-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 30 Oct 2026 21:28:27 +0800
Source: squid
Binary: squid squid-cgi squid-cgi-dbgsym squid-dbgsym squid-openssl squid-openssl-dbgsym squid-purge squid-purge-dbgsym squidclient squidclient-dbgsym
Architecture: riscv64
Version: 6.13-2+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-osuosl-04) <buildd_riscv64-rv-osuosl-04@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 squid      - Full featured Web Proxy cache (HTTP proxy GnuTLS flavour)
 squid-cgi  - Full featured Web Proxy cache (HTTP proxy) - control CGI
 squid-openssl - Full featured Web Proxy cache (HTTP proxy OpenSSL flavour)
 squid-purge - Full featured Web Proxy cache (HTTP proxy) - cache management uti
 squidclient - Full featured Web Proxy cache (HTTP proxy) - HTTP(S) message util
Changes:
 squid (6.13-2+deb13u4) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-2026-61642: Reject prohibited bare identity Transfer-Encoding.
     Add debian/patches/CVE-2026-61642.patch.
   * CVE-2026-104786: Bound HTTP authentication credential encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * SQUID-2026:8: Bound ICAP authentication annotation encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * ICAP username encoding follow-up: Bound the independent X-Client-Username
     encoder. Add debian/patches/icap-username-encoding.patch.
   * CVE-2026-62846: Reject illegal FTP command framing. Add
     debian/patches/CVE-2026-62846-523ed3b0.patch.
Checksums-Sha1:
 2787be1fa9c205961e7177b83738d86d925deadf 138168 squid-cgi-dbgsym_6.13-2+deb13u4_riscv64.deb
 e53d61d400773197f173d76aa93ace1bf4e1014e 163424 squid-cgi_6.13-2+deb13u4_riscv64.deb
 39f60fe6b8a8ffd0183bf3db954b2e8e7477579d 20961532 squid-dbgsym_6.13-2+deb13u4_riscv64.deb
 2c86b3dfc096ccd04d879539f693099a2474443e 22394884 squid-openssl-dbgsym_6.13-2+deb13u4_riscv64.deb
 f4039dd16efbd22772a020171d429656fe728d64 2700504 squid-openssl_6.13-2+deb13u4_riscv64.deb
 94aa5c7d697aa75465a1828d6ef3cb9bf5615e71 85316 squid-purge-dbgsym_6.13-2+deb13u4_riscv64.deb
 60584e9d0bad4eb54d7e538dc967442af4f7d592 156128 squid-purge_6.13-2+deb13u4_riscv64.deb
 304778232b619dd56d560539d303f88d3e33f931 10448 squid_6.13-2+deb13u4_riscv64-buildd.buildinfo
 727233eebf1128523668f097bf98546e05af8a26 2814968 squid_6.13-2+deb13u4_riscv64.deb
 471679c30a01f76a96e8366471925cbfed0fe7f3 174648 squidclient-dbgsym_6.13-2+deb13u4_riscv64.deb
 ddd88913da8c7b3838517ef792f389f3290c4ecf 166444 squidclient_6.13-2+deb13u4_riscv64.deb
Checksums-Sha256:
 8bff4822f3417e56c16881f9c0e3cd8dc5d111805702fcfe7178656445fcbf22 138168 squid-cgi-dbgsym_6.13-2+deb13u4_riscv64.deb
 7c8e7f7a3483d39529f57149a820d5a696e39c7df5adae439fb0e301cf75035a 163424 squid-cgi_6.13-2+deb13u4_riscv64.deb
 54d4f0588c13c83f54f9964bbb7a66a88d7c98b05f50b64cd74321e2ec6f7f3f 20961532 squid-dbgsym_6.13-2+deb13u4_riscv64.deb
 1cb162ad635f920dd8bda27d225f30197919894cbf85d9ba62dc130a5b1c0fe7 22394884 squid-openssl-dbgsym_6.13-2+deb13u4_riscv64.deb
 9ef9bb51bd59092f3d7a06f88240fe6c6538c31f752080434f7c4b27f18ec67a 2700504 squid-openssl_6.13-2+deb13u4_riscv64.deb
 4bc7d4972db99b34088a483b036112901bcc4b8edc287967f18ef6d9efe528c9 85316 squid-purge-dbgsym_6.13-2+deb13u4_riscv64.deb
 169bd96613eadee8a0b3168d925489ea4160c3509358b85551fd606f8c67dec1 156128 squid-purge_6.13-2+deb13u4_riscv64.deb
 41ce7713b98ba8ecc8c772786f0ebf7a7f71f99c5017dd29e5e1d1ec307cad33 10448 squid_6.13-2+deb13u4_riscv64-buildd.buildinfo
 75038fb03308c16975b555719403faaad266ba121ee4a8f0e0a326ac554a061e 2814968 squid_6.13-2+deb13u4_riscv64.deb
 392449774d03720655b218b4bf7fc88aceb0cd9afb67b7758daf8431c5feb554 174648 squidclient-dbgsym_6.13-2+deb13u4_riscv64.deb
 08069dbaab356c6c5d451d3a01d9587acbf4e5af1b6acd5887042e56cd8b993d 166444 squidclient_6.13-2+deb13u4_riscv64.deb
Files:
 8407ec36a262518cacfa8d7b92314ab4 138168 debug optional squid-cgi-dbgsym_6.13-2+deb13u4_riscv64.deb
 00bfa19e29a17cd50c4a5bd473a95f31 163424 web optional squid-cgi_6.13-2+deb13u4_riscv64.deb
 6e9c7c6890e474621eb45516562497a1 20961532 debug optional squid-dbgsym_6.13-2+deb13u4_riscv64.deb
 eec2f73026784841d2c74247a7065d2d 22394884 debug optional squid-openssl-dbgsym_6.13-2+deb13u4_riscv64.deb
 554673087e1708e024240860c30efdae 2700504 web optional squid-openssl_6.13-2+deb13u4_riscv64.deb
 7b39bd721c8c23891aeb5037f9dfc1e5 85316 debug optional squid-purge-dbgsym_6.13-2+deb13u4_riscv64.deb
 dc34aac5f5aea08bf41664f7bca434be 156128 web optional squid-purge_6.13-2+deb13u4_riscv64.deb
 c74a4ab61208b59fe62c01db644c0a26 10448 web optional squid_6.13-2+deb13u4_riscv64-buildd.buildinfo
 1dbe229eedade356b75ca937b7c400f3 2814968 web optional squid_6.13-2+deb13u4_riscv64.deb
 377c42ca30c2b655f7aa2e3a76f3fd21 174648 debug optional squidclient-dbgsym_6.13-2+deb13u4_riscv64.deb
 932e22bc2fd09b32a4360ac8bc1c4a86 166444 web optional squidclient_6.13-2+deb13u4_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=dwIf
-----END PGP SIGNATURE-----