Packages / Debian 13 (Trixie) / web / varnish

Package: varnish (7.7.0-3+deb13u2)

state of the art, high-performance web accelerator

Other Packages Related to varnish:

dep: [libc6] (>= 2.38)
GNU C Library: Shared libraries
dep: [libedit2] (>= 2.11-20080614-0)
BSD editline and history libraries
dep: [libjemalloc2] (>= 2.1.1)
general-purpose scalable concurrent malloc(3) implementation
dep: [libncursesw6] (>= 6)
shared libraries for terminal handling (wide character support)
dep: [libpcre2-8-0] (>= 10.32)
New Perl Compatible Regular Expression Library- 8 bit runtime files
dep: [libtinfo6] (>= 6)
shared low-level terminfo library for terminal handling
dep: [libvarnishapi3] (>= 7.5.0~)
shared libraries for Varnish
dep: [systemd]
system and service manager
dep: [systemd-standalone-sysusers]
standalone sysusers binary for use in non-systemd systems
dep: systemd-sysusers
Package not available
dep: [gcc-x86-64-linux-gnu]
GNU C compiler for the amd64 architecture
dep: [binutils]
GNU assembler, linker and binary utilities
dep: [libc6-dev]
GNU C Library: Development Libraries and Header Files
dep: libc6.1-dev
Package not available

sug: [varnish-doc]
documentation for Varnish Cache

Download varnish

Architecture	Package size	Installed size	Files	Package
amd64	1.1 MiB	3.2 MiB	list of files	Download
arm64	1.1 MiB	3.8 MiB	list of files	Download

Package file paths (83)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/etc/logrotate.d/varnish
/etc/varnish/default.vcl
/usr/bin/varnishadm
/usr/bin/varnishhist
/usr/bin/varnishlog
/usr/bin/varnishncsa
/usr/bin/varnishstat
/usr/bin/varnishtest
/usr/bin/varnishtop
/usr/lib/aarch64-linux-gnu/varnish/vmods/libvmod_blob.so
/usr/lib/aarch64-linux-gnu/varnish/vmods/libvmod_cookie.so
/usr/lib/aarch64-linux-gnu/varnish/vmods/libvmod_debug.so
/usr/lib/aarch64-linux-gnu/varnish/vmods/libvmod_directors.so
/usr/lib/aarch64-linux-gnu/varnish/vmods/libvmod_h2.so
/usr/lib/aarch64-linux-gnu/varnish/vmods/libvmod_proxy.so
/usr/lib/aarch64-linux-gnu/varnish/vmods/libvmod_purge.so
/usr/lib/aarch64-linux-gnu/varnish/vmods/libvmod_std.so
/usr/lib/aarch64-linux-gnu/varnish/vmods/libvmod_unix.so
/usr/lib/aarch64-linux-gnu/varnish/vmods/libvmod_vtc.so
/usr/lib/systemd/system/varnishncsa.service
/usr/lib/systemd/system/varnish.service
/usr/lib/sysusers.d/varnish2.conf
/usr/lib/sysusers.d/varnish.conf
/usr/lib/tmpfiles.d/varnish.conf
