-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 24 Oct 2026 18:03:52 +0800
Source: varnish
Binary: libvarnishapi-dev libvarnishapi3 libvarnishapi3-dbgsym varnish varnish-dbgsym
Architecture: arm64
Version: 7.7.0-3+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: arm64 Build Daemon (arm-conova-03) <buildd_arm64-arm-conova-03@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libvarnishapi-dev - development files for Varnish
 libvarnishapi3 - shared libraries for Varnish
 varnish    - state of the art, high-performance web accelerator
Changes:
 varnish (7.7.0-3+deb13u2) trixie-security; urgency=medium
 .
   * Non-maintainer upload by the Security Team.
   * Backport the VSV00020 case-conversion workspace overflow fix
     (CVE-2026-93894), with regression tests.
   * Backport the complete VSV00018 absolute-form request normalization
     fix (CVE-2026-34475): validate request URLs, enable HTTPS
     normalization by default while preserving opt-out, and cover empty
     paths and query-only targets.
Checksums-Sha1:
 fb461607c466bb172188c669d1f0ae00532db2eb 206456 libvarnishapi-dev_7.7.0-3+deb13u2_arm64.deb
 5d1d7e33fb2d71afb317e8cbdb5916a0c4f6ff04 231884 libvarnishapi3-dbgsym_7.7.0-3+deb13u2_arm64.deb
 5893a7bb38a46d624e85d6341e930588c6c1f2b5 185036 libvarnishapi3_7.7.0-3+deb13u2_arm64.deb
 e73d7d73b48741fbd3ad241fd07359ce659e8452 2184276 varnish-dbgsym_7.7.0-3+deb13u2_arm64.deb
 901b058d42753d5c4fc9eab16da2bb354a40b287 11013 varnish_7.7.0-3+deb13u2_arm64-buildd.buildinfo
 94c70fba7cfe46cc63d8e7c5e87f610609684d94 1099840 varnish_7.7.0-3+deb13u2_arm64.deb
Checksums-Sha256:
 51a5353c78256419f8d974dbd7235310c340665e998bd804d02ff7f5664f97e5 206456 libvarnishapi-dev_7.7.0-3+deb13u2_arm64.deb
 c891a82f3b8936e50283f999ac52aa48b6147f9e36be6564358a369d0c0bcb3f 231884 libvarnishapi3-dbgsym_7.7.0-3+deb13u2_arm64.deb
 2e7941fe59e916d2e48599ad54ae02c163aa9e1c20415cd072d8226a651862ee 185036 libvarnishapi3_7.7.0-3+deb13u2_arm64.deb
 e37112af93eaea1118bdc4eb93da723dfdd2e44198d94aa2ba878324937a85c1 2184276 varnish-dbgsym_7.7.0-3+deb13u2_arm64.deb
 aeade685ebe881f3ef37edb990490054bbf87ff57f44df9bb67a307949480b1e 11013 varnish_7.7.0-3+deb13u2_arm64-buildd.buildinfo
 7b5bb46f1d37d4cd78cd68791a4698a02969bd7e3dc94d70797f492105d8a5ef 1099840 varnish_7.7.0-3+deb13u2_arm64.deb
Files:
 4b4de9ce7a7cbc2b3c6ee129b7b42517 206456 libdevel optional libvarnishapi-dev_7.7.0-3+deb13u2_arm64.deb
 88072fa72cf930c9fbf32c95c8503db2 231884 debug optional libvarnishapi3-dbgsym_7.7.0-3+deb13u2_arm64.deb
 374646838a3bb77593c43815c32294fe 185036 libs optional libvarnishapi3_7.7.0-3+deb13u2_arm64.deb
 057a2b2240109155bd018c57f769e8e0 2184276 debug optional varnish-dbgsym_7.7.0-3+deb13u2_arm64.deb
 2d58b678b30bdc99bd4622bab103e7dc 11013 web optional varnish_7.7.0-3+deb13u2_arm64-buildd.buildinfo
 185dfb3d1cf1525ccdc59714d1eecf5c 1099840 web optional varnish_7.7.0-3+deb13u2_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=KAr0
-----END PGP SIGNATURE-----