-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 24 Oct 2026 18:03:52 +0800
Source: varnish
Binary: libvarnishapi-dev libvarnishapi3 libvarnishapi3-dbgsym varnish varnish-dbgsym
Architecture: riscv64
Version: 7.7.0-3+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-manda-03) <buildd_riscv64-rv-manda-03@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libvarnishapi-dev - development files for Varnish
 libvarnishapi3 - shared libraries for Varnish
 varnish    - state of the art, high-performance web accelerator
Changes:
 varnish (7.7.0-3+deb13u2) trixie-security; urgency=medium
 .
   * Non-maintainer upload by the Security Team.
   * Backport the VSV00020 case-conversion workspace overflow fix
     (CVE-2026-93894), with regression tests.
   * Backport the complete VSV00018 absolute-form request normalization
     fix (CVE-2026-34475): validate request URLs, enable HTTPS
     normalization by default while preserving opt-out, and cover empty
     paths and query-only targets.
Checksums-Sha1:
 eefd8c534e21b2641c662d72ecaccaf52c76a372 206452 libvarnishapi-dev_7.7.0-3+deb13u2_riscv64.deb
 5ce369bc87721b202ad2633725b3c8aaa73307f0 230040 libvarnishapi3-dbgsym_7.7.0-3+deb13u2_riscv64.deb
 df4e89fea1969d787219740a86888e47013c9ef9 195816 libvarnishapi3_7.7.0-3+deb13u2_riscv64.deb
 deb0f189f85f15848ea910e7592ba9bb93698bc5 2144240 varnish-dbgsym_7.7.0-3+deb13u2_riscv64.deb
 ae5c064d9bc04e9266c0f7ac90f5f0e1fc3fa4b3 10991 varnish_7.7.0-3+deb13u2_riscv64-buildd.buildinfo
 010fcd3b0b804a49c17f4ffefbc9f4d1e5aa8601 1177076 varnish_7.7.0-3+deb13u2_riscv64.deb
Checksums-Sha256:
 40bc9621a2e1f673420abe4a4385b04bb4f85577243468c0eb98715cf3d947f4 206452 libvarnishapi-dev_7.7.0-3+deb13u2_riscv64.deb
 271bbe2d7fbe576e7051ad1f340e5174ff50d6de10fcd9db6532c1de8dc5b195 230040 libvarnishapi3-dbgsym_7.7.0-3+deb13u2_riscv64.deb
 4c75b45af3933796d1dd14901a6f4e3ec53c8c47a9953bd869fe3ac470c0290d 195816 libvarnishapi3_7.7.0-3+deb13u2_riscv64.deb
 0743868637550c3eddd1ea6ea1f1e6c2136bc4d478130fda144e19888607e9f8 2144240 varnish-dbgsym_7.7.0-3+deb13u2_riscv64.deb
 5527a29d0ea514a87fdb6db1b664a209adfa28fc8581578f613103381d65569b 10991 varnish_7.7.0-3+deb13u2_riscv64-buildd.buildinfo
 d0bb936d87b22d0e23f9b2e19177ea0315ffd6211ab06ec9cd7e5f420c96291d 1177076 varnish_7.7.0-3+deb13u2_riscv64.deb
Files:
 e5481747ab8c56505af60ba10d6d8328 206452 libdevel optional libvarnishapi-dev_7.7.0-3+deb13u2_riscv64.deb
 4083c6b8b9dd91dc876b6603995c2f59 230040 debug optional libvarnishapi3-dbgsym_7.7.0-3+deb13u2_riscv64.deb
 27ab048e9ad86df5e371ef4fd5654981 195816 libs optional libvarnishapi3_7.7.0-3+deb13u2_riscv64.deb
 0d9fc7ef2093f426d88280ba66405c91 2144240 debug optional varnish-dbgsym_7.7.0-3+deb13u2_riscv64.deb
 4e5421d9b0043eb53377e910d4a7af3e 10991 web optional varnish_7.7.0-3+deb13u2_riscv64-buildd.buildinfo
 a981ee28083a27f2eff228d3dd12ca71 1177076 web optional varnish_7.7.0-3+deb13u2_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=0M5R
-----END PGP SIGNATURE-----