-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 25 May 2026 00:57:57 +0200
Source: varnish
Binary: libvarnishapi-dev libvarnishapi3 libvarnishapi3-dbgsym varnish varnish-dbgsym varnish-doc
Built-For-Profiles: nocheck
Architecture: source amd64 all
Version: 7.7.0-3+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Varnish Package Maintainers <team+varnish-team@tracker.debian.org>
Changed-By: Marco d'Itri <md@linux.it>
Description:
libvarnishapi-dev - development files for Varnish
libvarnishapi3 - shared libraries for Varnish
varnish - state of the art, high-performance web accelerator
varnish-doc - documentation for Varnish Cache
Changes:
varnish (7.7.0-3+deb13u1) trixie-security; urgency=medium
.
* Backport the fix for the VSV00019 request smuggling vulnerability.
* Backport the fix for the VSV00017 denial of service vulnerability
(CVE-2025-8671).
* Use Type=forking again for varnishncsa.service, or else a reload
would kill the program. (See: #1118046)
* Update debian/watch and debian/control for Vinyl Cache.
Checksums-Sha1:
fba42100aa9b52b31392ab457c54e0790abe1edc 1820 varnish_7.7.0-3+deb13u1.dsc
7774ab74cfb04fef5dc1b99f9f81bc65cf599faf 1546528 varnish_7.7.0.orig.tar.xz
70ff7a286e84958c392011154e8a1c2d6d33e2c6 30824 varnish_7.7.0-3+deb13u1.debian.tar.xz
4f9e8dd95f181971a2ad7ac0314d36e64d4fa9d0 206260 libvarnishapi-dev_7.7.0-3+deb13u1_amd64.deb
3dddf995cfd501fac8ef986b9525e027d02f64a1 240256 libvarnishapi3-dbgsym_7.7.0-3+deb13u1_amd64.deb
2f7c59b7ee167b5b046a7f683cc45f9c88c01b03 191272 libvarnishapi3_7.7.0-3+deb13u1_amd64.deb
7d342116851b409c8fc92eecfd976cc531766135 2256344 varnish-dbgsym_7.7.0-3+deb13u1_amd64.deb
28b3d4c2293b544fcce26f272eab3003b19c8fef 836548 varnish-doc_7.7.0-3+deb13u1_all.deb
3f6b9fd4ef8feaea8836dfd13057f6e44466d14d 10692 varnish_7.7.0-3+deb13u1_amd64.buildinfo
71fbb5aee1f3575d9594f4cc304faca2f9c6ee0f 1169844 varnish_7.7.0-3+deb13u1_amd64.deb
Checksums-Sha256:
44ddeabd9c18bf8f8e4e9918f9b0a909ceadfb7d7098547e2d8c6915cd03eaf5 1820 varnish_7.7.0-3+deb13u1.dsc
4014bce1853dedaf0a492286e34450089512eed0695d0218f68d6e7eb219951a 1546528 varnish_7.7.0.orig.tar.xz
78c6769ab290f3e99072e1a943b1f3651dec0cad38a5132c1e96ee2d8157b3b3 30824 varnish_7.7.0-3+deb13u1.debian.tar.xz
61f4369598d0acc65fe26aa14949265233dd8236fe56cd61e23d76b5dfa27cf8 206260 libvarnishapi-dev_7.7.0-3+deb13u1_amd64.deb
0a186bd95a959da9f9574ad43cb556e9b3942c71384173d49854a0c1f00add9f 240256 libvarnishapi3-dbgsym_7.7.0-3+deb13u1_amd64.deb
3422980255f71ebdc938045717babd5439070e716e814e7442a94155fe9faeb7 191272 libvarnishapi3_7.7.0-3+deb13u1_amd64.deb
357f06860d65b2722f44437b68ce9d0471c6ff1626a389f93634973ebe61c55a 2256344 varnish-dbgsym_7.7.0-3+deb13u1_amd64.deb
ec2f9f3e78c7e78ab40c48e6b38d7011050519084b7a51e365ee4453c61640e4 836548 varnish-doc_7.7.0-3+deb13u1_all.deb
b7956d71b78a12935535e99ddeee1279d1ae78e3373342fbc9f99aa00bf64dc6 10692 varnish_7.7.0-3+deb13u1_amd64.buildinfo
6679fb4b46350b87670402ab1223900e5d86314c5c976d8970b1d7a1e60ee511 1169844 varnish_7.7.0-3+deb13u1_amd64.deb
Files:
9b80ea0ce6b6e5d480e38ae84283a4a4 1820 web optional varnish_7.7.0-3+deb13u1.dsc
6813646370126b81d3aa30c234fbf97e 1546528 web optional varnish_7.7.0.orig.tar.xz
929527ed96880277952abf5dcf01e9f5 30824 web optional varnish_7.7.0-3+deb13u1.debian.tar.xz
8e2f6847a1dc6a6fe503409a992da823 206260 libdevel optional libvarnishapi-dev_7.7.0-3+deb13u1_amd64.deb
ac40288fcb36e7062ca81a70e9031aa8 240256 debug optional libvarnishapi3-dbgsym_7.7.0-3+deb13u1_amd64.deb
1a6236a69ca7240b37bb7f163169c7bc 191272 libs optional libvarnishapi3_7.7.0-3+deb13u1_amd64.deb
b390f869434b88fc646759a49323a0ec 2256344 debug optional varnish-dbgsym_7.7.0-3+deb13u1_amd64.deb
d4f97a8d5739fa5e63e3f82c590b450e 836548 doc optional varnish-doc_7.7.0-3+deb13u1_all.deb
af6dbafe4540336731e60963713c14fa 10692 web optional varnish_7.7.0-3+deb13u1_amd64.buildinfo
e9baabf4ce4af89b463600714d360622 1169844 web optional varnish_7.7.0-3+deb13u1_amd64.deb
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQQnKUXNg20437dCfobLPsM64d7XgQUCahWZSQAKCRDLPsM64d7X
gZjmAQCQtfIEe5J8uaZk0BVq5W4aG4kncmUmCnxMwBN2U6K0pgEAlzWrhcmxEW3L
sRlx4paJ7wgnGnxdG5lDnjVv3gVgVQU=
=wuRj
-----END PGP SIGNATURE-----
