-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 21 Jul 2026 09:00:00 +0530
Source: squid
Built-For-Profiles: noudeb
Architecture: source
Version: 4.13-10+deb11u7
Distribution: bullseye-security
Urgency: high
Maintainer: Luigi Gangitano <luigi@debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Changes:
squid (4.13-10+deb11u7) bullseye-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* Add patch to harden peerDigestSwapInMask against invalid cache digest
reply. (Fixes: CVE-2026-50012)
* Add patch to improve parsing of certain FTP directory listing formats.
(Fixes: CVE-2026-47729)
* Add patch to not escape malformed URI twice when sending ICP errors.
(Fixes: CVE-2026-33526)
* Add patch to fix validation of ICP packet sizes and URLs.
(Fixes: CVE-2026-33515)
Checksums-Sha1:
6c363adc5135c1e16774235ad812a8fa010f8a2e 2782 squid_4.13-10+deb11u7.dsc
cac95c18789e9ecd6620c2f278fc3900498c065b 2452752 squid_4.13.orig.tar.xz
0d48c131944d84205ca95aec3ba3597bb9ddd1a5 122076 squid_4.13-10+deb11u7.debian.tar.xz
a9277dc80af6e8a2090fa5be82a42d82e89caf03 6929 squid_4.13-10+deb11u7_source.buildinfo
Checksums-Sha256:
146beca50fb98b382423b29b3b0840ddc5c0435b39c48dad971c46fc866ccf33 2782 squid_4.13-10+deb11u7.dsc
6891a0f540e60779b4f24f1802a302f813c6f473ec7336a474ed68c3e2e53ee0 2452752 squid_4.13.orig.tar.xz
8250a169dc292c085d3535015d04c9a787362b72466f092733189c418d5a2b47 122076 squid_4.13-10+deb11u7.debian.tar.xz
84ea8f1fd9090e6ce2fe7864c88b6635b4ecb284907b88dfad201349500a256f 6929 squid_4.13-10+deb11u7_source.buildinfo
Files:
8dc050d5a29a8068281bc5dca2dba7e4 2782 web optional squid_4.13-10+deb11u7.dsc
492e54afc15821141ff1d1d9903854d6 2452752 web optional squid_4.13.orig.tar.xz
9922a00b6959dfef97af0b8da9fc3425 122076 web optional squid_4.13-10+deb11u7.debian.tar.xz
2858c3c156a5ebd02fca341e3ad455d1 6929 web optional squid_4.13-10+deb11u7_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=2nFt
-----END PGP SIGNATURE-----
