-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 02 Jul 2024 13:59:11 +0200
Source: varnish
Architecture: source
Version: 7.5.0-1
Distribution: unstable
Urgency: medium
Maintainer: Varnish Package Maintainers <team+varnish-t...@tracker.debian.org>
Changed-By: Marco d'Itri <m...@linux.it>
Closes: 657449 659005 737528 881056 934278 961750 1056156 1068455
Changes:
varnish (7.5.0-1) unstable; urgency=medium
.
* New upstream release. Fixes:
+ HTTP/2 Rapid Reset Attack (CVE-2023-44487, VSV00013).
(Closes: #1056156)
+ HTTP/2 Broke Window Attack (CVE-2024-30156, VSV00014).
(Closes: #1068455)
* Remove the unmaintained init scripts.
(Closes: #657449, #659005, #737528, #881056, #934278, #961750)
* Make all daemons Restart=on-failure.
* Switch to systemd-tmpfiles and systemd-sysusers.
* Stop creating /var/lib/varnish/$HOSTNAME/, which is not used anymore
by modern Varnish.
* Create /var/lib/varnish/CACHEDIR.TAG to signal that the directory
content should not be backed up.
* Replace more embedded Javascript with libjs-sphinxdoc.
Checksums-Sha1:
68e409050b6ccbb34e18fb2f134694870d21ea2e 1858 varnish_7.5.0-1.dsc
3bdf4388ec9bfeb7558fe1ae9289dbd7e03b49fc 2068104 varnish_7.5.0.orig.tar.gz
3940763eeda1cee79a67cc3f6fcd6d952deb1d85 20768 varnish_7.5.0-1.debian.tar.xz
ba562e5d908fd7d31134612e223e7237a37d255a 10385 varnish_7.5.0-1_amd64.buildinfo
Checksums-Sha256:
9a0e301fd70fe47e5dff1a52789fbe17b19eba0275ad24edceda6a9c65dce813 1858
varnish_7.5.0-1.dsc
b1771abe56662fb1664e46166c572477660541c6fd142d8585fe013dec5c1a31 2068104
varnish_7.5.0.orig.tar.gz
d9e2acd9b36c04ac26fd3cf0ddfd3287d5b59e2dc0aa757829750d6b728814c4 20768
varnish_7.5.0-1.debian.tar.xz
dad783eaa5d1730688688db9b7615415a4f396f5126bd88a2b9c9aa8d6406893 10385
varnish_7.5.0-1_amd64.buildinfo
Files:
25f868f8b2c757d5e21af912cf340bbc 1858 web optional varnish_7.5.0-1.dsc
da5f7f0703faf76dfbe181dbcf010773 2068104 web optional varnish_7.5.0.orig.tar.gz
87f5ce5237f1b771c0fc8e8366dc60e2 20768 web optional
varnish_7.5.0-1.debian.tar.xz
69cf7c49d1b8cc91889b8d5fc1789e3f 10385 web optional
varnish_7.5.0-1_amd64.buildinfo-----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQQnKUXNg20437dCfobLPsM64d7XgQUCZoPw4gAKCRDLPsM64d7X geClAQC8t8FAYY/RUIwixx4HQ9p2xH6JepJL1sJI5faeqZjQVwD/aPa/uxJuOpek wxuahjBJr8DEJgOTjKYkfrrL2VcK6w8= =YXca -----END PGP SIGNATURE-----
pgpRXAbwBJiJ1.pgp
Description: PGP signature
