varnish (7.1.1-2+deb12u1) bookworm-security; urgency=medium

  * Fix the VSV00016 request smuggling vulnerability.

 -- Marco d'Itri <md@linux.it>  Tue, 13 May 2025 01:19:10 +0200

varnish (7.1.1-1.1+deb12u1) bookworm; urgency=medium

  * Non-maintainer upload.
  * CVE-2025-30346: HTTP/1 client-side desync vulnerability

 -- Adrian Bunk <bunk@debian.org>  Mon, 31 Mar 2025 16:06:56 +0300

varnish (7.1.1-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Add all well-known headers to the perfect hash lookup table
    (CVE-2022-45059) (Closes: #1023750)
  * hpack: fix pseudo-headers handling (CVE-2022-45060) (Closes: #1023751)

 -- Salvatore Bonaccorso <carnil@debian.org>  Mon, 09 Jan 2023 22:09:31 +0100

varnish (7.1.1-1) unstable; urgency=medium

  * New upstream release (CVE-2022-38150, VSV00009)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 12 Aug 2022 11:23:00 +0200

varnish (7.1.0-6) unstable; urgency=medium

  * Declare compliance with Debian Policy Manual 4.6.1

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 16 Jun 2022 21:53:14 +0200

varnish (7.1.0-5) unstable; urgency=medium

  * New upstream release (Closes: #1010582)
  * Bump soname for libvarnishapi
  * Depend on libpcre2-dev instead of libpcre3-dev
  * Drop superfluous file patterns from debian/copyright
  * Update lintian overrides for embedded, modified zlib
  * Update lintian overrides for compiled javascript included in the
    documentation source tarball

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 15 Jun 2022 21:16:48 +0200

varnish (6.6.1-1) unstable; urgency=medium

  * New upstream release
    (Closes: #978916)
    Update symbols
    Update debian/copyright
  * Add salsa CI pipeline
    Remove old debian/.gitlab-ci.yml
  * Bump debhelper from old 12 to 13.
  * Update standards version to 4.5.1, no changes needed.
  * Autopkgtest: Depend on net-tools for netstat command
  * Reproducible builds: Ensure documentation builds do not vary based on
    locale

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sat, 18 Sep 2021 20:30:25 +0200

varnish (6.5.2-1) unstable; urgency=medium

  * New upstream release.
    (Closes: #991040, VSV00007, CVE-2021-36740)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 14 Jul 2021 21:46:38 +0200

varnish (6.5.1-1) unstable; urgency=medium

  * New upstream release.
  * systemd service: Fix LimitMEMLOCK value, unit is bytes, not kilobytes

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 29 Sep 2020 23:21:31 +0200

varnish (6.5.0-1) unstable; urgency=medium

  * New upstream release.
  * Use upstream's method for extracting the varnish ABI version for
    vmod dependencies

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 17 Sep 2020 19:47:57 +0200

varnish (6.4.0-3) unstable; urgency=medium

  [ Stig Sandbeck Mathisen ]
  * Work around a breaking change in GNU make 4.3

  [ Clint Adams ]
  * Use mktemp instead of tempfile (Closes: #961392)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sun, 24 May 2020 19:11:49 +0200

varnish (6.4.0-2) unstable; urgency=medium

  * Bump packaging version for source only upload. No other changes.

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 23 Apr 2020 12:06:04 +0200

varnish (6.4.0-1) unstable; urgency=medium

  * New upstream version
    (Closes: #956305, VSV00004, CVE-2019-20637)
    (Closes: #956307, VSV00005, CVE-2020-11653)
  * /etc/init.d/varnish: Ignore the START variable in /etc/default/varnish
    (Lintian: init.d-script-should-always-start-service)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sat, 18 Apr 2020 13:08:39 +0200

varnish (6.2.1-3) unstable; urgency=medium

  [ Helmut Grohne ]
  * Make cc_command reproducible. (Closes: #916078)

  [ Stig Sandbeck Mathisen ]
  * Update standards version to 4.4.1, no changes needed.
  * Set debhelper-compat version in Build-Depends.
  * Set fields Upstream-Name, Upstream-Contact in debian/copyright.
  * Remove obsolete field Contact from debian/upstream/metadata (already
    present in machine-readable debian/copyright).

