[ol8_appstream] varnish-devel-6.0.13-1.module+el8.10.0+90594+95ad0b53.1.aarch64

Development files for varnish
Varnish Cache is a high-performance HTTP accelerator

Changelog (Show File list) (Show related packages)

• Wed May 21 2025 Luboš Uhliarik <luhliari@redhat.com> - 6.0.13-1.1

  - Resolves: RHEL-89695 - varnish: request smuggling attacks (CVE-2025-47905)

• Thu Mar 28 2024 Luboš Uhliarik <luhliari@redhat.com> - 6.0.13-1

  - new version 6.0.13
  - Resolves: RHEL-30379 - varnish:6/varnish: HTTP/2 Broken Window Attack may
    result in denial of service (CVE-2024-30156)

• Mon Oct 23 2023 Tomas Korbar <tkorbar@redhat.com> - 6.0.8-4

  - Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487
  - CVE-2022-45060 varnish:6/varnish: Request Forgery
  - Resolves: RHEL-12814

• Tue Feb 01 2022 Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-1.1

  - Resolves: #2047648 - CVE-2022-23959 varnish:6/varnish: Varnish HTTP/1 Request
    Smuggling Vulnerability

• Thu Jul 22 2021 Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-1

  - new version 6.0.8
  - Resolves: #1982862 - CVE-2021-36740 varnish:6/varnish: HTTP/2 request
    smuggling attack via a large Content-Length header for a POST request

• Tue Apr 14 2020 Lubos Uhliarik <luhliari@redhat.com> - 6.0.6-2

  - new version 6.0.6
  - Resolves: #1795673 - RFE: rebase varnish:6 to latest 6.0.x LTS
  - Resolves: #1790907 - CVE-2019-20637 varnish: not clearing pointer between two
    client requests leads to information disclosure
  - Resolves: #1763958 - CVE-2019-15892 varnish:6/varnish: denial of service 
    handling certain crafted HTTP/1 requests

• Mon Oct 08 2018 Lubos Uhliarik <luhliari@redhat.com> - 6.0.2-1

  - new version 6.0.2 (#1633338)

• Wed Aug 01 2018 Luboš Uhliarik <luhliari@redhat.com> - 6.0.0-3

  - Resolves: #1591765 - varnish: Remove dependency on jemalloc

• Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 6.0.0-2

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

• Wed Apr 25 2018 Ingvar Hagelund <ingvar@redpill-linpro.com> - 6.0.0-1

  - New upstream release
  - Added a patch that fixes _FORTIFY_SOURCE=2 on copr/el6
  - Added a patch fixing compilation on epel6
  - Fresh checkout of pkg-varnish-cache
  - Updated find-requires sed fix to update variant and moved it to prep
  - Removed -libs subpackage
  - varnish_reload_vcl changed name to varnishreload, as in upstream
  - varnish.params is gone. To override startup configuration,
    use /etc/systemd/system/varnish.service
  - Dropped patch and sed fixes for find-provides, as it is fixed upstream
  - Dropped patch for test vsv00002, as it is fixed upstream
  - Droppet patch for python3, as it is included upstream
  - Dropped buildreq on groff, as tarball includes prebuilt manpages
  - Dropped systemv to systemd helpers
  - Updated project url
  - Use prebuilt html files for docs subpackage
  - Dropped unnecessary explicit require of initscripts, closes #1592398