-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 24 Oct 2026 18:03:52 +0800
Source: varnish
Binary: libvarnishapi-dev libvarnishapi3 libvarnishapi3-dbgsym varnish varnish-dbgsym
Architecture: amd64
Version: 7.7.0-3+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libvarnishapi-dev - development files for Varnish
 libvarnishapi3 - shared libraries for Varnish
 varnish    - state of the art, high-performance web accelerator
Changes:
 varnish (7.7.0-3+deb13u2) trixie-security; urgency=medium
 .
   * Non-maintainer upload by the Security Team.
   * Backport the VSV00020 case-conversion workspace overflow fix
     (CVE-2026-93894), with regression tests.
   * Backport the complete VSV00018 absolute-form request normalization
     fix (CVE-2026-34475): validate request URLs, enable HTTPS
     normalization by default while preserving opt-out, and cover empty
     paths and query-only targets.
Checksums-Sha1:
 1e1f7284cd10ae3df00967b4750b8fc9a4b4c3df 206472 libvarnishapi-dev_7.7.0-3+deb13u2_amd64.deb
 04ed12e9eed2f69fc13495e097527629e9f13865 240260 libvarnishapi3-dbgsym_7.7.0-3+deb13u2_amd64.deb
 ef698e33f8b850b9e6ccaf643ab020bc7b0eef68 191976 libvarnishapi3_7.7.0-3+deb13u2_amd64.deb
 acc9fba08577ce1ed12c59b2d7d23d5d3b72ec8e 2257248 varnish-dbgsym_7.7.0-3+deb13u2_amd64.deb
 9eb31c0811f8a12ee093f34cd8443fe313791034 11029 varnish_7.7.0-3+deb13u2_amd64-buildd.buildinfo
 3d3429ec581d0aa6f48dd5f62d3db8f706d89ae5 1169672 varnish_7.7.0-3+deb13u2_amd64.deb
Checksums-Sha256:
 41afbaeb59d1788cd512f8f04174155c606392cfdf8d4904dd7231ea0d4e3bad 206472 libvarnishapi-dev_7.7.0-3+deb13u2_amd64.deb
 868f625ef43634ba721053a8d9298477778f2b64731d2c921c0e15edae79b158 240260 libvarnishapi3-dbgsym_7.7.0-3+deb13u2_amd64.deb
 bbc3ad1ea89e89da401aaeabd36331c91a3066d589d702caaa87e17f7277989a 191976 libvarnishapi3_7.7.0-3+deb13u2_amd64.deb
 cb8534a033f5c0cf23a04b71926d9ee786e303e4dc17b226e07f3c71349309a4 2257248 varnish-dbgsym_7.7.0-3+deb13u2_amd64.deb
 4345de0a4339d129bdbd7b228f6b97aa2bba7190e2c9e8a33be92f09ad098d3d 11029 varnish_7.7.0-3+deb13u2_amd64-buildd.buildinfo
 ed5a1277a5b097186f94c13120a70697395625fe7ce45cb96c07540d26a9598b 1169672 varnish_7.7.0-3+deb13u2_amd64.deb
Files:
 9b1a78fce0be24deec287d45be5cc500 206472 libdevel optional libvarnishapi-dev_7.7.0-3+deb13u2_amd64.deb
 72a9930ad7b2a0ec15e61d8cf1d7ff34 240260 debug optional libvarnishapi3-dbgsym_7.7.0-3+deb13u2_amd64.deb
 7a1beec8cefe3af1efa33971b86e5701 191976 libs optional libvarnishapi3_7.7.0-3+deb13u2_amd64.deb
 9e34c9e6d5c99adecdd59dfc1874c968 2257248 debug optional varnish-dbgsym_7.7.0-3+deb13u2_amd64.deb
 2ae3fdfd37afb2f51262d6b7727a8489 11029 web optional varnish_7.7.0-3+deb13u2_amd64-buildd.buildinfo
 ef35dbd19f37c8b7094113355209656e 1169672 web optional varnish_7.7.0-3+deb13u2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=OHhi
-----END PGP SIGNATURE-----