-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 10 Aug 2026 12:00:02 +0800
Source: caddy
Binary: caddy caddy-dbgsym
Architecture: armhf
Version: 2.6.2-12+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-ubc-05) <buildd_arm64-arm-ubc-05@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 caddy      - Fast, lightweight web server with automatic HTTPS
Changes:
 caddy (2.6.2-12+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Backport upstream fixes for multiple security issues:
     CVE-2026-27585, CVE-2026-27587, CVE-2026-27588, CVE-2026-27589,
     CVE-2026-27590, CVE-2026-45692, CVE-2026-52845, CVE-2026-52846
   * d/control: change Built-Using to Static-Built-Using (as in 2.11.2-1).
Checksums-Sha1:
 9dea3495e64fbc43845e44465d4d9cd9c019bf85 9797828 caddy-dbgsym_2.6.2-12+deb13u1_armhf.deb
 f48c1563d6a22d2316963626dbcb0b1b25ecc9f9 19265 caddy_2.6.2-12+deb13u1_armhf-buildd.buildinfo
 6e27b2ff65aa00b2142ae18c3c7cc2ae3258c7b7 8765172 caddy_2.6.2-12+deb13u1_armhf.deb
Checksums-Sha256:
 feb4a0dbe39a8d412ea2ee55d4d496c77fd93d70f5aa97a5e002b155d3373ac4 9797828 caddy-dbgsym_2.6.2-12+deb13u1_armhf.deb
 25639395c67270ac2f8397401436b0f0c687748f98b0cce912ac1d97e87fe7aa 19265 caddy_2.6.2-12+deb13u1_armhf-buildd.buildinfo
 d0a22dd1e0223182e07191f986cb13df4ef71e1ad5dfc8416941d3bc377b70e6 8765172 caddy_2.6.2-12+deb13u1_armhf.deb
Files:
 e2482b5d368182ac44f5091cda2858b3 9797828 debug optional caddy-dbgsym_2.6.2-12+deb13u1_armhf.deb
 2261a3cda47e11c2a46635ab2d667b2a 19265 httpd optional caddy_2.6.2-12+deb13u1_armhf-buildd.buildinfo
 da44a0289e9d582659f04a63ba80090d 8765172 httpd optional caddy_2.6.2-12+deb13u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=lU2l
-----END PGP SIGNATURE-----