-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 24 Oct 2026 18:03:52 +0800 Source: varnish Binary: libvarnishapi-dev libvarnishapi3 libvarnishapi3-dbgsym varnish varnish-dbgsym Architecture: s390x Version: 7.7.0-3+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: s390x Build Daemon (zandonai) Changed-By: Aron Xu Description: libvarnishapi-dev - development files for Varnish libvarnishapi3 - shared libraries for Varnish varnish - state of the art, high-performance web accelerator Changes: varnish (7.7.0-3+deb13u2) trixie-security; urgency=medium . * Non-maintainer upload by the Security Team. * Backport the VSV00020 case-conversion workspace overflow fix (CVE-2026-93894), with regression tests. * Backport the complete VSV00018 absolute-form request normalization fix (CVE-2026-34475): validate request URLs, enable HTTPS normalization by default while preserving opt-out, and cover empty paths and query-only targets. Checksums-Sha1: 52d7cbe6acae1bbe3b74e9ec60b1891e189b2ed7 206468 libvarnishapi-dev_7.7.0-3+deb13u2_s390x.deb 1404c5766dc60e826d34a56502b52890f010d8eb 238476 libvarnishapi3-dbgsym_7.7.0-3+deb13u2_s390x.deb 95fa22b6b9c75782612827d0e40dab78a4bd9a5e 187168 libvarnishapi3_7.7.0-3+deb13u2_s390x.deb 04e2c8a9957d25e679e30c2f45d8d1f88715351d 2155960 varnish-dbgsym_7.7.0-3+deb13u2_s390x.deb bad609d2e590a40c8b9db044c80123608d81e0bb 10802 varnish_7.7.0-3+deb13u2_s390x-buildd.buildinfo 18b10f2871de9b3c9559e62f576a095afe34af1c 1105808 varnish_7.7.0-3+deb13u2_s390x.deb Checksums-Sha256: dfd89741e594141a753f2a509478dfcc12787cdcc200232e8231b08709508e50 206468 libvarnishapi-dev_7.7.0-3+deb13u2_s390x.deb 9c161912aa08b0df3d868564325836e9127d3f9fbeb8165e68e5c1a25be4abf3 238476 libvarnishapi3-dbgsym_7.7.0-3+deb13u2_s390x.deb fd58451148d4d362e99d1ca2b4023af44e0781f39dae294f76d9232a25895901 187168 libvarnishapi3_7.7.0-3+deb13u2_s390x.deb c77574cd90dc6c65e33f68ddc89629fca73f3e6c97fd1b83d9a868f518e1f21a 2155960 varnish-dbgsym_7.7.0-3+deb13u2_s390x.deb dd5b61df82b78a02ac838e1b00cb5a315574164eeff8b91a0f213cefc0cfa6b3 10802 varnish_7.7.0-3+deb13u2_s390x-buildd.buildinfo 1efb8f3b63473dcc5b560e2077b1aa65f66e165170e79eceeeae925f4260c6b6 1105808 varnish_7.7.0-3+deb13u2_s390x.deb Files: c7252e0d12e252edc49cae07bb409fd5 206468 libdevel optional libvarnishapi-dev_7.7.0-3+deb13u2_s390x.deb 35d7d01ba241a955574ae50c7cce02e6 238476 debug optional libvarnishapi3-dbgsym_7.7.0-3+deb13u2_s390x.deb 8f6aab03a253eeec30b623ddc900400b 187168 libs optional libvarnishapi3_7.7.0-3+deb13u2_s390x.deb 7f90b0425ffb9fbbea0484369227d90a 2155960 debug optional varnish-dbgsym_7.7.0-3+deb13u2_s390x.deb afd95d224ada5e4afea57afcc83c5089 10802 web optional varnish_7.7.0-3+deb13u2_s390x-buildd.buildinfo a072335964f3fb9ae19651ad694c25f3 1105808 web optional varnish_7.7.0-3+deb13u2_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPFXUCSHwedwJxYxMojUpyTy8GroFAmrcjBwACgkQojUpyTy8 GrpZcRAAijI5NjK6tA/pDAdGkDAYG2P5GH8jtOha5ljzb0vu9tWKVmnpTLWFyj+q rnim+P3xCtrtnd2d4lFS9bpkob++j+e3M2U7Ug0QOnWZHUIUehY+BMWxSPtwm9og 2h+SDOsPxLU7ItM6gP4m7NwZHcoNKiDqLe2M1UR52ABd1RsHqliM3NGBOqs18TXA 487/kvG1D5ro/dInSGOOk6hKIUIwXo+6Nw1XK54xzRFq6XzaPl6Nt7DdYqFu24nF 03Tulb2pu/oDvybyuhcHPCO9qnNV5Jv5xTaz0VZbyLHEiDywoyqo02B6Aaus/RTG dhs4nowv61faWavuQPz++yGQIEF1LiuyEmJjPnVrXSsvVeUQTq9CH8/34wT7pF71 LQq2lb8M/OoFhr1DudhWWEZSk/oEXBW3DS7Vu1k1wpKqBtI5BQqAAXThbDMODchO DdzjMlytXsnHnoJ60ircKgEIkremm24AT4xweDCEtL0EQeh9dNmGpEBqzuVIaMvJ VIxUyk4rRv1OMPP3+SiXPc1a+zXokd17ieyPNULXQQSdsIxQdojzICfN9IkFn5sf ZGcfTjIJt38OfRwU04OcL0f97YuLtJQXPJecP6QQUsXQNS+DIAixVETgMn+M5C4Z oGO4hgoyRnm9irVmoKUVbynONQiY1zU/DXThrziVoOouAclvFwc= =xZAZ -----END PGP SIGNATURE-----