-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 24 Oct 2026 18:03:52 +0800
Source: varnish
Binary: libvarnishapi-dev libvarnishapi3 libvarnishapi3-dbgsym varnish varnish-dbgsym
Architecture: armel
Version: 7.7.0-3+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: armel Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libvarnishapi-dev - development files for Varnish
 libvarnishapi3 - shared libraries for Varnish
 varnish    - state of the art, high-performance web accelerator
Changes:
 varnish (7.7.0-3+deb13u2) trixie-security; urgency=medium
 .
   * Non-maintainer upload by the Security Team.
   * Backport the VSV00020 case-conversion workspace overflow fix
     (CVE-2026-93894), with regression tests.
   * Backport the complete VSV00018 absolute-form request normalization
     fix (CVE-2026-34475): validate request URLs, enable HTTPS
     normalization by default while preserving opt-out, and cover empty
     paths and query-only targets.
Checksums-Sha1:
 84499c03cd909567864e3f0f659c4a9f74e5d5d5 206452 libvarnishapi-dev_7.7.0-3+deb13u2_armel.deb
 7582c333029dbb84e8871e96a5800b850825407b 230808 libvarnishapi3-dbgsym_7.7.0-3+deb13u2_armel.deb
 07022a3e1f19307e886e3f47d540a3469907883f 185412 libvarnishapi3_7.7.0-3+deb13u2_armel.deb
 6cf2cd872401ee5ef4ef8af5101c8fe72581cf0c 2065408 varnish-dbgsym_7.7.0-3+deb13u2_armel.deb
 c95cf7766e4a17dc28b03233d51a2410bbcd17bc 10852 varnish_7.7.0-3+deb13u2_armel-buildd.buildinfo
 913c3572a6b298bf18b2698c4cfd188df0d9f217 1114060 varnish_7.7.0-3+deb13u2_armel.deb
Checksums-Sha256:
 0c520f8c6deba3244e2c8c631da37b7d6895de02d1dc4aef6d343c68966659ab 206452 libvarnishapi-dev_7.7.0-3+deb13u2_armel.deb
 f5a932b7d19d0184b78eeec6235b2b13c58c7af1491a6c226cd828c4fd6ac8e7 230808 libvarnishapi3-dbgsym_7.7.0-3+deb13u2_armel.deb
 f12e9a3e7568d22a3f2720516f0d68f82ecf561881a0ef97475df6781d8f264e 185412 libvarnishapi3_7.7.0-3+deb13u2_armel.deb
 e2832a86de69ba82406154fc165b56c67b1d69eedefaa770359d8ab7cb13aec8 2065408 varnish-dbgsym_7.7.0-3+deb13u2_armel.deb
 0daf602b22186b432ca0fe43661fcf8342b66d3070ce74820d8c6e0e89112f5f 10852 varnish_7.7.0-3+deb13u2_armel-buildd.buildinfo
 d0424a6a001284adddaaf9b2a9d78a5dc15e697e738aff08aa12e2dd4a6ea9e5 1114060 varnish_7.7.0-3+deb13u2_armel.deb
Files:
 29e751b0d6b9ecba43896f5581c7209a 206452 libdevel optional libvarnishapi-dev_7.7.0-3+deb13u2_armel.deb
 2916df90c873a468ff07865dc5b6fbbf 230808 debug optional libvarnishapi3-dbgsym_7.7.0-3+deb13u2_armel.deb
 2ce5215d11912ff391d683f6a806e5a2 185412 libs optional libvarnishapi3_7.7.0-3+deb13u2_armel.deb
 50d7f05d28e9bae4f3b57ba414e1306d 2065408 debug optional varnish-dbgsym_7.7.0-3+deb13u2_armel.deb
 c82d88aada485313e9d93017c8eee993 10852 web optional varnish_7.7.0-3+deb13u2_armel-buildd.buildinfo
 f9aa676c857d8d835fc5fe3a6d633712 1114060 web optional varnish_7.7.0-3+deb13u2_armel.deb

-----BEGIN PGP SIGNATURE-----
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=VN9n
-----END PGP SIGNATURE-----