-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 30 Oct 2026 21:28:27 +0800
Source: squid
Architecture: source
Version: 6.13-2+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: Luigi Gangitano <luigi@debian.org>
Changed-By: Aron Xu <aron@debian.org>
Changes:
 squid (6.13-2+deb13u4) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-2026-61642: Reject prohibited bare identity Transfer-Encoding.
     Add debian/patches/CVE-2026-61642.patch.
   * CVE-2026-104786: Bound HTTP authentication credential encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * SQUID-2026:8: Bound ICAP authentication annotation encodings.
     Add debian/patches/CVE-2026-104786.patch.
   * ICAP username encoding follow-up: Bound the independent X-Client-Username
     encoder. Add debian/patches/icap-username-encoding.patch.
   * CVE-2026-62846: Reject illegal FTP command framing. Add
     debian/patches/CVE-2026-62846-523ed3b0.patch.
Checksums-Sha1:
 5d32df1ef901a97839288ef5bed3374f90315811 2611 squid_6.13-2+deb13u4.dsc
 a28f4b39916fd597a02d09859f2e78845a9caf6d 2548680 squid_6.13.orig.tar.xz
 03ab27396e4ca9823e5e9a16a6b0c2bf5dce4192 745 squid_6.13.orig.tar.xz.asc
 3d91ea3e3f1a8642c3fb657f6a8f477d0cc8f445 54780 squid_6.13-2+deb13u4.debian.tar.xz
 f992ec7d758f7eb3142da63e9d4e76dd988be195 7383 squid_6.13-2+deb13u4_source.buildinfo
Checksums-Sha256:
 d20521a1427a1d40078045ae82f1f6c0b60053879ddc9e3ca720e0b1c746f583 2611 squid_6.13-2+deb13u4.dsc
 232e0567946ccc0115653c3c18f01e83f2d9cc49c43d9dead8b319af0b35ad52 2548680 squid_6.13.orig.tar.xz
 e262fd0eb4e9521193f9c8fc650d55661d12b007f7e5c03f0a3f5745130b4b13 745 squid_6.13.orig.tar.xz.asc
 2c18dc32cb9e85590642525c7059431e23f8342f9573e680a8792c7e65c242f0 54780 squid_6.13-2+deb13u4.debian.tar.xz
 8f5322072f0c3da29decfa02c6d3074468f791e83eb66382dff801fa65430a34 7383 squid_6.13-2+deb13u4_source.buildinfo
Files:
 9fb65e1393db7c53ea07ee361489f602 2611 web optional squid_6.13-2+deb13u4.dsc
 ee5b2728512b6377290cabbe1c2279a0 2548680 web optional squid_6.13.orig.tar.xz
 ca8d44bc361c869ca230da8d8e4d68fa 745 web optional squid_6.13.orig.tar.xz.asc
 d61f49992e8dc102e5e5fb14c1463a68 54780 web optional squid_6.13-2+deb13u4.debian.tar.xz
 20602d345819cfbfc2805c521cd2e58f 7383 web optional squid_6.13-2+deb13u4_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmrpt4QACgkQ+GQ1dHE8
m660PQgA6hQtIXXHmeyLeZzUzHbaPuFdaXJQ1SFTLMpveMnptexJxy83UaV0tE1h
3rEPZ3d18e5M+1zqRwgngDedusVLXRWYdua/4qPu8UlLC7Mryx4m5DgJq/kcqOAP
gyhYyShlLkARNXrQym4mWAvBzLo35P2fnMSEAqs+7FxiyRl5vNZ6PH9tQr/IffqX
TU4oR+wMxZcyZIrnbTuEu8sVhn6j3xTlJDPqIdPE2aO5mxg8Y+I/BFZzYbxS03of
VbmtGZYGlAq4hgZyRDWbo8Kg2t0NFgHixBuels6TufEen/ZyMK5057FsbuWnzZtg
ZA7YqCNo8UJgSuJeGjJzBhmyyZTH/g==
=elg9
-----END PGP SIGNATURE-----