-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 24 Oct 2026 18:03:52 +0800 Source: varnish Binary: libvarnishapi-dev libvarnishapi3 libvarnishapi3-dbgsym varnish varnish-dbgsym Architecture: ppc64el Version: 7.7.0-3+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-conova-01) Changed-By: Aron Xu Description: libvarnishapi-dev - development files for Varnish libvarnishapi3 - shared libraries for Varnish varnish - state of the art, high-performance web accelerator Changes: varnish (7.7.0-3+deb13u2) trixie-security; urgency=medium . * Non-maintainer upload by the Security Team. * Backport the VSV00020 case-conversion workspace overflow fix (CVE-2026-93894), with regression tests. * Backport the complete VSV00018 absolute-form request normalization fix (CVE-2026-34475): validate request URLs, enable HTTPS normalization by default while preserving opt-out, and cover empty paths and query-only targets. Checksums-Sha1: 12f1ed180d1174ef21e5bb07ef9a9e0b6378aa28 206464 libvarnishapi-dev_7.7.0-3+deb13u2_ppc64el.deb e95a8ad24af1dfa207416d527f163e4952fc0745 224480 libvarnishapi3-dbgsym_7.7.0-3+deb13u2_ppc64el.deb 2e1eabec299e8561b6dddf4b6f02dc2e17953dde 198864 libvarnishapi3_7.7.0-3+deb13u2_ppc64el.deb f102f45998b07ea19602990ab4ca83465a0a50e5 2024108 varnish-dbgsym_7.7.0-3+deb13u2_ppc64el.deb feccfea591b261307a8a5bf903026d58fbb2cfe7 11046 varnish_7.7.0-3+deb13u2_ppc64el-buildd.buildinfo ebb8fd38bac79184803d2289cd3bd200bd87aec9 1179348 varnish_7.7.0-3+deb13u2_ppc64el.deb Checksums-Sha256: b20c73440eff9bc1cef3b288f39c697297fa95f9b66b83d7cd3f1344b770935f 206464 libvarnishapi-dev_7.7.0-3+deb13u2_ppc64el.deb 890a179f63d88a40c566a615b665147eb351e5820941c3dbe2269c486e3fc468 224480 libvarnishapi3-dbgsym_7.7.0-3+deb13u2_ppc64el.deb 94d85df0fafb292ce28a3a69f101cfe2f02d4d048563c2b6e6275be59e960635 198864 libvarnishapi3_7.7.0-3+deb13u2_ppc64el.deb c87ca089851f788936bb0dc07ef0789265edce9849c709646470bbd2733078d7 2024108 varnish-dbgsym_7.7.0-3+deb13u2_ppc64el.deb e823cb51a87b3381adf5e16539adcbbce513b36d443f870ca32ad7ab69621e9e 11046 varnish_7.7.0-3+deb13u2_ppc64el-buildd.buildinfo b289b69ad66639e7d7aa3fde6d294bab1ee61659947aaa683feed7a2a1209d92 1179348 varnish_7.7.0-3+deb13u2_ppc64el.deb Files: 889960d3f9b42a91561fc6880fb195f1 206464 libdevel optional libvarnishapi-dev_7.7.0-3+deb13u2_ppc64el.deb 2b35068a3287c6bf2ddefe19724ff93a 224480 debug optional libvarnishapi3-dbgsym_7.7.0-3+deb13u2_ppc64el.deb 9c51613b5586184ddbf4e07334e86fef 198864 libs optional libvarnishapi3_7.7.0-3+deb13u2_ppc64el.deb 166af57c7b74a5f2bc13bd11c92cffc3 2024108 debug optional varnish-dbgsym_7.7.0-3+deb13u2_ppc64el.deb d1ff4b321380be3b719385884f6ee95b 11046 web optional varnish_7.7.0-3+deb13u2_ppc64el-buildd.buildinfo 1340d713e1515c447251f2908f11fde1 1179348 web optional varnish_7.7.0-3+deb13u2_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEDoRc43uRWMOoIqIgDNLUPhbmg7MFAmrcinwACgkQDNLUPhbm g7MQKg/7B3kKQEECue162cEZGlSkjGsz8YvCDExV35cDL9gwHwKgZWPPUrV6HAic UzvmdwFTfQr5z/6J562DhXxe6+05Nkh6oGvvS2vpTy9b19lStXqJ1aspz9MJPhDx h+dQYxvDU2FVb00izZU5GTzPxI+znE2yUWHmpMdjovCWOTEdTVqy8qeIVFhHlbkp mMpBZ6jo23urXEI+xIC6ca4k9jNBAJucQIiABEs/0Hnu8JtyROnvaa4VWFGoNq4b kZLyiwtTeGUfW8Z37+kRV6umwdmi63O+8p45Ga/84Kxd1VDPBnK55cOyqqvPCNyy SpYkdLpq7FiYNXe6g1zwuyyIx3FB9Rema72quSHwE8abm+LumHX9seefCa1t3FSC qG6+iAL0MR0/ARqfuimIJru+H3DDtOXKZoiQKrwKK/wyDSRSAiqlvxjfQPx8PaNw FE00ZDmvgiNF3JdQX8RxugwUqp9oVJZjoMOFUsjA/G8v/HCw+KfZmZv/AVL9qi7v S3SmpWtMiG8oQzgqX2uMAfrss3JN7K+jnwFHiN5oONkNH2GThagWzeizfDA76RsU ztangqYJ60WqXlvQmKXcsAwNnfnoOLh4h7VdUyiHc8dMqjNdCG7je/MhCupEJ2a6 4lK2gnQ1l418iKiVd42qSHI+18NU2lSkGbP0Qu7KYNlOqzkCjLU= =1xnj -----END PGP SIGNATURE-----