Received: by mail.netbsd.org (Postfix, from userid 605) id C9C3E84EEA; Mon, 19 Jul 2021 12:47:32 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 1041884E53 for ; Mon, 19 Jul 2021 12:47:32 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id GK7ciSuvtill for ; Mon, 19 Jul 2021 12:47:31 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id 82CDC84DBD for ; Mon, 19 Jul 2021 12:47:31 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 7C88DFA95; Mon, 19 Jul 2021 12:47:31 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1626698851169160" MIME-Version: 1.0 Date: Mon, 19 Jul 2021 12:47:31 +0000 From: "Tobias Nygren" Subject: CVS commit: pkgsrc/www/varnish To: pkgsrc-changes@NetBSD.org Reply-To: tnn@netbsd.org X-Mailer: log_accum Message-Id: <20210719124731.7C88DFA95@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1626698851169160 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: tnn Date: Mon Jul 19 12:47:31 UTC 2021 Modified Files: pkgsrc/www/varnish: Makefile distinfo Log Message: varnish: update to 6.6.1 CVE-2021-36740: request smuggling attack can be performed on Varnish Cache and Varnish Cache Plus servers that have the HTTP/2 protocol enabled. The smuggled requests do not go through normal VCL processing, and any authorization steps implemented in VCL would be bypassed. To generate a diff of this commit: cvs rdiff -u -r1.31 -r1.32 pkgsrc/www/varnish/Makefile cvs rdiff -u -r1.15 -r1.16 pkgsrc/www/varnish/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1626698851169160 Content-Disposition: inline Content-Length: 1803 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/www/varnish/Makefile diff -u pkgsrc/www/varnish/Makefile:1.31 pkgsrc/www/varnish/Makefile:1.32 --- pkgsrc/www/varnish/Makefile:1.31 Fri Jun 25 12:21:08 2021 +++ pkgsrc/www/varnish/Makefile Mon Jul 19 12:47:31 2021 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.31 2021/06/25 12:21:08 tnn Exp $ +# $NetBSD: Makefile,v 1.32 2021/07/19 12:47:31 tnn Exp $ -DISTNAME= varnish-6.6.0 +DISTNAME= varnish-6.6.1 CATEGORIES= www MASTER_SITES= https://varnish-cache.org/_downloads/ EXTRACT_SUFX= .tgz Index: pkgsrc/www/varnish/distinfo diff -u pkgsrc/www/varnish/distinfo:1.15 pkgsrc/www/varnish/distinfo:1.16 --- pkgsrc/www/varnish/distinfo:1.15 Fri Jun 25 12:21:08 2021 +++ pkgsrc/www/varnish/distinfo Mon Jul 19 12:47:31 2021 @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.15 2021/06/25 12:21:08 tnn Exp $ +$NetBSD: distinfo,v 1.16 2021/07/19 12:47:31 tnn Exp $ -SHA1 (varnish-6.6.0.tgz) = c330a3cbdbb13586338d1419ef8913efbd3816ae -RMD160 (varnish-6.6.0.tgz) = 550dfcf68597dc2937c7eafa7dd03ff805c3cdfa -SHA512 (varnish-6.6.0.tgz) = 0f52e94dd866a7cf141f9333a9169b396627f169907acb2d64f18dcac3188f9d9f1e72ea9eb9f2c0c19a5f53df0c90446041eb2b1e52f4756ea257efb329d0d1 -Size (varnish-6.6.0.tgz) = 3519048 bytes +SHA1 (varnish-6.6.1.tgz) = b5036538ea05cc57afbfabeabdb2f284349c648d +RMD160 (varnish-6.6.1.tgz) = 8541fa91dbfde9840b2d9495654833d9a3e99fd6 +SHA512 (varnish-6.6.1.tgz) = af3ee1743af2ede2d3efbb73e5aa9b42c7bbd5f86163ec338c8afd1989c3e51ff3e1b40bed6b72224b5d339a74f22d6e5f3c3faf2fedee8ab4715307ed5d871b +Size (varnish-6.6.1.tgz) = 3518308 bytes SHA1 (patch-bin_varnishd_cache_cache__panic.c) = cf2b9c1f2c3ba15c7e20baca3c9af607a3e1fa82 SHA1 (patch-etc_Makefile.in) = f4407cad5f9f6c6402ab3b7fce0e1577d70b36be SHA1 (patch-include_tbl_params.h) = 7a52ef6a98ec29409c7284876adffdb5c53facff --_----------=_1626698851169160--