-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 30 Oct 2026 21:28:27 +0800
Source: squid
Binary: squid squid-cgi squid-cgi-dbgsym squid-dbgsym squid-openssl squid-openssl-dbgsym squid-purge squid-purge-dbgsym squidclient squidclient-dbgsym
Architecture: arm64
Version: 6.13-2+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-conova-03) <buildd_arm64-arm-conova-03@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 squid      - Full featured Web Proxy cache (HTTP proxy GnuTLS flavour)
 squid-cgi  - Full featured Web Proxy cache (HTTP proxy) - control CGI
 squid-openssl - Full featured Web Proxy cache (HTTP proxy OpenSSL flavour)
 squid-purge - Full featured Web Proxy cache (HTTP proxy) - cache management uti
 squidclient - Full featured Web Proxy cache (HTTP proxy) - HTTP(S) message util
Changes:
 squid (6.13-2+deb13u4) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-2026-61642: Reject prohibited bare identity Transfer-Encoding.
     Add debian/patches/CVE-2026-61642.patch.
   * CVE-2026-104786: Bound HTTP authentication credential encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * SQUID-2026:8: Bound ICAP authentication annotation encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * ICAP username encoding follow-up: Bound the independent X-Client-Username
     encoder. Add debian/patches/icap-username-encoding.patch.
   * CVE-2026-62846: Reject illegal FTP command framing. Add
     debian/patches/CVE-2026-62846-523ed3b0.patch.
Checksums-Sha1:
 940d2a14693948bdd3a481c8bf1dee1b36e46e3a 148568 squid-cgi-dbgsym_6.13-2+deb13u4_arm64.deb
 cc6cae645939b79b56462c358b8fe6c676fcbea3 162284 squid-cgi_6.13-2+deb13u4_arm64.deb
 0f08b03397720d08c518e57864113c1e03107303 23150816 squid-dbgsym_6.13-2+deb13u4_arm64.deb
 9abe3c5a7b149b5014c7bd86b9c576d3a9c7f988 24871860 squid-openssl-dbgsym_6.13-2+deb13u4_arm64.deb
 b1505e64de9797143f17ceb11e0264e454a96bf0 2371752 squid-openssl_6.13-2+deb13u4_arm64.deb
 17a5a4142af9f722f78b4d1ec8235dbd484325f5 88824 squid-purge-dbgsym_6.13-2+deb13u4_arm64.deb
 8ea1f9b58e154a984ea3dac5c22fc6d4dc39071f 155540 squid-purge_6.13-2+deb13u4_arm64.deb
 352e223e93ef08a79efa442cbcba041a4f1f1b83 10440 squid_6.13-2+deb13u4_arm64-buildd.buildinfo
 3ba85a3c8c01d1c3bcba258d6b4b6e82da9e5acc 2502344 squid_6.13-2+deb13u4_arm64.deb
 61b6c7a7d881caaecc76acc366d180b2ceacff77 190972 squidclient-dbgsym_6.13-2+deb13u4_arm64.deb
 eafb9a93c853a120cdcf12c2cd47d5aa9e1fc5d0 164768 squidclient_6.13-2+deb13u4_arm64.deb
Checksums-Sha256:
 cbf62c71411a174923b0e103078bf6d70121f16487becb407557377c7fd57ea3 148568 squid-cgi-dbgsym_6.13-2+deb13u4_arm64.deb
 0a1b88ec6bd95e6be961e55ba883241f3bb674d2f8239e955fdc8f4428cc7f63 162284 squid-cgi_6.13-2+deb13u4_arm64.deb
 d9707678901aba6d6aafe901e20949f14b764e43e9425fcbf724ab3d93611475 23150816 squid-dbgsym_6.13-2+deb13u4_arm64.deb
 9950fb704eceed01b29e25eca80dd320febc248e2225b03c127e728ba50d46cf 24871860 squid-openssl-dbgsym_6.13-2+deb13u4_arm64.deb
 0098a49bf2d23cfda87b2e687fe0bd1f4c34ae04d34be31573c47ee7d5a48c38 2371752 squid-openssl_6.13-2+deb13u4_arm64.deb
 32d880b05ee1d3ca986f1b2eefa03fd1e9947ef180b02a0ab3be08b0a87f47da 88824 squid-purge-dbgsym_6.13-2+deb13u4_arm64.deb
 965fd9d4a27aa0b4ee55855d4e51bde72a9f1a7b43d09a725413ea7cdc517ce6 155540 squid-purge_6.13-2+deb13u4_arm64.deb
 0d9cf539637ec1598cd2a02dac82107238311a909b3855c96d57d158f8841c9a 10440 squid_6.13-2+deb13u4_arm64-buildd.buildinfo
 ad0f19675d2077ea54821b311f2f294bca7cd137b224f5a88a0701201af0482f 2502344 squid_6.13-2+deb13u4_arm64.deb
 d7fa9dcce7065e85bfa0150e3bc37e328b919736d8a6dddc13a581e35613d656 190972 squidclient-dbgsym_6.13-2+deb13u4_arm64.deb
 4e5109012203dfb677f0cbe2cc01c8ddd3558af61ca102eeca03a9ebd09233b3 164768 squidclient_6.13-2+deb13u4_arm64.deb
Files:
 349ab7e8f8b1ae65cb402c8b6528f349 148568 debug optional squid-cgi-dbgsym_6.13-2+deb13u4_arm64.deb
 0a0ab8231a01a7d1801b0f843a253999 162284 web optional squid-cgi_6.13-2+deb13u4_arm64.deb
 5634ac1d41c00f24dfcc70c08ba72ef6 23150816 debug optional squid-dbgsym_6.13-2+deb13u4_arm64.deb
 584e707ac6ba6688728c276cf9b06a3e 24871860 debug optional squid-openssl-dbgsym_6.13-2+deb13u4_arm64.deb
 ec1dbb96635108bcbeea89cec46357c6 2371752 web optional squid-openssl_6.13-2+deb13u4_arm64.deb
 a415b929b1f18bde30ece93c5a583818 88824 debug optional squid-purge-dbgsym_6.13-2+deb13u4_arm64.deb
 9a739f9c21982ecdb6c7758d7cea46bc 155540 web optional squid-purge_6.13-2+deb13u4_arm64.deb
 83dc7fd6dc8865779b1c001e11c35a02 10440 web optional squid_6.13-2+deb13u4_arm64-buildd.buildinfo
 294a76acc49ce81564e9e6466a01b5e4 2502344 web optional squid_6.13-2+deb13u4_arm64.deb
 fd24ce5f24b79de65b0711b3513e6edd 190972 debug optional squidclient-dbgsym_6.13-2+deb13u4_arm64.deb
 a4bc8908cb26cf9cf9e6e04e47b65a0a 164768 web optional squidclient_6.13-2+deb13u4_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=xbJS
-----END PGP SIGNATURE-----