deb
 d39e6a4d3015eb9d94c9ae0d33f44dc8b8348895 10308 squid_6.13-2+deb13u4_armel-buildd.buildinfo
 532b13ac8eda4edff1355a2e431c991b5b4c6280 2491012 squid_6.13-2+deb13u4_armel.deb
 9b1fee52832e2b59a573332c761601b489659bf6 191556 squidclient-dbgsym_6.13-2+deb13u4_armel.deb
 3f2159650d1fd25f51b6bceb148db7e4cdd47cb7 163436 squidclient_6.13-2+deb13u4_armel.deb
Checksums-Sha256:
 753217ceef86ad9f03fa12d62c2bc9af967dcc33b1fcce293145a608f345f758 146300 squid-cgi-dbgsym_6.13-2+deb13u4_armel.deb
 e9db753f9fa7acce7f9678c9806c559b9489716b7d9df3bc53cf5e14331bb8c0 159900 squid-cgi_6.13-2+deb13u4_armel.deb
 5fdef4c2b39267172d4d3e047c7ccff5ae1b1723fd6477e1ebeffbccacdc65aa 23026096 squid-dbgsym_6.13-2+deb13u4_armel.deb
 ab26445d3e12ab437eb5f189e99db5b1019806e0e98d3bffad0a13b105721d66 24715080 squid-openssl-dbgsym_6.13-2+deb13u4_armel.deb
 9fccd207b64a9897014402417042af1206a3323e262cccd6f430cacb9e947aba 2353744 squid-openssl_6.13-2+deb13u4_armel.deb
 032b15630b93cbcb18bb80ced49958580d06923f156f6d867d1a3985ac3dce98 89716 squid-purge-dbgsym_6.13-2+deb13u4_armel.deb
 8848d6f19293aa4d508110feccadf84b0cb45648e93c79988007b901018695fc 154808 squid-purge_6.13-2+deb13u4_armel.deb
 595fc86e5fed6857d3c3d26585f8c2fa886a84755fc8fe9d17a0f13de6b3c0d0 10308 squid_6.13-2+deb13u4_armel-buildd.buildinfo
 b64f1509d066ac24965230daa232e51bfe63a210b959302bb2ce5a197c6cc5ad 2491012 squid_6.13-2+deb13u4_armel.deb
 c1947ba3a2044999725ce28b717cda34ff740735ed1f5dfd234c52d30fa63436 191556 squidclient-dbgsym_6.13-2+deb13u4_armel.deb
 32708e063bc2582da84db0d0ba57a2734dee9e61e5ddf47ab5952397b307d3ef 163436 squidclient_6.13-2+deb13u4_armel.deb
Files:
 96e4c0d354e607b877ea4a70fd835b25 146300 debug optional squid-cgi-dbgsym_6.13-2+deb13u4_armel.deb
 a0894752cceb8003680952354818309e 159900 web optional squid-cgi_6.13-2+deb13u4_armel.deb
 577c11e44b2973f3d072e82891c5b9a5 23026096 debug optional squid-dbgsym_6.13-2+deb13u4_armel.deb
 b0a5de5d7433c0d489a375d55ae3b3c8 24715080 debug optional squid-openssl-dbgsym_6.13-2+deb13u4_armel.deb
 ab8a1386557b1a26ef68faa233dd5656 2353744 web optional squid-openssl_6.13-2+deb13u4_armel.deb
 a1991dff836bd4e10b30e6ec108da107 89716 debug optional squid-purge-dbgsym_6.13-2+deb13u4_armel.deb
 daf6750dd1fc0022664681f10345216a 154808 web optional squid-purge_6.13-2+deb13u4_armel.deb
 accd34ade3d8927ec30a5dd5295957fd 10308 web optional squid_6.13-2+deb13u4_armel-buildd.buildinfo
 041f3d014cd9583075d580d6035ba9c1 2491012 web optional squid_6.13-2+deb13u4_armel.deb
 f54afca3916afe61bd45bc31a3c62eea 191556 debug optional squidclient-dbgsym_6.13-2+deb13u4_armel.deb
 83157c30242b8a6ab4147fe9ab0683ce 163436 web optional squidclient_6.13-2+deb13u4_armel.deb

-----BEGIN PGP SIGNATURE-----
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=gJFp
-----END PGP SIGNATURE-----