-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 03 Jun 2026 18:31:54 +0200 Source: varnish Architecture: source Version: 7.7.3-3 Distribution: unstable Urgency: medium Maintainer: Varnish Package Maintainers <team+varnish-team@tracker.debian.org> Changed-By: Marco d'Itri <md@linux.it> Closes: 1138778 Changes: varnish (7.7.3-3) unstable; urgency=medium . * Fix the VSV00019 (CVE-2025-8671) request smuggling vulnerability. (Closes: #1138778) Checksums-Sha1: 6161cb4536882cf27472e1a39666f3516c27ae4b 2705 varnish_7.7.3-3.dsc e20e1a618f7fa3a4f1b00fb9ab0d44d737202061 28360 varnish_7.7.3-3.debian.tar.xz bca55787f683bdb85b7945d13fec1439a0c8af68 3435484 varnish_7.7.3-3.git.tar.xz 9512597897158f4da66a3feebbd454374dff0234 17485 varnish_7.7.3-3_source.buildinfo Checksums-Sha256: 0cb4235d7b96dfaf74c6cc1600f94fbe87a1444d39ca19431a6c35214d48d013 2705 varnish_7.7.3-3.dsc d605ddd61f3c4d4f0268eacf8519b4996289fe8359bbf2992d63d438627be089 28360 varnish_7.7.3-3.debian.tar.xz b61d0044ab44fafb7de86dc12a3daff98f79f6bff4daec19653070cc17e5f90e 3435484 varnish_7.7.3-3.git.tar.xz 8824893343759e950e4cfa0a434c93c4a3ce7d0dd096e1e89e71bae2b25ef79e 17485 varnish_7.7.3-3_source.buildinfo Files: 11999dc17cde09731a45510b620c4dcb 2705 web optional varnish_7.7.3-3.dsc b61500f6e08ba7ea7a6b8142ba033f71 28360 web optional varnish_7.7.3-3.debian.tar.xz 52471773f3b54c16bb7f6b5c78f5325a 3435484 web optional varnish_7.7.3-3.git.tar.xz 2d4ab8d9c890d7dd9a67baa59a3b90eb 17485 web optional varnish_7.7.3-3_source.buildinfo Git-Tag-Info: tag=ba2d53077df0b20b7c66827e970be919a5277612 fp=272945cd836d38dfb7427e86cb3ec33ae1ded781 Git-Tag-Tagger: Marco d'Itri <md@linux.it> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmogdxEACgkQYG0ITkaD wHlefA//eJNI2VnMQEUtnq0M+RbvLoqIag30kYuPhI4Pz3gJIEXEm5/IijZyIL/m ZXKmwlUnbGkr4i180X+cqXn2uHG4YvgZsC8pwwMzW5gJaW1ZxSllqquTxsPjFSfz 0OPayhfXxro0HGPKeDeWTgxkzlpgJtVAv2H6ixBw9osbq60RL5rzz/R1jz8Le4Zp NWQv1IcOhpqvcXvS199IYxtZdcRG4nBu6ylnlzQAxxv8R8xBQ8noAhsrNOiMUHXu 6UWRdoPPV89OOBJYewErm4y8lDB+/RNF193K9+8sbVpq+iOFkdpg0zylREmP5Z0w WiVjAA7+ZR2xVvtyUbozxZJ7fIrvAxG9kPR3eRq99xCPsCVMlMbeckpQRXpJ8xC1 t4XQ6/2hbdWJDsu5ZlprmfXYq5pUOYY7Iu64JL//E66zYkECHHUp09Ak1A5jMAON MNn6adXKCpE6JKoriSfLKy+AwTm73W7cUDS+kUZc1/4/XgIcPsWDMTMNqHk1BhJP Sn8QMmZo2gxMGD6hpOF4z0Xgse2MZRfbyhZke9DIJNMXiURc/KATpWeQDeJ9l+E5 M7m2oZy0bh3Vxr38i+sZjgLyREd5ZYpnJi8/zfW5RrdZcfQaNoZHylFEqYaHe8Ql MGXUeNtVHEifpVptiN2TzcUqvKqobgcR6scUUH8ZlwyPFq7axQk= =wWDA -----END PGP SIGNATURE-----