/usr/lib/x86_64-linux-gnu/varnish/vmods/libvmod_blob.so
/usr/lib/x86_64-linux-gnu/varnish/vmods/libvmod_cookie.so
/usr/lib/x86_64-linux-gnu/varnish/vmods/libvmod_debug.so
/usr/lib/x86_64-linux-gnu/varnish/vmods/libvmod_directors.so
/usr/lib/x86_64-linux-gnu/varnish/vmods/libvmod_h2.so
/usr/lib/x86_64-linux-gnu/varnish/vmods/libvmod_proxy.so
/usr/lib/x86_64-linux-gnu/varnish/vmods/libvmod_purge.so
/usr/lib/x86_64-linux-gnu/varnish/vmods/libvmod_std.so
/usr/lib/x86_64-linux-gnu/varnish/vmods/libvmod_unix.so
/usr/lib/x86_64-linux-gnu/varnish/vmods/libvmod_vtc.so
/usr/sbin/varnishd
/usr/share/doc/varnish/builtin.vcl.gz
/usr/share/doc/varnish/changelog.Debian.gz
/usr/share/doc/varnish/changelog.gz
/usr/share/doc/varnish/changelog.html.gz
/usr/share/doc/varnish/changes.rst.gz
/usr/share/doc/varnish/copyright
/usr/share/doc/varnish/examples/systemd/varnish.commandline.conf
/usr/share/doc/varnish/examples/systemd/varnishncsa.errors-only.conf
/usr/share/doc/varnish/README.rst
/usr/share/lintian/overrides/varnish
/usr/share/man/man1/varnishadm.1.gz
/usr/share/man/man1/varnishd.1.gz
/usr/share/man/man1/varnishhist.1.gz
/usr/share/man/man1/varnishlog.1.gz
/usr/share/man/man1/varnishncsa.1.gz
/usr/share/man/man1/varnishstat.1.gz
/usr/share/man/man1/varnishtest.1.gz
/usr/share/man/man1/varnishtop.1.gz
/usr/share/man/man3/vmod_blob.3.gz
/usr/share/man/man3/vmod_cookie.3.gz
/usr/share/man/man3/vmod_directors.3.gz
/usr/share/man/man3/vmod_h2.3.gz
/usr/share/man/man3/vmod_proxy.3.gz
/usr/share/man/man3/vmod_purge.3.gz
/usr/share/man/man3/vmod_std.3.gz
/usr/share/man/man3/vmod_unix.3.gz
/usr/share/man/man3/vmod_vtc.3.gz
/usr/share/man/man7/varnish-cli.7.gz
/usr/share/man/man7/varnish-counters.7.gz
/usr/share/man/man7/vcl.7.gz
/usr/share/man/man7/vcl-backend.7.gz
/usr/share/man/man7/vcl-probe.7.gz
/usr/share/man/man7/vcl-step.7.gz
/usr/share/man/man7/vcl-var.7.gz
/usr/share/man/man7/vsl.7.gz
/usr/share/man/man7/vsl-query.7.gz
/usr/share/man/man7/vtc.7.gz
/usr/share/varnish/varnishreload
/usr/share/varnish/vcc/vmod_blob.vcc
/usr/share/varnish/vcc/vmod_cookie.vcc
/usr/share/varnish/vcc/vmod_directors.vcc
/usr/share/varnish/vcc/vmod_h2.vcc
/usr/share/varnish/vcc/vmod_proxy.vcc
/usr/share/varnish/vcc/vmod_purge.vcc
/usr/share/varnish/vcc/vmod_std.vcc
/usr/share/varnish/vcc/vmod_unix.vcc
/usr/share/varnish/vcc/vmod_vtc.vcc
/usr/share/varnish/vcl/devicedetect.vcl

