-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 19 Apr 2026 19:11:10 -0700
Source: ngtcp2
Architecture: source
Version: 1.11.0-1+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Debian Curl Maintainers <team+curl@tracker.debian.org>
Changed-By: Samuel Henrique <samueloph@debian.org>
Closes: 1134197
Changes:
 ngtcp2 (1.11.0-1+deb13u1) trixie-security; urgency=medium
 .
   * Team upload
   * Backport patch for CVE-2026-40170 (closes: #1134197)
Checksums-Sha1:
 639fe60a33efbc8b2f927dabc837436484cc954b 2609 ngtcp2_1.11.0-1+deb13u1.dsc
 adcdbb69d93488640aadf30fb977c58123c80238 652904 ngtcp2_1.11.0.orig.tar.xz
 dfab8f6aab7a6a34a3ea5b1ae48bf76f4e4a011d 833 ngtcp2_1.11.0.orig.tar.xz.asc
 e053e30efb46e5b65aac402dab3b7c751c9ae21f 10324 ngtcp2_1.11.0-1+deb13u1.debian.tar.xz
 cc35fc5ea4dfc9846202ed753ee9558636d801b7 9591 ngtcp2_1.11.0-1+deb13u1_amd64.buildinfo
Checksums-Sha256:
 f14f724e9031e0565be0d75b8bb3b693887f5111e1901ed32401eb860e3ac004 2609 ngtcp2_1.11.0-1+deb13u1.dsc
 382c15bf66b630f26021631b25b7eb1feac42c67c1d6826189d61091dfaa4d09 652904 ngtcp2_1.11.0.orig.tar.xz
 56193493ac1e2a05dbf48d7b4480a2590d7fbdb2439475fd7c5087bc31cb988d 833 ngtcp2_1.11.0.orig.tar.xz.asc
 5d45f3e07ebaf4fff773d6ec32eee78c8514e17bac67dee8e268fa97af440854 10324 ngtcp2_1.11.0-1+deb13u1.debian.tar.xz
 6e5a38c8ea3a59354fcccc4094ef43bb24951932ae562ffe362cc3c25cba9c68 9591 ngtcp2_1.11.0-1+deb13u1_amd64.buildinfo
Files:
 74ef4632a01e6b8890478de500774762 2609 libs optional ngtcp2_1.11.0-1+deb13u1.dsc
 9719a1a56a41d387e14275ba55bb3ec7 652904 libs optional ngtcp2_1.11.0.orig.tar.xz
 4b069e3a7683010749e0dbdac953781f 833 libs optional ngtcp2_1.11.0.orig.tar.xz.asc
 143a17a1f32aa7560e181e5ecc32bc7f 10324 libs optional ngtcp2_1.11.0-1+deb13u1.debian.tar.xz
 4d6050c45bc3d08604eafe6b16df3af0 9591 libs optional ngtcp2_1.11.0-1+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=/Zqd
-----END PGP SIGNATURE-----