-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 24 Oct 2026 18:03:52 +0800
Source: varnish
Binary: varnish-doc
Architecture: all
Version: 7.7.0-3+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 varnish-doc - documentation for Varnish Cache
Changes:
 varnish (7.7.0-3+deb13u2) trixie-security; urgency=medium
 .
   * Non-maintainer upload by the Security Team.
   * Backport the VSV00020 case-conversion workspace overflow fix
     (CVE-2026-93894), with regression tests.
   * Backport the complete VSV00018 absolute-form request normalization
     fix (CVE-2026-34475): validate request URLs, enable HTTPS
     normalization by default while preserving opt-out, and cover empty
     paths and query-only targets.
Checksums-Sha1:
 1245c79a44338a0427bb1b4549c97672f0f78f61 836752 varnish-doc_7.7.0-3+deb13u2_all.deb
 cb1fe6120cd3999d09e74b97cc41108d676caf9c 9787 varnish_7.7.0-3+deb13u2_all-buildd.buildinfo
Checksums-Sha256:
 32ba4805986b6bef146d6e330645c0f6c9d62944e350c5815023ef55caf155c6 836752 varnish-doc_7.7.0-3+deb13u2_all.deb
 1f0482b657898058601f81645af9cd5dac5c38f8fbf7f639804487e019f9ce0b 9787 varnish_7.7.0-3+deb13u2_all-buildd.buildinfo
Files:
 13400be58b282f38ba73186fef0038d4 836752 doc optional varnish-doc_7.7.0-3+deb13u2_all.deb
 a04c7e03c5e427b171b060ff006f4bb5 9787 web optional varnish_7.7.0-3+deb13u2_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=2yM9
-----END PGP SIGNATURE-----