-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 10 Aug 2026 12:00:02 +0800
Source: caddy
Architecture: source
Version: 2.6.2-12+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Changes:
caddy (2.6.2-12+deb13u1) trixie-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Backport upstream fixes for multiple security issues:
CVE-2026-27585, CVE-2026-27587, CVE-2026-27588, CVE-2026-27589,
CVE-2026-27590, CVE-2026-45692, CVE-2026-52845, CVE-2026-52846
* d/control: change Built-Using to Static-Built-Using (as in 2.11.2-1).
Checksums-Sha1:
cfc166ad52c0f23c8c90497e4fc5c2db4e63686d 3144 caddy_2.6.2-12+deb13u1.dsc
ac41889b3bbccb7b9530275308e9cbb52c5bfe6a 22770 caddy_2.6.2.orig-dist.tar.gz
51f5c18075933a255a773a380f7f57e7350730cc 541579 caddy_2.6.2.orig.tar.gz
3242209c96bddb1292abcb07f6607802b17aa0b7 295576 caddy_2.6.2-12+deb13u1.debian.tar.xz
20e56e0fe644c26a147f42b51d9e1b8ff94d23c5 5922 caddy_2.6.2-12+deb13u1_source.buildinfo
Checksums-Sha256:
53621a5edc92eca09976c9007087fdfa59cc9597cd8ae2f9042d9df18c676c8b 3144 caddy_2.6.2-12+deb13u1.dsc
95e86794dbe16372451acf16a049d19a85fb8341dcbaf4fc5c79c3698934726f 22770 caddy_2.6.2.orig-dist.tar.gz
b6f92ee37462851e125c2c725a2a7fefa045a46478eeb4e751f24c9a827e8668 541579 caddy_2.6.2.orig.tar.gz
ad357ac1631880fcabfb477a94898ba0c87a2fd4f9da69f5e9f13f6cf113a6ac 295576 caddy_2.6.2-12+deb13u1.debian.tar.xz
dc6baba93ccc591329d45251c9053ae3e401aed349efbb55a42355f1c553c2d9 5922 caddy_2.6.2-12+deb13u1_source.buildinfo
Files:
7a06a119a4e8811aa4e974b38fc87cdf 3144 httpd optional caddy_2.6.2-12+deb13u1.dsc
4516e89eb1b6c8fbc66ec7023ba6ff18 22770 httpd optional caddy_2.6.2.orig-dist.tar.gz
bd0034017a5cc30f86e1cfeda35475bf 541579 httpd optional caddy_2.6.2.orig.tar.gz
e3d83bbf47bbe23aad9e847b7082b82e 295576 httpd optional caddy_2.6.2-12+deb13u1.debian.tar.xz
96b98df82aea9ee06fb04442a64b1826 5922 httpd optional caddy_2.6.2-12+deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmp51KgACgkQ+GQ1dHE8
m649hQf/aoB4g3uum28BWsIQ5ywldJ1tbw87MgIBiYJChrip6dzx/WO4Kd2JgwnQ
5fAtwHeQHR65h8H8aP8ZEsq0mPizukHMug0K3qeEcHylmuy4mWKLBfX1T/9G6m23
esKWBppqbHeR2BR1crhjV2X6bZv6cXRelutDJKKo+EOqHC4mFGILAU5j4+Vy/CJ6
sn/gr3Rp6Orxcr+VGf0GbhFWbVPeMJavRNvIHWhjvkSBhWOLxp4Dekg6jr54Jpig
P1wQL2VxsZelcP5KRNWiUhBw9dAuLbtVhGJfIkS0VdAZxnu09X5HVVKLmLIgWc3q
9aU4YxpVOPYTS5RmLi90b716jGKbBw==
=YYzr
-----END PGP SIGNATURE-----
