-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 30 Oct 2026 21:28:27 +0800
Source: squid
Binary: squid squid-cgi squid-cgi-dbgsym squid-dbgsym squid-openssl squid-openssl-dbgsym squid-purge squid-purge-dbgsym squidclient squidclient-dbgsym
Architecture: s390x
Version: 6.13-2+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 squid      - Full featured Web Proxy cache (HTTP proxy GnuTLS flavour)
 squid-cgi  - Full featured Web Proxy cache (HTTP proxy) - control CGI
 squid-openssl - Full featured Web Proxy cache (HTTP proxy OpenSSL flavour)
 squid-purge - Full featured Web Proxy cache (HTTP proxy) - cache management uti
 squidclient - Full featured Web Proxy cache (HTTP proxy) - HTTP(S) message util
Changes:
 squid (6.13-2+deb13u4) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-2026-61642: Reject prohibited bare identity Transfer-Encoding.
     Add debian/patches/CVE-2026-61642.patch.
   * CVE-2026-104786: Bound HTTP authentication credential encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * SQUID-2026:8: Bound ICAP authentication annotation encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * ICAP username encoding follow-up: Bound the independent X-Client-Username
     encoder. Add debian/patches/icap-username-encoding.patch.
   * CVE-2026-62846: Reject illegal FTP command framing. Add
     debian/patches/CVE-2026-62846-523ed3b0.patch.
Checksums-Sha1:
 d4d4430b4cc02079a6fef0d251465dc096fa9571 150308 squid-cgi-dbgsym_6.13-2+deb13u4_s390x.deb
 43fae1ccf3b275d424129b8137b70d44f35b8221 163372 squid-cgi_6.13-2+deb13u4_s390x.deb
 7cda4cf18180018e4387506254185c8cbe6d94dc 23379660 squid-dbgsym_6.13-2+deb13u4_s390x.deb
 ddbeff6724b9cff8c27ca8bb5919cec224fcba15 25080832 squid-openssl-dbgsym_6.13-2+deb13u4_s390x.deb
 edabdc92af11741145b9cc2158dae538bcb4fdc3 2492464 squid-openssl_6.13-2+deb13u4_s390x.deb
 adab6947389c70adb4358870d9bf43cfbd8eceb5 88680 squid-purge-dbgsym_6.13-2+deb13u4_s390x.deb
 32948c1aeef42d827f26e7b772864638048d263c 156040 squid-purge_6.13-2+deb13u4_s390x.deb
 bddaf09b68542213656d4a46538c69183f47013c 10318 squid_6.13-2+deb13u4_s390x-buildd.buildinfo
 0f09b57c0c1e3400d723137a61b3d1a406ba3793 2611500 squid_6.13-2+deb13u4_s390x.deb
 aba77403d865bf460bd527127949df4cb498aeb5 195172 squidclient-dbgsym_6.13-2+deb13u4_s390x.deb
 2ea216f503c9ac88bf8706a3b18cae46012eaf33 166380 squidclient_6.13-2+deb13u4_s390x.deb
Checksums-Sha256:
 6e30f06212ea6428177f9fe66da06ff24ccc7a3e7cfc9ff0912efff6ad36087b 150308 squid-cgi-dbgsym_6.13-2+deb13u4_s390x.deb
 f244b1e028c53b822189fe0acfc2b2b8ae634575094633c251bf3a9ddb617e97 163372 squid-cgi_6.13-2+deb13u4_s390x.deb
 eec3db9f70484e6ab204b58fc996a1ac90dd288261eec5b99193c64e1fbbefad 23379660 squid-dbgsym_6.13-2+deb13u4_s390x.deb
