-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 30 Oct 2026 21:28:27 +0800
Source: squid
Binary: squid squid-cgi squid-cgi-dbgsym squid-dbgsym squid-openssl squid-openssl-dbgsym squid-purge squid-purge-dbgsym squidclient squidclient-dbgsym
Architecture: i386
Version: 6.13-2+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 squid      - Full featured Web Proxy cache (HTTP proxy GnuTLS flavour)
 squid-cgi  - Full featured Web Proxy cache (HTTP proxy) - control CGI
 squid-openssl - Full featured Web Proxy cache (HTTP proxy OpenSSL flavour)
 squid-purge - Full featured Web Proxy cache (HTTP proxy) - cache management uti
 squidclient - Full featured Web Proxy cache (HTTP proxy) - HTTP(S) message util
Changes:
 squid (6.13-2+deb13u4) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-2026-61642: Reject prohibited bare identity Transfer-Encoding.
     Add debian/patches/CVE-2026-61642.patch.
   * CVE-2026-104786: Bound HTTP authentication credential encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * SQUID-2026:8: Bound ICAP authentication annotation encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * ICAP username encoding follow-up: Bound the independent X-Client-Username
     encoder. Add debian/patches/icap-username-encoding.patch.
   * CVE-2026-62846: Reject illegal FTP command framing. Add
     debian/patches/CVE-2026-62846-523ed3b0.patch.
Checksums-Sha1:
 00f126a8174d8ede5c96d24a527ae92800f8ea6d 139700 squid-cgi-dbgsym_6.13-2+deb13u4_i386.deb
 97970b1dd08e756fe11f4f395cadbc4ab4b0644d 166704 squid-cgi_6.13-2+deb13u4_i386.deb
 2b7e3122ca020b032106a2a8e33792ab539c23b0 22263872 squid-dbgsym_6.13-2+deb13u4_i386.deb
 2916e61a63f0ee935fd069bb362669f3d51be691 24004272 squid-openssl-dbgsym_6.13-2+deb13u4_i386.deb
 ed32eb4b09056a3665a1e3eaf0fae489c6730e84 2761992 squid-openssl_6.13-2+deb13u4_i386.deb
 e17f81a464d97f9812b0f2bc88b62ab3cfd04cec 85292 squid-purge-dbgsym_6.13-2+deb13u4_i386.deb
 4051fa421749557ae2a3bdd510b8fa94ecddee2d 157852 squid-purge_6.13-2+deb13u4_i386.deb
 df8e1f7a84ac423e96a9341468e20fb8baefb5ee 10333 squid_6.13-2+deb13u4_i386-buildd.buildinfo
 9684a873148c3a9bcc54dfc4a4cce2a7afbf7f57 2875452 squid_6.13-2+deb13u4_i386.deb
 cb2a1576d87d2ab9b5d68ed3436c3b26a7b809db 182308 squidclient-dbgsym_6.13-2+deb13u4_i386.deb
 64a1beaa8bca60a3a5412cb8b215842b87b1945b 170116 squidclient_6.13-2+deb13u4_i386.deb
Checksums-Sha256:
 1016c26c0946a683d02a6921d52546a5b808fc92c65e7a663d9d3a1ec9ddf747 139700 squid-cgi-dbgsym_6.13-2+deb13u4_i386.deb
 7b0208b929df69b37b09d1f6e51e6695455cf4d968ec82f93548c0800d6f7a64 166704 squid-cgi_6.13-2+deb13u4_i386.deb
 3181e19fed7a4e4fc4b9bffcc8a19bca19785cd2dd2608d69a594fe5c2f87d01 22263872 squid-dbgsym_6.13-2+deb13u4_i386.deb
