-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 30 Oct 2026 21:28:27 +0800
Source: squid
Binary: squid-common
Architecture: all
Version: 6.13-2+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 squid-common - Full featured Web Proxy cache (HTTP proxy) - common files
Changes:
 squid (6.13-2+deb13u4) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-2026-61642: Reject prohibited bare identity Transfer-Encoding.
     Add debian/patches/CVE-2026-61642.patch.
   * CVE-2026-104786: Bound HTTP authentication credential encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * SQUID-2026:8: Bound ICAP authentication annotation encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * ICAP username encoding follow-up: Bound the independent X-Client-Username
     encoder. Add debian/patches/icap-username-encoding.patch.
   * CVE-2026-62846: Reject illegal FTP command framing. Add
     debian/patches/CVE-2026-62846-523ed3b0.patch.
Checksums-Sha1:
 11649ef863db1c4a8179a8750d782d2b5be1b43f 321740 squid-common_6.13-2+deb13u4_all.deb
 9c81b87d810bd803af30d71d1bc6e0b177b3aab4 7771 squid_6.13-2+deb13u4_all-buildd.buildinfo
Checksums-Sha256:
 aa0fccfb6e0fd1b7a3d887afb41a88f190dee4bfbaa82c627e65c609d609433c 321740 squid-common_6.13-2+deb13u4_all.deb
 3fdb28336e606f1426306230178fc1beb5f64ec11a5a1236d459fe402e242b5e 7771 squid_6.13-2+deb13u4_all-buildd.buildinfo
Files:
 9db824dcdcfca905928a6e7826402639 321740 web optional squid-common_6.13-2+deb13u4_all.deb
 9a035fc72933145ec4bceca907b06cb0 7771 web optional squid_6.13-2+deb13u4_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=L4v4
-----END PGP SIGNATURE-----