Field source: Debian Security

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Debian 13 (Trixie) in the browser Build an image that includes varnish

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
7.7.0-3+deb13u2	trixie-security / main	amd64	Debian 13 security · main · amd64	1.1 MiB	3.2 MiB	pool/updates/main/v/varnish/varnish_7.7.0-3+deb13u2_amd64.deb
7.7.0-3+deb13u1	trixie-security / main	arm64	Debian 13 security · main · arm64	1.1 MiB	3.8 MiB	pool/updates/main/v/varnish/varnish_7.7.0-3+deb13u1_arm64.deb
7.7.0-3+deb13u1 (withdrawn)	trixie-security / main	amd64	Debian 13 security · main · amd64	1.1 MiB	3.2 MiB	pool/updates/main/v/varnish/varnish_7.7.0-3+deb13u1_amd64.deb

Field source: Debian Security

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE	Severity	Version impact
[CVE-2026-93894] Published: Sep 16, 2026, 10:00:00 PM UTC In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type methods of VCL. This can be used as a remote denial of service (DoS) vector to m	Low(2.3)	Affected Details (3) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Affected · Fixed: `7.7.0-3+deb13u2` nvd · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Affected · Fixed: `7.7.0-3+deb13u2` nvd · varnish · debian · 13 `7.7.0-3+deb13u2` · amd64 · trixie-security Fixed · Fixed: `7.7.0-3+deb13u2` nvd · varnish · debian · 13
[CVE-2026-34475] Published: Mar 16, 2026, 11:00:00 PM UTC Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or auth	Medium(5.4)	Affected Details (3) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Affected · Fixed: `7.7.0-3+deb13u2` nvd · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Affected · Fixed: `7.7.0-3+deb13u2` nvd · varnish · debian · 13 `7.7.0-3+deb13u2` · amd64 · trixie-security Fixed · Fixed: `7.7.0-3+deb13u2` nvd · varnish · debian · 13
[CVE-2021-36740] Published: Jul 13, 2021, 12:00:00 AM UTC varnish: CVE-2021-36740	High(8.1)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:58:56 PM UTC Details (2) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Fixed · Fixed: `6.5.2-1` dsa · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Fixed · Fixed: `6.5.2-1` dsa · varnish · debian · 13
[CVE-2019-20637] Published: Apr 8, 2020, 11:15:00 PM UTC varnish: CVE-2019-20637	High(7.5)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:43:49 PM UTC Details (2) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Fixed · Fixed: `6.4.0-1` dsa · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Fixed · Fixed: `6.4.0-1` dsa · varnish · debian · 13
[CVE-2020-11653] Published: Apr 8, 2020, 11:15:00 PM UTC varnish: CVE-2020-11653	High(7.5)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:46:56 PM UTC Details (2) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Fixed · Fixed: `6.4.0-1` dsa · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Fixed · Fixed: `6.4.0-1` dsa · varnish · debian · 13
[CVE-2013-4090] Published: Feb 12, 2020, 4:15:10 PM UTC varnish: CVE-2013-4090	Medium	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:08:24 PM UTC Details (2) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Fixed · Fixed: `3.0.4-1` dsa · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Fixed · Fixed: `3.0.4-1` dsa · varnish · debian · 13
[CVE-2019-15892] Published: Sep 3, 2019, 12:00:00 AM UTC varnish: CVE-2019-15892	High(7.5)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:41:05 PM UTC Details (2) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Fixed · Fixed: `6.2.1-1` dsa · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Fixed · Fixed: `6.2.1-1` dsa · varnish · debian · 13
[CVE-2017-8807] Published: Nov 15, 2017, 12:00:00 AM UTC varnish: CVE-2017-8807	Medium(5.3)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:31:38 PM UTC Details (2) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Fixed · Fixed: `5.2.1-1` dsa · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Fixed · Fixed: `5.2.1-1` dsa · varnish · debian · 13
[CVE-2017-12425] Published: Aug 2, 2017, 12:00:00 AM UTC varnish: CVE-2017-12425	Medium(5.3)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:26:06 PM UTC Details (2) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Fixed · Fixed: `5.0.0-7.1` dsa · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Fixed · Fixed: `5.0.0-7.1` dsa · varnish · debian · 13
[CVE-2015-8852] Published: Apr 21, 2016, 12:00:00 AM UTC varnish: CVE-2015-8852	Medium	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:17:27 PM UTC Details (2) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Fixed · Fixed: `4.0.0-1` dsa · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Fixed · Fixed: `4.0.0-1` dsa · varnish · debian · 13
[CVE-2013-4484] Published: Nov 1, 2013, 2:55:00 AM UTC varnish: CVE-2013-4484	High	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:08:44 PM UTC Details (2) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Fixed · Fixed: `3.0.5-1` dsa · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Fixed · Fixed: `3.0.5-1` dsa · varnish · debian · 13
[CVE-2009-2936] Published: Apr 5, 2010, 4:30:00 PM UTC varnish: CVE-2009-2936	Low	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:04:38 PM UTC Details (2) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Fixed · Fixed: `2.1.0-2` dsa · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Fixed · Fixed: `2.1.0-2` dsa · varnish · debian · 13
[CVE-2009-4488] Published: Jan 13, 2010, 8:30:00 PM UTC varnish: CVE-2009-4488	Low	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:04:45 PM UTC Details (2) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Affected dsa · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Affected dsa · varnish · debian · 13

Fixed and unaffected versions (4)

