-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 02 Jul 2024 13:59:11 +0200 Source: varnish Architecture: source Version: 7.5.0-1 Distribution: unstable Urgency: medium Maintainer: Varnish Package Maintainers <team+varnish-team@tracker.debian.org> Changed-By: Marco d'Itri <md@linux.it> Closes: 657449 659005 737528 881056 934278 961750 1056156 1068455 Changes: varnish (7.5.0-1) unstable; urgency=medium . * New upstream release. Fixes: + HTTP/2 Rapid Reset Attack (CVE-2023-44487, VSV00013). (Closes: #1056156) + HTTP/2 Broke Window Attack (CVE-2024-30156, VSV00014). (Closes: #1068455) * Remove the unmaintained init scripts. (Closes: #657449, #659005, #737528, #881056, #934278, #961750) * Make all daemons Restart=on-failure. * Switch to systemd-tmpfiles and systemd-sysusers. * Stop creating /var/lib/varnish/$HOSTNAME/, which is not used anymore by modern Varnish. * Create /var/lib/varnish/CACHEDIR.TAG to signal that the directory content should not be backed up. * Replace more embedded Javascript with libjs-sphinxdoc. Checksums-Sha1: 68e409050b6ccbb34e18fb2f134694870d21ea2e 1858 varnish_7.5.0-1.dsc 3bdf4388ec9bfeb7558fe1ae9289dbd7e03b49fc 2068104 varnish_7.5.0.orig.tar.gz 3940763eeda1cee79a67cc3f6fcd6d952deb1d85 20768 varnish_7.5.0-1.debian.tar.xz ba562e5d908fd7d31134612e223e7237a37d255a 10385 varnish_7.5.0-1_amd64.buildinfo Checksums-Sha256: 9a0e301fd70fe47e5dff1a52789fbe17b19eba0275ad24edceda6a9c65dce813 1858 varnish_7.5.0-1.dsc b1771abe56662fb1664e46166c572477660541c6fd142d8585fe013dec5c1a31 2068104 varnish_7.5.0.orig.tar.gz d9e2acd9b36c04ac26fd3cf0ddfd3287d5b59e2dc0aa757829750d6b728814c4 20768 varnish_7.5.0-1.debian.tar.xz dad783eaa5d1730688688db9b7615415a4f396f5126bd88a2b9c9aa8d6406893 10385 varnish_7.5.0-1_amd64.buildinfo Files: 25f868f8b2c757d5e21af912cf340bbc 1858 web optional varnish_7.5.0-1.dsc da5f7f0703faf76dfbe181dbcf010773 2068104 web optional varnish_7.5.0.orig.tar.gz 87f5ce5237f1b771c0fc8e8366dc60e2 20768 web optional varnish_7.5.0-1.debian.tar.xz 69cf7c49d1b8cc91889b8d5fc1789e3f 10385 web optional varnish_7.5.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iHUEARYIAB0WIQQnKUXNg20437dCfobLPsM64d7XgQUCZoPw4gAKCRDLPsM64d7X geClAQC8t8FAYY/RUIwixx4HQ9p2xH6JepJL1sJI5faeqZjQVwD/aPa/uxJuOpek wxuahjBJr8DEJgOTjKYkfrrL2VcK6w8= =YXca -----END PGP SIGNATURE-----
