-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 24 Oct 2026 18:03:52 +0800
Source: varnish
Binary: libvarnishapi-dev libvarnishapi3 libvarnishapi3-dbgsym varnish varnish-dbgsym
Architecture: armhf
Version: 7.7.0-3+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: armhf Build Daemon (arm-ubc-05) <buildd_arm64-arm-ubc-05@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libvarnishapi-dev - development files for Varnish
 libvarnishapi3 - shared libraries for Varnish
 varnish    - state of the art, high-performance web accelerator
Changes:
 varnish (7.7.0-3+deb13u2) trixie-security; urgency=medium
 .
   * Non-maintainer upload by the Security Team.
   * Backport the VSV00020 case-conversion workspace overflow fix
     (CVE-2026-93894), with regression tests.
   * Backport the complete VSV00018 absolute-form request normalization
     fix (CVE-2026-34475): validate request URLs, enable HTTPS
     normalization by default while preserving opt-out, and cover empty
     paths and query-only targets.
Checksums-Sha1:
 661d55f272ac1d14452f48a65a1c1e3b80f6938c 206464 libvarnishapi-dev_7.7.0-3+deb13u2_armhf.deb
 92706d5edff8d989417aa439670991318164ca16 235344 libvarnishapi3-dbgsym_7.7.0-3+deb13u2_armhf.deb
 8059a5baee38bf4189e2e3bf01d5aa1bb66521c2 184572 libvarnishapi3_7.7.0-3+deb13u2_armhf.deb
 ea2d22af6409beb4fccaf256add834a39f8b680b 2111852 varnish-dbgsym_7.7.0-3+deb13u2_armhf.deb
 e9c34f780ce3ed57f696e810260e510012c7335a 10866 varnish_7.7.0-3+deb13u2_armhf-buildd.buildinfo
 e745879823f1c4f4da70d28d70be771ac3a1fdef 1116508 varnish_7.7.0-3+deb13u2_armhf.deb
Checksums-Sha256:
 c1368f21e86cd1dfa1c207d75cc8264f960ee7e71ff31f90dc222bd427f8937c 206464 libvarnishapi-dev_7.7.0-3+deb13u2_armhf.deb
 713f9fd65004343aa533cb1dfcbae6efc1f638d44a5707c6544f2c0facad8ebd 235344 libvarnishapi3-dbgsym_7.7.0-3+deb13u2_armhf.deb
 ef9c8f1ebbbfc49b3350294a044013fb0305f1fcc19bc70a7ac04ddcc720465b 184572 libvarnishapi3_7.7.0-3+deb13u2_armhf.deb
 ad288a8fc5ab1c081ea22b556ce4b352374fd7412422afeb048930b668061057 2111852 varnish-dbgsym_7.7.0-3+deb13u2_armhf.deb
 c81f305a17fa879dfbb333a1ed0ae49d542563b0094d19e0bf7d7e620f4495bb 10866 varnish_7.7.0-3+deb13u2_armhf-buildd.buildinfo
 e372f1c8af968ec175933b60a6daa4d049528122465b34f9a7ab507db3987a26 1116508 varnish_7.7.0-3+deb13u2_armhf.deb
Files:
 f776aa5c3d8bb590a93bdb05343a42fe 206464 libdevel optional libvarnishapi-dev_7.7.0-3+deb13u2_armhf.deb
 5787cb42148025e1848637a6bf2f0270 235344 debug optional libvarnishapi3-dbgsym_7.7.0-3+deb13u2_armhf.deb
 e8841767bc4d0dcf9221e8d7e5b83949 184572 libs optional libvarnishapi3_7.7.0-3+deb13u2_armhf.deb
 c55fa077f57bf6556fa124e15be5131f 2111852 debug optional varnish-dbgsym_7.7.0-3+deb13u2_armhf.deb
 1fdc613788a93cab69b137d7e7f61293 10866 web optional varnish_7.7.0-3+deb13u2_armhf-buildd.buildinfo
 09afea78fe84361ff3b75f3f4fbb706c 1116508 web optional varnish_7.7.0-3+deb13u2_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=PMdd
-----END PGP SIGNATURE-----