-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 20 Jul 2026 22:26:49 +0530
Source: squid
Built-For-Profiles: noudeb
Architecture: source
Version: 5.7-2+deb12u6
Distribution: bookworm-security
Urgency: high
Maintainer: Luigi Gangitano <luigi@debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Changes:
squid (5.7-2+deb12u6) bookworm-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Add patch to harden peerDigestSwapInMask against invalid cache digest
reply. (Fixes: CVE-2026-50012)
* Add patch to improve parsing of certain FTP directory listing formats.
(Fixes: CVE-2026-47729)
* Add patch to not escape malformed URI twice when sending ICP errors.
(Fixes: CVE-2026-33526)
* Add patch to fix validation of ICP packet sizes and URLs.
(Fixes: CVE-2026-33515)
Checksums-Sha1:
e11b8af7d6394ae2eadf16eb6f8c4c13aa84fbfa 2749 squid_5.7-2+deb12u6.dsc
141e8007d6b1cfee34654127a9ca025125b37b58 2566560 squid_5.7.orig.tar.xz
2ff5b41e258d9f9454c00e48a9d573f525121ed8 95356 squid_5.7-2+deb12u6.debian.tar.xz
081986b36a086e154d58f44508c55c956d6e313d 6921 squid_5.7-2+deb12u6_source.buildinfo
Checksums-Sha256:
d93788b1dd7ba2cd4ba26f6994ad6b0d2cbdd19be41f718cd1690ee5ba5ef49c 2749 squid_5.7-2+deb12u6.dsc
6b0753aaba4c9c4efd333e67124caecf7ad6cc2d38581f19d2f0321f5b7ecd81 2566560 squid_5.7.orig.tar.xz
b7738d194a89ab1e5a0f6fd21c6130693c7cce4a1c4437af4d271e94112b25ee 95356 squid_5.7-2+deb12u6.debian.tar.xz
72a2b6297543cf36aebb806cb2416d2369ac333f1513a552c14f92c5adc07c30 6921 squid_5.7-2+deb12u6_source.buildinfo
Files:
320d43a8c9d676fe28bb87e897566556 2749 web optional squid_5.7-2+deb12u6.dsc
7a3764a3c5833631a779d7827901cda7 2566560 web optional squid_5.7.orig.tar.xz
2afcebd26adf20a148f455332bf9b9cb 95356 web optional squid_5.7-2+deb12u6.debian.tar.xz
3ff98a38e6e5deee705b5c5b68921a7d 6921 web optional squid_5.7-2+deb12u6_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJHBAEBCAAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAmpicXITHHV0a2Fyc2hA
ZGViaWFuLm9yZwAKCRCCPpZ2BsNLltYwEACv4uGtCY81YebCxREMVzL88cY/1h9n
o0z8Op+XEYZ3F5e6QAtda4gzEJ2GWzuOV1/iEaGT67xBkWrGzb1Tg8aXte95PSSG
aTZjJ48j7obDePMIiTow6ee9Wz9+Lxc/Y5j+PEUotrNhWo5aZJV5o4zxOBXNEG6v
urbWDCrvDXlAh3LcUXX8ILZhJAxFKX2imMRhSbmfdRCqMo0emsB4P9IsJI1PSJDy
s+AnVpGy0wxRJsZZfrLcoIoLJgXyT3DSXRn81E+RIFMM/tBsjsPnBc4uF4ZC3rtm
hr/tlu2ObF4qS8ikWT4uicr6LLI4FNIR3HOQ60lMkMPq635+Re3SCbH33RgGZY87
XdzQUCjkRTxjmTL1CYGB79fCgAkDu/h8HEacXVwnY6eVV8zqq9OOechtIeN5OPb/
Ef1M7m/teolgTQCJ/aThjORcPrUzc6hRX6LmwKUVdr9wGs1SHjFE1ET1tsbfqTEt
mkvbLZwcMagN36AOzdOoBc8dZ6TMC79iyBlsFfoKXTn5R4pW1uZ0PyrcCWTSHodv
XIFCyKbl/GuGel8BcU9Ay9kM48o1Hl4MU7i49991ezt/BjSlzlg1r+FAMOwa+NrW
sSWWW/VESRHAdDV/ELBjlCAbsbvZZfkoFMg/1NfPdRrxZ3bFshsCX5fQ6cSEYDuI
UfqImRge1r0Ngg==
=ZFlE
-----END PGP SIGNATURE-----
