-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 24 Oct 2026 18:03:52 +0800
Source: varnish
Binary: libvarnishapi-dev libvarnishapi3 libvarnishapi3-dbgsym varnish varnish-dbgsym
Architecture: i386
Version: 7.7.0-3+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: i386 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libvarnishapi-dev - development files for Varnish
 libvarnishapi3 - shared libraries for Varnish
 varnish    - state of the art, high-performance web accelerator
Changes:
 varnish (7.7.0-3+deb13u2) trixie-security; urgency=medium
 .
   * Non-maintainer upload by the Security Team.
   * Backport the VSV00020 case-conversion workspace overflow fix
     (CVE-2026-93894), with regression tests.
   * Backport the complete VSV00018 absolute-form request normalization
     fix (CVE-2026-34475): validate request URLs, enable HTTPS
     normalization by default while preserving opt-out, and cover empty
     paths and query-only targets.
Checksums-Sha1:
 0309fae33d87a4bf76ac429acd0b7f4ed7040e3a 206448 libvarnishapi-dev_7.7.0-3+deb13u2_i386.deb
 129bf362629ece8e184fafbf5984d6ff7a61899e 194244 libvarnishapi3-dbgsym_7.7.0-3+deb13u2_i386.deb
 ef5cd58d0736333eeef52bb004a3ad19d5f8b5a8 196868 libvarnishapi3_7.7.0-3+deb13u2_i386.deb
 743569952e58c8e357d98891d8f10126cf1f76a0 1778420 varnish-dbgsym_7.7.0-3+deb13u2_i386.deb
 74d9e311c30590d3dfeeb9aee558721581767459 10892 varnish_7.7.0-3+deb13u2_i386-buildd.buildinfo
 bc7c9fc472dbe724018d4d67d893ea872a04ea69 1181860 varnish_7.7.0-3+deb13u2_i386.deb
Checksums-Sha256:
 9eb1b8fb12107fca20f6e663caec4c30c44081ec47bc873aeee29cebb08d50fd 206448 libvarnishapi-dev_7.7.0-3+deb13u2_i386.deb
 0e13c53a2b29014c8775ddd816a206fb0fc043b23e9f865b36ebae0f1d06d273 194244 libvarnishapi3-dbgsym_7.7.0-3+deb13u2_i386.deb
 d8a40b9540e2e807f069ba78d92a0f898239c5a86c28df8cfea6f8d53e299895 196868 libvarnishapi3_7.7.0-3+deb13u2_i386.deb
 b30cf24d78b3a005c98a977b94073720fe27a96fa343f91473849cc0a004b8e5 1778420 varnish-dbgsym_7.7.0-3+deb13u2_i386.deb
 cf2585a75ad3e1163165178cc7ca07aad7cd6386826f0a69e7500550fa1d149d 10892 varnish_7.7.0-3+deb13u2_i386-buildd.buildinfo
 34f2a301f01c03e735c0548a87b3bc0fdbb09854c76c79c2114ba33cf4d8c36f 1181860 varnish_7.7.0-3+deb13u2_i386.deb
Files:
 3cb59c470c911c9e24c7f2f52718ac4a 206448 libdevel optional libvarnishapi-dev_7.7.0-3+deb13u2_i386.deb
 d3be5aa572c8f71e1e7ec7ab2dfb6839 194244 debug optional libvarnishapi3-dbgsym_7.7.0-3+deb13u2_i386.deb
 2de52296783c8dcd5d172a3f24b24ba6 196868 libs optional libvarnishapi3_7.7.0-3+deb13u2_i386.deb
 a3c47483bbafd1df67b048c7b3ba17ea 1778420 debug optional varnish-dbgsym_7.7.0-3+deb13u2_i386.deb
 8abecfa69188f1e7e885eee6287f117a 10892 web optional varnish_7.7.0-3+deb13u2_i386-buildd.buildinfo
 aace1614e9f89eb76f3f4b342ccec802 1181860 web optional varnish_7.7.0-3+deb13u2_i386.deb

-----BEGIN PGP SIGNATURE-----
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=7K7W
-----END PGP SIGNATURE-----