varnish (7.7.3-1) unstable; urgency=medium

  * New upstream release. Fixes the fix introduced in 7.7.2.

 -- Marco d'Itri <md@linux.it>  Sun, 24 Aug 2025 23:22:30 +0200

varnish (7.7.2-2) unstable; urgency=medium

  * Fix the r04036 test on ppc64el.

 -- Marco d'Itri <md@linux.it>  Sun, 17 Aug 2025 09:05:55 +0200

varnish (7.7.2-1) unstable; urgency=medium

  * New upstream release. Fixes:
    - the VSV00017 denial of service vulnerability.
  * Skip most autopkgtests on riscv64 because they are unreliable.
    (Closes: #1108389)

 -- Marco d'Itri <md@linux.it>  Wed, 13 Aug 2025 22:49:24 +0200

varnish (7.7.1-1) experimental; urgency=medium

  * New upstream release. Fixes:
    - FTBFS with GCC-15. (Closes: #1098056)

 -- Marco d'Itri <md@linux.it>  Fri, 20 Jun 2025 05:16:33 +0200

varnish (7.7.0-3) unstable; urgency=medium

  * Depend on binutils because triplet-gcc calls the plain as(1) due to
    #1083135. (Closes: #1107510)

 -- Marco d'Itri <md@linux.it>  Sun, 08 Jun 2025 13:43:35 +0200

varnish (7.7.0-2) unstable; urgency=medium

  * Fix the VSV00016 request smuggling vulnerability.

 -- Marco d'Itri <md@linux.it>  Tue, 13 May 2025 01:15:16 +0200

varnish (7.7.0-1) unstable; urgency=medium

  * New upstream release.

 -- Marco d'Itri <md@linux.it>  Tue, 18 Mar 2025 18:16:09 +0100

varnish (7.6.1-3) unstable; urgency=medium

  * Require the tests to succeed on amd64.
  * dh_varnishabi: implement --strict.

 -- Marco d'Itri <md@linux.it>  Fri, 14 Mar 2025 00:48:07 +0100

varnish (7.6.1-2) unstable; urgency=medium

  * Fix dh_varnishabi to actually recognize all Varnish modules.

 -- Marco d'Itri <md@linux.it>  Fri, 29 Nov 2024 12:43:56 +0100

varnish (7.6.1-1) experimental; urgency=medium

  * New upstream release.
  * Disable LTO, because enabling it disables jemalloc.
  * Set TasksMax and LimitCORE to infinity.
  * Enable HTTP/2 by default.

 -- Marco d'Itri <md@linux.it>  Mon, 18 Nov 2024 23:47:16 +0100

varnish (7.6.0-2) unstable; urgency=medium

  * Introduce the dh_varnishabi debhelper helper, to be used by varnish
    modules packages to automatically add the dependency on varnishabi-*.
  * Stop depending on adduser, which is not used anymore since 7.5.0-1.

 -- Marco d'Itri <md@linux.it>  Thu, 24 Oct 2024 22:17:43 +0200

varnish (7.6.0-1) unstable; urgency=medium

  * New upstream release.

 -- Marco d'Itri <md@linux.it>  Fri, 20 Sep 2024 11:34:45 +0200

varnish (7.5.0-3) unstable; urgency=medium

  * Remove the -j option from the varnishd command line.
    It is not clear why it was added to varnish.service in commit
    1c9881bb6f436f9c4e4ed4e96893b6de2f3cb805 from 2015, but it caused to
    have both the management and the worker processes to run as user vcache.
    The default is to have the management process use user varnish, for
    better separation of privileges.
    This should not require any changes on upgrades.
  * Install builtin.vcl as documentation.
  * Do not install the varnishstat_help_gen program, which is only useful
    at boot time.
  * Enable again the test suite, but allow the tests to fail.
    In the future they will be enforced for supported architectures.
  * debian/control: remove Emanuele Rocca from the Uploaders, as agreed
    with him.

 -- Marco d'Itri <md@linux.it>  Sat, 20 Jul 2024 00:15:47 +0200

varnish (7.5.0-2) unstable; urgency=medium

  * debian/rules: act on varnish-doc only if it has been built.

 -- Marco d'Itri <md@linux.it>  Tue, 02 Jul 2024 15:20:32 +0200

varnish (7.5.0-1) unstable; urgency=medium

  * New upstream release. Fixes:
    + HTTP/2 Rapid Reset Attack (CVE-2023-44487, VSV00013).
      (Closes: #1056156)
    + HTTP/2 Broke Window Attack (CVE-2024-30156, VSV00014).
      (Closes: #1068455)
  * Remove the unmaintained init scripts.
    (Closes: #657449, #659005, #737528, #881056, #934278, #961750)
  * Make all daemons Restart=on-failure.
  * Switch to systemd-tmpfiles and systemd-sysusers.
  * Stop creating /var/lib/varnish/$HOSTNAME/, which is not used anymore
    by modern Varnish.
  * Create /var/lib/varnish/CACHEDIR.TAG to signal that the directory
    content should not be backed up.
  * Replace more embedded Javascript with libjs-sphinxdoc.

 -- Marco d'Itri <md@linux.it>  Tue, 02 Jul 2024 13:59:11 +0200

varnish (7.1.1-1.2) unstable; urgency=medium

  [ Marco d'Itri ]
  * Non-maintainer upload.
  * Import the precedent non-maintainer upload.