 1127987db8e17b29f6037f9549c7a1a37c39eec0917529b8b873919166e39905 25080832 squid-openssl-dbgsym_6.13-2+deb13u4_s390x.deb
 64ae7af443c28f13595e802dc6bef997623aa824150ebb92ab9609b27b0682e4 2492464 squid-openssl_6.13-2+deb13u4_s390x.deb
 0fd85a95f06a685ea791c0df7a633be4b5948eb3fe0af74053fce8e24ef78d7e 88680 squid-purge-dbgsym_6.13-2+deb13u4_s390x.deb
 6f0472c0edb1a5ed09a8c1d32b12e399260314236446fa25d89c45aea6c0dd03 156040 squid-purge_6.13-2+deb13u4_s390x.deb
 f73b91e97599dc72bb38e47d45aa1b20592a9cae6d3fae27d138b4c0687b25b4 10318 squid_6.13-2+deb13u4_s390x-buildd.buildinfo
 feff110cc45963b5e892705ffffc69dc88e465235d5843cb3b327555d68334bf 2611500 squid_6.13-2+deb13u4_s390x.deb
 aff0420c1bfc5959c4823752e55451ae4a01ee37e1ecef01ba99899cdad9d9a1 195172 squidclient-dbgsym_6.13-2+deb13u4_s390x.deb
 0383bbfe3eddc4b1dc3e6d3df70bec00e9948c722c63a6382a6101fbea900fac 166380 squidclient_6.13-2+deb13u4_s390x.deb
Files:
 3a7f545d7e4d7c1c13fb3106ded00d9a 150308 debug optional squid-cgi-dbgsym_6.13-2+deb13u4_s390x.deb
 d380764ef6bc617ff73ebdeeca4b42d3 163372 web optional squid-cgi_6.13-2+deb13u4_s390x.deb
 d3204483ba53ef30adee556ea3e95f25 23379660 debug optional squid-dbgsym_6.13-2+deb13u4_s390x.deb
 2318c00815ef87024a4b23e02fe75cba 25080832 debug optional squid-openssl-dbgsym_6.13-2+deb13u4_s390x.deb
 bd48db3c4c3e8286719ee09daea896bd 2492464 web optional squid-openssl_6.13-2+deb13u4_s390x.deb
 6a658c30bb55e0ab57d8cbf43ab560f4 88680 debug optional squid-purge-dbgsym_6.13-2+deb13u4_s390x.deb
 4d0d64bb66f55a22161f2a4d64512101 156040 web optional squid-purge_6.13-2+deb13u4_s390x.deb
 84686abd58d949281ce6e26626e9314d 10318 web optional squid_6.13-2+deb13u4_s390x-buildd.buildinfo
 29f4cdb5ee7b37f699f86ce77792e1c9 2611500 web optional squid_6.13-2+deb13u4_s390x.deb
 90f3d395e8b1ca813d3013cd17b9b9a1 195172 debug optional squidclient-dbgsym_6.13-2+deb13u4_s390x.deb
 44eaaa8a65d3016bda74491fd934f366 166380 web optional squidclient_6.13-2+deb13u4_s390x.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEPFXUCSHwedwJxYxMojUpyTy8GroFAmrpwQAACgkQojUpyTy8
Grqw9Q//fxuaO6I2fKnRGZ8vgJJg3SPIrkeiEDkGvmJwGzykGf6PcK9dzqG8O6IF
vBJ1r5J7mcs4G8ES/FvsuhduNc7Z/fjf7ARsdG6qQgGF5vZXcAChV/PG0RTkJEnt
lN5WzQJ0pnvHaNa0aL0wBTrrZ55VgqdzIxodkIscaNitGJXsLZeyqUlD0NayPqqU
RAX576VZZgOdjU4piIXXp0cPjFFUQ9uhwlNqmG3CwHtHq3XJy9UiqzWOtB2k2Q00
Ye0lLbLjLR8jPBYtBnlR5jZtwKsPrDvYH+2WehrHEFjQI8rOy9LHJrKokK0pkrL6
Lm1/urXLeik9TUX1u2jvt8yR5sfO8x1k5/pIGehgHowNVIusHVeCJrqNooRjfR2u
8nnCGzbnmoUxShk9/MBhuxKLuzPp5UI5oMKrhpWN8u+BBtKC0D5IUBWmTdKYVXTv
f9yKuMPML2nAL2s6AFXIioVL+WAFcG78a2jUPiFLprS7VM4UxHtALI9BKyUkSkj+
UEffKBqaRhGLfKSi3Ysrvxvw4HKmGtIN/0hDJ52lS/A8+8x8FmEFE0lGwZ4G6OVT
W0XVNEV4hqEke5t4N/fXAszgiSU3s3liURB4mij3dXDb9rK86ywgh1fPn2X7h/sR
Uiv7uNLC9FAJSrld9SYtmJmjIn4oCPe95N8Ogd07UodDftJI0eQ=
=tZSF
-----END PGP SIGNATURE-----