CVE	Severity	Version impact
[CVE-2026-50052] Published: May 18, 2026, 10:00:00 PM UTC In Vinyl Cache before 9.0.1 and Varnish Cache before 9.0.3, a deficiency in HTTP/2 request parsing can be exploited to launch a backend request desync attack (request smuggling), which in turn can be	Low(2.3)	Fixed Details (3) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Fixed · Fixed: `7.7.0-3+deb13u1` nvd · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Fixed · Fixed: `7.7.0-3+deb13u1` nvd · varnish · debian · 13 `7.7.0-3+deb13u2` · amd64 · trixie-security Fixed · Fixed: `7.7.0-3+deb13u1` nvd · varnish · debian · 13
[CVE-2025-8671] Published: Aug 13, 2025, 12:03:37 PM UTC DNSdist vulnerabilities	High(7.5)	Fixed Details (3) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Fixed · Fixed: `7.7.0-3+deb13u1` usn · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Fixed · Fixed: `7.7.0-3+deb13u1` usn · varnish · debian · 13 `7.7.0-3+deb13u2` · amd64 · trixie-security Fixed · Fixed: `7.7.0-3+deb13u1` usn · varnish · debian · 13
[CVE-2025-47905] Published: May 12, 2025, 10:00:00 PM UTC varnish: CVE-2025-47905	High(8.1)	Fixed Details (3) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Fixed · Fixed: `7.7.0-2` dsa · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Fixed · Fixed: `7.7.0-2` dsa · varnish · debian · 13 `7.7.0-3+deb13u2` · amd64 · trixie-security Fixed · Fixed: `7.7.0-2` dsa · varnish · debian · 13
[CVE-2025-30346] Published: Mar 18, 2025, 11:00:00 PM UTC varnish: CVE-2025-30346	Medium(5.4)	Fixed Details (3) `7.7.0-3+deb13u1` · amd64 · trixie-security · Historical version Fixed · Fixed: `7.7.0-1` dsa · varnish · debian · 13 `7.7.0-3+deb13u1` · arm64 · trixie-security Fixed · Fixed: `7.7.0-1` dsa · varnish · debian · 13 `7.7.0-3+deb13u2` · amd64 · trixie-security Fixed · Fixed: `7.7.0-1` dsa · varnish · debian · 13

Last synced: Oct 28, 2026, 3:13:50 AM UTC

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

7.7.0-3+deb13u2 / amd64Observed Oct 25, 2026 – Oct 27, 2026sha256 ed5a1277a5b0…26a9598bSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): ed5a1277a5b097186f94c13120a70697395625fe7ce45cb96c07540d26a9598b

Verify download

printf '%s  %s\n' 'ed5a1277a5b097186f94c13120a70697395625fe7ce45cb96c07540d26a9598b' 'varnish_7.7.0-3+deb13u2_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

7.7.0-3+deb13u1 / arm64Observed Sep 1, 2026sha256 3cbb17a905e1…b81599f8Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 3cbb17a905e11fa99d6aecc61f79da2355ba787bba54356a7f24c62eb81599f8

Verify download

printf '%s  %s\n' '3cbb17a905e11fa99d6aecc61f79da2355ba787bba54356a7f24c62eb81599f8' 'varnish_7.7.0-3+deb13u1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) security main arm64

7.7.0-3+deb13u1 / amd64Observed Aug 10, 2026 – Oct 24, 2026sha256 6679fb4b4635…e60ee511Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 6679fb4b46350b87670402ab1223900e5d86314c5c976d8970b1d7a1e60ee511

Verify download

printf '%s  %s\n' '6679fb4b46350b87670402ab1223900e5d86314c5c976d8970b1d7a1e60ee511' 'varnish_7.7.0-3+deb13u1_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

Sources

Debian 13 (Trixie) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Observed SHA-256
3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Result
match verified
Debian 13 (Trixie) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/trixie/InRelease
Signed-object SHA-256
98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Observed SHA-256
753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Result
match verified
Debian 13 (Trixie) security main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/trixie-security/InRelease
Signed-object SHA-256
fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
Signer fingerprint
B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
Observed SHA-256
a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
Result
match verified
Debian SecurityOct 24, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-security-main-amd64:c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/trixie-security/InRelease
Signed-object SHA-256
57ffec84de1b8660b9a20cad0f1de223d55489d0df4b6318eb6c68a5585f2f92
Signer fingerprint
B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Oct 25, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb
Observed SHA-256
c7fc2c6a79fa6288ed4389753dddee83cab791b3b9535ef21d9cfebde1aba2fb
Result
match verified
Debian SecurityOct 27, 2026
Authoritative source; repository metadata signature verified
Signature evidence
trixie-security-main-amd64:cbc4bef76e3c37ead4980674b88d8b1cd971e3ef018f45488da6b988f55946f3
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/trixie-security/InRelease
Signed-object SHA-256
e7fa27c6347540f93dc90c68b4361e02148fc15bdd516a816d6f56449c3c3baf
Signer fingerprint
B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Oct 28, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
cbc4bef76e3c37ead4980674b88d8b1cd971e3ef018f45488da6b988f55946f3
Observed SHA-256
cbc4bef76e3c37ead4980674b88d8b1cd971e3ef018f45488da6b988f55946f3
Result
match verified