-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 23 Oct 2026 13:07:48 +0800 Source: vinyl-cache Architecture: source Version: 9.0.1-4.1 Distribution: unstable Urgency: high Maintainer: Vinyl Cache Package Maintainers <team+varnish-team@tracker.debian.org> Changed-By: Aron Xu <aron@debian.org> Closes: 1148187 Changes: vinyl-cache (9.0.1-4.1) unstable; urgency=high . * Non-maintainer upload. * Backport the fix for the VCL .upper()/.lower() workspace overflow (CVE-2026-93894, VSV00020). (Closes: #1148187) Checksums-Sha1: 9214b03a1351ab7267010b4cbb4945094b69b44e 2172 vinyl-cache_9.0.1-4.1.dsc db4865334d65afdfae08113318dc127f2637a5fd 35888 vinyl-cache_9.0.1-4.1.debian.tar.xz b22e53804f4b2bb973725433984539c7c3c5392c 9993 vinyl-cache_9.0.1-4.1_source.buildinfo Checksums-Sha256: 928e19c5c75167953d8396df933cea4e7c41b7b59a9f9e02bf018b6589cab11c 2172 vinyl-cache_9.0.1-4.1.dsc 0bae998b9cc18ab623fdb8a1b5d48c4bd6c00304e645b9b4725d9e93abd1900a 35888 vinyl-cache_9.0.1-4.1.debian.tar.xz 869cffe80e2dd782310f56e71fbebc798f1576047ac10bbc0c4f91b7c9ac8607 9993 vinyl-cache_9.0.1-4.1_source.buildinfo Files: 293c5c3f4a2ea24ab83740a323322a8e 2172 web optional vinyl-cache_9.0.1-4.1.dsc 19fcccb617edb0aed63b7f053d975feb 35888 web optional vinyl-cache_9.0.1-4.1.debian.tar.xz 33c6ac42926b13664dcafa10366534a2 9993 web optional vinyl-cache_9.0.1-4.1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmrcW5wACgkQ+GQ1dHE8 m65GLAf+J6+lLiOA+bLCFOwzhkGpzOMTTntFkR5310fTE0t6Eg1ezl6mg6w96h1C 0RSMB/xGnDzlYmbjNzuYMSsqdoKjWh/BI1WMsa4ca4b53vtU33uv8YVgS6gSpKD+ p3Fq7isCS7BwRqIz8MvprFZR8qalkZ8ITFwaVkjZ9jQgCYq5qNhTKP6Rkc+k4F2N N+QSe8jSO0VWfGD/N5tc2ZdEVnhJrr+TaS1l4mHhn0vICvfApPPwmOx+/uRbCRkG 16jvH8LVBsz7ezvb1HuvwK1ya3owRKto3XrJnhtKVfmPb/voMitkTa2q6jdWVAIn vzrKjIuwEdscDpY/9xo9TYp2asF/uw== =1CiQ -----END PGP SIGNATURE-----