 922c1ec2f7c3ac8356cf5ba61f1dcdf23599ab75bd1f5b4ddb40f256fd0f7a29 24004272 squid-openssl-dbgsym_6.13-2+deb13u4_i386.deb
 5ecbffa8315939049734f71bb9881aa2ee9152e773989b33c4718b0d685df449 2761992 squid-openssl_6.13-2+deb13u4_i386.deb
 6b3ad35decc46738ee026663e719043aa0b801e57ac218aee5f2a713008506d4 85292 squid-purge-dbgsym_6.13-2+deb13u4_i386.deb
 f64996cbbf0248d92f52a4a403d6399a67fce90ef8294a4e69312261d5bf4a69 157852 squid-purge_6.13-2+deb13u4_i386.deb
 9d69aa8bfdbc0d430d7b56ea4da287a5277e0b2682d7e4b91f4283cdbdcddb23 10333 squid_6.13-2+deb13u4_i386-buildd.buildinfo
 3fe0253c86ddd92eb310c5abb2b841d1ca7ef36dd8156a718daef0754996ea29 2875452 squid_6.13-2+deb13u4_i386.deb
 5c85041384137f8c26410848515859dbd065efb04721551cfc4d6e8a9c04e8a2 182308 squidclient-dbgsym_6.13-2+deb13u4_i386.deb
 907117bdba6be658d93c44e54f00e2792b738bd200f43841e5f852ff3630c63b 170116 squidclient_6.13-2+deb13u4_i386.deb
Files:
 eb1e1b2a6169519192e6be98771233f2 139700 debug optional squid-cgi-dbgsym_6.13-2+deb13u4_i386.deb
 5d60b34ba5700cc18881de75a519359b 166704 web optional squid-cgi_6.13-2+deb13u4_i386.deb
 ffa9dac1ecca150ab1a06faa7a341280 22263872 debug optional squid-dbgsym_6.13-2+deb13u4_i386.deb
 1be5928d1e12a88db8a2d82294a1dfe0 24004272 debug optional squid-openssl-dbgsym_6.13-2+deb13u4_i386.deb
 b899894ae53a9c5cefe07794ed886a9f 2761992 web optional squid-openssl_6.13-2+deb13u4_i386.deb
 09326e6fcead8dd04c4719ae7a68bd86 85292 debug optional squid-purge-dbgsym_6.13-2+deb13u4_i386.deb
 79ffbebb9cd2b1b8e4f55dc2539456e4 157852 web optional squid-purge_6.13-2+deb13u4_i386.deb
 8966c58270308f3f9536fce0e39e91ff 10333 web optional squid_6.13-2+deb13u4_i386-buildd.buildinfo
 7a87cb201505d219c62b0ffa0c4f7b08 2875452 web optional squid_6.13-2+deb13u4_i386.deb
 cb76524d966734619fa2ff65e1b56ae4 182308 debug optional squidclient-dbgsym_6.13-2+deb13u4_i386.deb
 632bbde51f87c328429d62dc942e4fe4 170116 web optional squidclient_6.13-2+deb13u4_i386.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmrpwI4ACgkQbheoBegw
XLJKnA//RPhwX7/5JRLXkG6SHy64imASysWZrDe9w81LOHkBIib55mwV8Z05mLua
IYPUDVlTKhukzPQyy1Wh/Jk8LwswZgfPuXjOszo+yjw0sEDzEEuayIpCyIG5dOdp
S/ugwjZC3aRLDu9sokBQUSzEZShQWanocq83Z7b849Pwq17yYp10PeMtMDdKJyNs
wHf2XMdMXTqTAxxlZIuwfY7pifqcsus4/Apv32kE62VP2kqpUWdD6g2VCuwk999p
MoN0LAE0Iothfi/BWohKp0IlpX+Oz+qYHpPukrvH9SmkoYqPHf9RdF/eepKgvhIO
eRNwL1q6es8GvM8TpPe0mCcU5Ufb6CAPiHXzvbxEsqldfFQg8/E4N8Vuo7+BgVVE
Zn+r/Jsj2YEEAhTCHQT60LVRXiJwt4QmWJiUw6EO8oMQLJkJJ5+hNJT2Tvo4IbpV
JXow5B26KcK72fjExPNZU78O6mpQXByJpNMTTrYqqZY/YwhavN1hYHF/ESYIDOgm
zA0AQzwVJ0a6rTgGVeE1w/dgU5wLM0Gqzol2EZUZEpNFfek9yk1WHi8a9jN6ushZ
0QJNGSIPCn61WgIXIvw9fZ8pMbi6NxjDcJJSlw29BK8cc9jFjJ0qgKqhZoIJmiXT
MpY9mRQgzfKBbmtcjz/Wfq/fCps/TrMAsbNNiR87q1rXBh6gmac=
=n9El
-----END PGP SIGNATURE-----