-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 30 Oct 2026 21:28:27 +0800
Source: squid
Binary: squid squid-cgi squid-cgi-dbgsym squid-dbgsym squid-openssl squid-openssl-dbgsym squid-purge squid-purge-dbgsym squidclient squidclient-dbgsym
Architecture: ppc64el
Version: 6.13-2+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-conova-01) <buildd_ppc64el-ppc64el-conova-01@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 squid      - Full featured Web Proxy cache (HTTP proxy GnuTLS flavour)
 squid-cgi  - Full featured Web Proxy cache (HTTP proxy) - control CGI
 squid-openssl - Full featured Web Proxy cache (HTTP proxy OpenSSL flavour)
 squid-purge - Full featured Web Proxy cache (HTTP proxy) - cache management uti
 squidclient - Full featured Web Proxy cache (HTTP proxy) - HTTP(S) message util
Changes:
 squid (6.13-2+deb13u4) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-2026-61642: Reject prohibited bare identity Transfer-Encoding.
     Add debian/patches/CVE-2026-61642.patch.
   * CVE-2026-104786: Bound HTTP authentication credential encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * SQUID-2026:8: Bound ICAP authentication annotation encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * ICAP username encoding follow-up: Bound the independent X-Client-Username
     encoder. Add debian/patches/icap-username-encoding.patch.
   * CVE-2026-62846: Reject illegal FTP command framing. Add
     debian/patches/CVE-2026-62846-523ed3b0.patch.
Checksums-Sha1:
 cf57e0114e63d4300d9c069fc77e6d4f08d681b5 152436 squid-cgi-dbgsym_6.13-2+deb13u4_ppc64el.deb
 24f9287249f5a07f1efc4c92b20539d235064c44 166596 squid-cgi_6.13-2+deb13u4_ppc64el.deb
 5f989598c67217b8245f9e2ef146a01727543957 23504268 squid-dbgsym_6.13-2+deb13u4_ppc64el.deb
 e569f11b5d699c878ab9cb303e8c80dcaf0a697e 25225916 squid-openssl-dbgsym_6.13-2+deb13u4_ppc64el.deb
 499bbed32334390b15d2e12303f7f967901b8afe 2552684 squid-openssl_6.13-2+deb13u4_ppc64el.deb
 04df8c8af801c7c6dd0cb7af450020bef0e6ab15 89552 squid-purge-dbgsym_6.13-2+deb13u4_ppc64el.deb
 6d182d67f6f74cb555cd1e81e8299576c508b558 157192 squid-purge_6.13-2+deb13u4_ppc64el.deb
 2ef0c9a536cba1f8c2ac5799d9c80f1506b1e55d 10503 squid_6.13-2+deb13u4_ppc64el-buildd.buildinfo
 636654a2b2331b1a80287aa4016edcee581bb9d0 2686136 squid_6.13-2+deb13u4_ppc64el.deb
 7f105054f8dd4c9aaa3b7f6de9da2b7da6b663a5 193084 squidclient-dbgsym_6.13-2+deb13u4_ppc64el.deb
 e942939ac5dce6153e26825c264b9f8b5c045670 167664 squidclient_6.13-2+deb13u4_ppc64el.deb
Checksums-Sha256:
 6847ff500a6fa7e8c13a42fd93a64cbb1dff61d0b90e4276fee76bb9378a40c8 152436 squid-cgi-dbgsym_6.13-2+deb13u4_ppc64el.deb
 e7bfa29f088e13e4078017c22b6beda56644f8a07c04f7ce189e87cdf1503330 166596 squid-cgi_6.13-2+deb13u4_ppc64el.deb
 2283c6fe4bcc55ea0c455bf2063ffc18827893d1c9f6a2f3e3f0cecbb08c92f9 23504268 squid-dbgsym_6.13-2+deb13u4_ppc64el.deb
 18d1c73fabb9dab0ad651000749bb746232fdd3e7cf34dfc2941389d27e8c3a1 25225916 squid-openssl-dbgsym_6.13-2+deb13u4_ppc64el.deb
 bd4507392ffa4bcf9aa9ade8510ce6a3c02e6ac0414331db2a6b4afbcdec145a 2552684 squid-openssl_6.13-2+deb13u4_ppc64el.deb
 886fb0365c3ef21ddc71f4fdc5d608463363f8f68488ba2ec2c9984e76726639 89552 squid-purge-dbgsym_6.13-2+deb13u4_ppc64el.deb
 b8d34079406bb3fcb2400f05b063558e8239342ea711d65cf4fc5bc19804cfb0 157192 squid-purge_6.13-2+deb13u4_ppc64el.deb
 49957fb7365a4792d89f9b428683fe733d62cf2702a1714c897cab092a38f716 10503 squid_6.13-2+deb13u4_ppc64el-buildd.buildinfo
 7ce9168f057c04d7402694836780ce525966a14c052cc19a0ea9085919f571d3 2686136 squid_6.13-2+deb13u4_ppc64el.deb
 3b7eea32a73867e26f714cefb1231b06d78da2f4b8580b39f4313cf4a5d2f4b3 193084 squidclient-dbgsym_6.13-2+deb13u4_ppc64el.deb
 f2f7fce48cc1c38b0ca0ab3d8fa9eec040121de5e8e5391d37a686fccd1a8405 167664 squidclient_6.13-2+deb13u4_ppc64el.deb
Files:
 657e5a8ba83a6ca2d120d2e94aafb380 152436 debug optional squid-cgi-dbgsym_6.13-2+deb13u4_ppc64el.deb
 9f612a67ddeedcfda5edd91625554bb7 166596 web optional squid-cgi_6.13-2+deb13u4_ppc64el.deb
 29a1cca02b137bc5b9936f581090f33d 23504268 debug optional squid-dbgsym_6.13-2+deb13u4_ppc64el.deb
 f9d2756337854d2d0c191e5d2b666a5b 25225916 debug optional squid-openssl-dbgsym_6.13-2+deb13u4_ppc64el.deb
 ded5b94a79752af97d339169747fdb6b 2552684 web optional squid-openssl_6.13-2+deb13u4_ppc64el.deb
 21b41a601ab8f18698fcfa295ad367c0 89552 debug optional squid-purge-dbgsym_6.13-2+deb13u4_ppc64el.deb
 f84490e3a99a39ce6e56262accea2cbd 157192 web optional squid-purge_6.13-2+deb13u4_ppc64el.deb
 3f804472fb5604188cd3effacd7b831e 10503 web optional squid_6.13-2+deb13u4_ppc64el-buildd.buildinfo
 0536ba1fdc7cdd31371751a3ee705e66 2686136 web optional squid_6.13-2+deb13u4_ppc64el.deb
 0f8fd359634c90dabf1566358f0ecee7 193084 debug optional squidclient-dbgsym_6.13-2+deb13u4_ppc64el.deb
 6902719c28aecb3a4c08c5f64ad131fa 167664 web optional squidclient_6.13-2+deb13u4_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=omDr
-----END PGP SIGNATURE-----