-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Aug 2026 12:00:02 +0800 Source: caddy Architecture: source Version: 2.6.2-12+deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Go Packaging Team Changed-By: Aron Xu Changes: caddy (2.6.2-12+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * Backport upstream fixes for multiple security issues: CVE-2026-27585, CVE-2026-27587, CVE-2026-27588, CVE-2026-27589, CVE-2026-27590, CVE-2026-45692, CVE-2026-52845, CVE-2026-52846 * d/control: change Built-Using to Static-Built-Using (as in 2.11.2-1). Checksums-Sha1: cfc166ad52c0f23c8c90497e4fc5c2db4e63686d 3144 caddy_2.6.2-12+deb13u1.dsc ac41889b3bbccb7b9530275308e9cbb52c5bfe6a 22770 caddy_2.6.2.orig-dist.tar.gz 51f5c18075933a255a773a380f7f57e7350730cc 541579 caddy_2.6.2.orig.tar.gz 3242209c96bddb1292abcb07f6607802b17aa0b7 295576 caddy_2.6.2-12+deb13u1.debian.tar.xz 20e56e0fe644c26a147f42b51d9e1b8ff94d23c5 5922 caddy_2.6.2-12+deb13u1_source.buildinfo Checksums-Sha256: 53621a5edc92eca09976c9007087fdfa59cc9597cd8ae2f9042d9df18c676c8b 3144 caddy_2.6.2-12+deb13u1.dsc 95e86794dbe16372451acf16a049d19a85fb8341dcbaf4fc5c79c3698934726f 22770 caddy_2.6.2.orig-dist.tar.gz b6f92ee37462851e125c2c725a2a7fefa045a46478eeb4e751f24c9a827e8668 541579 caddy_2.6.2.orig.tar.gz ad357ac1631880fcabfb477a94898ba0c87a2fd4f9da69f5e9f13f6cf113a6ac 295576 caddy_2.6.2-12+deb13u1.debian.tar.xz dc6baba93ccc591329d45251c9053ae3e401aed349efbb55a42355f1c553c2d9 5922 caddy_2.6.2-12+deb13u1_source.buildinfo Files: 7a06a119a4e8811aa4e974b38fc87cdf 3144 httpd optional caddy_2.6.2-12+deb13u1.dsc 4516e89eb1b6c8fbc66ec7023ba6ff18 22770 httpd optional caddy_2.6.2.orig-dist.tar.gz bd0034017a5cc30f86e1cfeda35475bf 541579 httpd optional caddy_2.6.2.orig.tar.gz e3d83bbf47bbe23aad9e847b7082b82e 295576 httpd optional caddy_2.6.2-12+deb13u1.debian.tar.xz 96b98df82aea9ee06fb04442a64b1826 5922 httpd optional caddy_2.6.2-12+deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmp51KgACgkQ+GQ1dHE8 m649hQf/aoB4g3uum28BWsIQ5ywldJ1tbw87MgIBiYJChrip6dzx/WO4Kd2JgwnQ 5fAtwHeQHR65h8H8aP8ZEsq0mPizukHMug0K3qeEcHylmuy4mWKLBfX1T/9G6m23 esKWBppqbHeR2BR1crhjV2X6bZv6cXRelutDJKKo+EOqHC4mFGILAU5j4+Vy/CJ6 sn/gr3Rp6Orxcr+VGf0GbhFWbVPeMJavRNvIHWhjvkSBhWOLxp4Dekg6jr54Jpig P1wQL2VxsZelcP5KRNWiUhBw9dAuLbtVhGJfIkS0VdAZxnu09X5HVVKLmLIgWc3q 9aU4YxpVOPYTS5RmLi90b716jGKbBw== =YYzr -----END PGP SIGNATURE-----