-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 10 Aug 2026 12:00:02 +0800
Source: caddy
Binary: caddy caddy-dbgsym
Architecture: amd64
Version: 2.6.2-12+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 caddy      - Fast, lightweight web server with automatic HTTPS
Changes:
 caddy (2.6.2-12+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Backport upstream fixes for multiple security issues:
     CVE-2026-27585, CVE-2026-27587, CVE-2026-27588, CVE-2026-27589,
     CVE-2026-27590, CVE-2026-45692, CVE-2026-52845, CVE-2026-52846
   * d/control: change Built-Using to Static-Built-Using (as in 2.11.2-1).
Checksums-Sha1:
 5d61853c491972760cfd2308c0c4de38d28b9d44 11072660 caddy-dbgsym_2.6.2-12+deb13u1_amd64.deb
 7261660fba2b6b7f712023440df36ea503f51f16 19405 caddy_2.6.2-12+deb13u1_amd64-buildd.buildinfo
 9093cc760a95564546bac4c7ef055897aab5eb08 10110872 caddy_2.6.2-12+deb13u1_amd64.deb
Checksums-Sha256:
 0a5c950970cad6114d0c4341b40972acd6a8ee641b3952206c8e0e93d17c2b3b 11072660 caddy-dbgsym_2.6.2-12+deb13u1_amd64.deb
 0bf3ce4c6d857034ac10cfcded4d81cbf823716f06957e685a3d9f7fea8f5afe 19405 caddy_2.6.2-12+deb13u1_amd64-buildd.buildinfo
 f173515859f273c97219cc242d625a64650fefdd136a9570acb1b5f7581c9786 10110872 caddy_2.6.2-12+deb13u1_amd64.deb
Files:
 969cdd69e64bfed788edf6b004498f1c 11072660 debug optional caddy-dbgsym_2.6.2-12+deb13u1_amd64.deb
 da0c19f3614f74b2f914f998936c7a52 19405 httpd optional caddy_2.6.2-12+deb13u1_amd64-buildd.buildinfo
 a8b3012c3c0e784fd7415a1e5856d616 10110872 httpd optional caddy_2.6.2-12+deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=EfYQ
-----END PGP SIGNATURE-----