-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 30 Oct 2026 21:28:27 +0800
Source: squid
Binary: squid squid-cgi squid-cgi-dbgsym squid-dbgsym squid-openssl squid-openssl-dbgsym squid-purge squid-purge-dbgsym squidclient squidclient-dbgsym
Architecture: armhf
Version: 6.13-2+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 squid      - Full featured Web Proxy cache (HTTP proxy GnuTLS flavour)
 squid-cgi  - Full featured Web Proxy cache (HTTP proxy) - control CGI
 squid-openssl - Full featured Web Proxy cache (HTTP proxy OpenSSL flavour)
 squid-purge - Full featured Web Proxy cache (HTTP proxy) - cache management uti
 squidclient - Full featured Web Proxy cache (HTTP proxy) - HTTP(S) message util
Changes:
 squid (6.13-2+deb13u4) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-2026-61642: Reject prohibited bare identity Transfer-Encoding.
     Add debian/patches/CVE-2026-61642.patch.
   * CVE-2026-104786: Bound HTTP authentication credential encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * SQUID-2026:8: Bound ICAP authentication annotation encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * ICAP username encoding follow-up: Bound the independent X-Client-Username
     encoder. Add debian/patches/icap-username-encoding.patch.
   * CVE-2026-62846: Reject illegal FTP command framing. Add
     debian/patches/CVE-2026-62846-523ed3b0.patch.
Checksums-Sha1:
 af31d9da466b720613e580f052d5a096fbffdf8a 146636 squid-cgi-dbgsym_6.13-2+deb13u4_armhf.deb
 577b6b083a950ba4d28c3ddc82a1ce2e0f7564d8 160260 squid-cgi_6.13-2+deb13u4_armhf.deb
 fd677ea89885eb03cc3d4b3e539a14b4e263d203 23010940 squid-dbgsym_6.13-2+deb13u4_armhf.deb
 1dc758143666ffbe03bf4d29b00213d5a0b4c1ac 24693200 squid-openssl-dbgsym_6.13-2+deb13u4_armhf.deb
 1fee696b475e262d1eba3c89314d625b50857f86 2408220 squid-openssl_6.13-2+deb13u4_armhf.deb
 f5f5c886e4317c2c8ea3fdb9eff5bfa898ac207d 89260 squid-purge-dbgsym_6.13-2+deb13u4_armhf.deb
 0b8a60d5af33b858af27cec8017d494c95ee8f13 154704 squid-purge_6.13-2+deb13u4_armhf.deb
 003a47f1d5d28c7ebf9cf90bd38cef47686ef7a6 10322 squid_6.13-2+deb13u4_armhf-buildd.buildinfo
 3c52e8291618b74c77ef6dfc4734642055c075dc 2537168 squid_6.13-2+deb13u4_armhf.deb
 dc40273770888aa6aabdc8e5905e6a2ed723bf03 192632 squidclient-dbgsym_6.13-2+deb13u4_armhf.deb
 e78895f942d1370930d2dc05bb6c5bee2709e3be 163512 squidclient_6.13-2+deb13u4_armhf.deb
Checksums-Sha256:
 43f6b152329c9cdad851398186f8b517afcf37d0ea375f5137408a295755f6ca 146636 squid-cgi-dbgsym_6.13-2+deb13u4_armhf.deb
 a622ae3f916b32c120a8553ff8ea816c4f5716a6f9bf8d0e9203b6eb0e11e3cd 160260 squid-cgi_6.13-2+deb13u4_armhf.deb
 ccfa25091826524bc3ddb68ccb8c32f9fbc15665f8e9455d20b3ac75d21dd86a 23010940 squid-dbgsym_6.13-2+deb13u4_armhf.deb
 c1095f03c30f0c17730723febc7ec2d203272f0c6392276a6524fb06c757a55c 24693200 squid-openssl-dbgsym_6.13-2+deb13u4_armhf.deb
 d5809f3a13e737f20d8b827b3840e046cebb726f19c4fd11da4616b1ac151da1 2408220 squid-openssl_6.13-2+deb13u4_armhf.deb
 6ab136bfc434305aa4b7e50f20c056599d8d88a3a2bc681fc941708a52933b1e 89260 squid-purge-dbgsym_6.13-2+deb13u4_armhf.deb
 e8ab0c1014889a8c165a6ff655b46f33831b8ab6e88816b878fdcda580fc0207 154704 squid-purge_6.13-2+deb13u4_armhf.deb
 7c470dbbef8c34263376cf30fb52ea653c044f37114d455cb5bb17094f4eb1a2 10322 squid_6.13-2+deb13u4_armhf-buildd.buildinfo
 4e1c7e55bcdc63a7b8a4a863a995d25ff5ef9ad76d8fcc0f2ea4516a650b03b7 2537168 squid_6.13-2+deb13u4_armhf.deb
 6bfb63aa91fbd21bea16bb7a9536de330b86a802e00b1d928aa4b68affbb22dd 192632 squidclient-dbgsym_6.13-2+deb13u4_armhf.deb
 47ae80eee1ec0ecce32df9a0d26736f841a1e90956f59a1a3cfccb0b265e8636 163512 squidclient_6.13-2+deb13u4_armhf.deb
Files:
 125341e2528e485ff117808570b3299c 146636 debug optional squid-cgi-dbgsym_6.13-2+deb13u4_armhf.deb
 95bb15fe9f384a6c190cf86fbc19a3cc 160260 web optional squid-cgi_6.13-2+deb13u4_armhf.deb
 07132efc642c644639786a8200ba675e 23010940 debug optional squid-dbgsym_6.13-2+deb13u4_armhf.deb
 1d84005f834ae2dd2569e5e18b86b805 24693200 debug optional squid-openssl-dbgsym_6.13-2+deb13u4_armhf.deb
 a5a625456d369f48064ab34e2229f878 2408220 web optional squid-openssl_6.13-2+deb13u4_armhf.deb
 5b3d4e1f8a2b85cf87859c5d05e09305 89260 debug optional squid-purge-dbgsym_6.13-2+deb13u4_armhf.deb
 086b16e6dbe2cc73f0e5c27a90e7e265 154704 web optional squid-purge_6.13-2+deb13u4_armhf.deb
 b16525d8b1645bc31292165f99342bb2 10322 web optional squid_6.13-2+deb13u4_armhf-buildd.buildinfo
 1ed5e10cff37fb5ec2b653e32368b3ca 2537168 web optional squid_6.13-2+deb13u4_armhf.deb
 6d369b75f9aac91e281d569d93f38462 192632 debug optional squidclient-dbgsym_6.13-2+deb13u4_armhf.deb
 7ed67f458802688623265129856a239d 163512 web optional squidclient_6.13-2+deb13u4_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=V5kt
-----END PGP SIGNATURE-----