  [ Helmut Grohne ]
  * Install the systemd units using dh_installsystemd only.
    (Closes: #1054484)

 -- Marco d'Itri <md@linux.it>  Mon, 01 Apr 2024 18:06:43 +0200

varnish (7.1.1-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Add all well-known headers to the perfect hash lookup table
    (CVE-2022-45059) (Closes: #1023750)
  * hpack: fix pseudo-headers handling (CVE-2022-45060) (Closes: #1023751)

 -- Salvatore Bonaccorso <carnil@debian.org>  Mon, 09 Jan 2023 22:09:31 +0100

varnish (7.1.1-1) unstable; urgency=medium

  * New upstream release (CVE-2022-38150, VSV00009)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 12 Aug 2022 11:23:00 +0200

varnish (7.1.0-6) unstable; urgency=medium

  * Declare compliance with Debian Policy Manual 4.6.1

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 16 Jun 2022 21:53:14 +0200

varnish (7.1.0-5) unstable; urgency=medium

  * New upstream release (Closes: #1010582)
  * Bump soname for libvarnishapi
  * Depend on libpcre2-dev instead of libpcre3-dev
  * Drop superfluous file patterns from debian/copyright
  * Update lintian overrides for embedded, modified zlib
  * Update lintian overrides for compiled javascript included in the
    documentation source tarball

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 15 Jun 2022 21:16:48 +0200

varnish (6.6.1-1) unstable; urgency=medium

  * New upstream release
    (Closes: #978916)
    Update symbols
    Update debian/copyright
  * Add salsa CI pipeline
    Remove old debian/.gitlab-ci.yml
  * Bump debhelper from old 12 to 13.
  * Update standards version to 4.5.1, no changes needed.
  * Autopkgtest: Depend on net-tools for netstat command
  * Reproducible builds: Ensure documentation builds do not vary based on
    locale

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sat, 18 Sep 2021 20:30:25 +0200

varnish (6.5.2-1) unstable; urgency=medium

  * New upstream release.
    (Closes: #991040, VSV00007, CVE-2021-36740)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 14 Jul 2021 21:46:38 +0200

varnish (6.5.1-1) unstable; urgency=medium

  * New upstream release.
  * systemd service: Fix LimitMEMLOCK value, unit is bytes, not kilobytes

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 29 Sep 2020 23:21:31 +0200

varnish (6.5.0-1) unstable; urgency=medium

  * New upstream release.
  * Use upstream's method for extracting the varnish ABI version for
    vmod dependencies

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 17 Sep 2020 19:47:57 +0200

varnish (6.4.0-3) unstable; urgency=medium

  [ Stig Sandbeck Mathisen ]
  * Work around a breaking change in GNU make 4.3

  [ Clint Adams ]
  * Use mktemp instead of tempfile (Closes: #961392)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sun, 24 May 2020 19:11:49 +0200

varnish (6.4.0-2) unstable; urgency=medium

  * Bump packaging version for source only upload. No other changes.

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 23 Apr 2020 12:06:04 +0200

varnish (6.4.0-1) unstable; urgency=medium

  * New upstream version
    (Closes: #956305, VSV00004, CVE-2019-20637)
    (Closes: #956307, VSV00005, CVE-2020-11653)
  * /etc/init.d/varnish: Ignore the START variable in /etc/default/varnish
    (Lintian: init.d-script-should-always-start-service)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sat, 18 Apr 2020 13:08:39 +0200

varnish (6.2.1-3) unstable; urgency=medium

  [ Helmut Grohne ]
  * Make cc_command reproducible. (Closes: #916078)

  [ Stig Sandbeck Mathisen ]
  * Update standards version to 4.4.1, no changes needed.
  * Set debhelper-compat version in Build-Depends.
  * Set fields Upstream-Name, Upstream-Contact in debian/copyright.
  * Remove obsolete field Contact from debian/upstream/metadata (already
    present in machine-readable debian/copyright).

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sun, 15 Mar 2020 12:51:54 +0100

varnish (6.2.1-2) unstable; urgency=medium

  * Update varnishreload script from upstream packaging repo, making
    "reload" work again.  (Thanks, autopkgtest)
  * Add debian/source options from man:dgit-maint-merge(7)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sun, 08 Sep 2019 08:59:25 +0200

varnish (6.2.1-1) unstable; urgency=medium

  * Imported upstream release 6.2.1 (Closes: #939333, VSV00003, CVE-2019-15892)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 03 Sep 2019 21:55:11 +0200

varnish (6.2.0-1) unstable; urgency=medium

  * Imported upstream release 6.2.0
  * Drop upstream patch for GCC-9
  * Declare compliance with Debian Policy 4.3.0
  * Use debhelper 12
  * Varnish now uses python3 (Closes: #938768)
  * Remove old Replaces: references to libvarnishapi1
  * Documentation has moved to /usr/share/doc/varnish
  * Update symbols file for 6.2.0
  * Package vcstool.py

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 30 Aug 2019 23:43:47 +0200

varnish (6.1.1-2) unstable; urgency=medium

  * Add patch from upstream for GCC-9 support (Closes: #925849)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 28 Aug 2019 07:01:01 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libvarnishapi3`.