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sun, 15 Mar 2020 12:51:54 +0100

varnish (6.2.1-2) unstable; urgency=medium

  * Update varnishreload script from upstream packaging repo, making
    "reload" work again.  (Thanks, autopkgtest)
  * Add debian/source options from man:dgit-maint-merge(7)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sun, 08 Sep 2019 08:59:25 +0200

varnish (6.2.1-1) unstable; urgency=medium

  * Imported upstream release 6.2.1 (Closes: #939333, VSV00003, CVE-2019-15892)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 03 Sep 2019 21:55:11 +0200

varnish (6.2.0-1) unstable; urgency=medium

  * Imported upstream release 6.2.0
  * Drop upstream patch for GCC-9
  * Declare compliance with Debian Policy 4.3.0
  * Use debhelper 12
  * Varnish now uses python3 (Closes: #938768)
  * Remove old Replaces: references to libvarnishapi1
  * Documentation has moved to /usr/share/doc/varnish
  * Update symbols file for 6.2.0
  * Package vcstool.py

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 30 Aug 2019 23:43:47 +0200

varnish (6.1.1-2) unstable; urgency=medium

  * Add patch from upstream for GCC-9 support (Closes: #925849)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 28 Aug 2019 07:01:01 +0200

varnish (6.1.1-1) unstable; urgency=medium

  * Imported new upstream version 6.1.1
  * Set "BSD-2-clause" as license shortname for sphinx doc files
  * Add multiarch metadata
  * autopkgtest: ensure tests pass with sysvinit and systemd

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sat, 01 Dec 2018 13:44:50 +0100

varnish (6.1.0-3) unstable; urgency=medium

  * Annotate python dependency with :any for development.
    Thanks to Helmut Grohne <helmut@subdivi.de> (Closes: #865420)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sat, 06 Oct 2018 13:57:18 +0200

varnish (6.1.0-2) experimental; urgency=medium

  [ Stig Sandbeck Mathisen ]
  * Update usage message for init script (Closes: #822147)
  * Update documentation urls in unit files (Closes: #880074)
  * Remove PrivateNetwork=yes due to service failing to start in userspace lxc
    (Closes: #874455)
  * Update debian/copyright

  [ Thorsten Alteholz ]
  * debian/control: use tracker team as maintainer (Closes: #899901)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 04 Oct 2018 23:08:08 +0200

varnish (6.1.0-1) experimental; urgency=medium

  [ Thorsten Alteholz ]
  * debian/control: remove useless dependency for dh-autoreconf
                    and autotools-dev
  * debian/control: remove dependency for dh-systemd
  * debian/control: remove Testuite:
  * debian/control: move VCS URLs to salsa
  * debian/rules: lintian says debug-symbol-migration-possibly-complete

  [ Stig Sandbeck Mathisen ]
  * Imported upstream realease 6.1.0
  * Drop reproducible build patch, upstream aims to be reproducible
  * Update build dependencies
  * Bump SONAME for libvarnishapi (Closes: #879471)
  * Declare compliance with Debian policy 4.2.1

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sun, 30 Sep 2018 15:06:06 +0200

varnish (5.2.1-1) unstable; urgency=medium

  * Imported upstream release 5.2.1 (closes: #881808, CVE-2017-8807)
  * Refresh varnishreload from upstream packaging repo

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 29 Nov 2017 20:48:23 +0100

varnish (5.2.0-1) unstable; urgency=medium

  * Imported upstream release 5.2.0
  * Declare compliance with Debian policy 4.1.1
  * refresh reproducible build patch
  * drop chunk size patch included upstream
  * Refresh shlib symbols file
  * Refresh lintian overrides list
  * Replace reload-vcl with varnishreload

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 12 Oct 2017 20:14:18 +0200

varnish (5.0.0-7.1) unstable; urgency=high

  * Non-maintainer upload.
  * CVE-2017-12425: Correctly handle bogusly large chunk sizes.
    This fixes a denial of service attack vector where bogusly large chunk
    sizes in requests could be used to force restarts of the Varnish server.
    (Closes: #870467)

 -- Salvatore Bonaccorso <carnil@debian.org>  Fri, 04 Aug 2017 10:55:36 +0200

varnish (5.0.0-7) unstable; urgency=medium

  * Remove reload from varnish.service (Closes: #749272)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 02 Mar 2017 18:16:05 +0100

varnish (5.0.0-6) unstable; urgency=medium

  * Update reload-vcl for varnish 5.x
  * Re-enable service reload
  * Add autopkgtests for service reload

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 20 Dec 2016 22:04:01 +0100

varnish (5.0.0-5) unstable; urgency=medium

  * cme: Remove version from lsb-base dependency

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 07 Dec 2016 06:49:43 +0100

varnish (5.0.0-4) unstable; urgency=medium

  * Depend on lsb-base for the init script support
  * Ensure the package builds with dpkg-buildpackage -A (Closes: #838900)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 05 Dec 2016 07:56:03 +0100

varnish (5.0.0-3) unstable; urgency=medium

  * Add patch for reproducible build (Closes: #835061)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 13 Oct 2016 06:21:04 +0200

varnish (5.0.0-2) unstable; urgency=medium

  * Disable broken "reload" for service / init script

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 15 Sep 2016 22:37:31 +0200

varnish (5.0.0-1) unstable; urgency=medium

  * Imported upstream release 5.0.0
  * Use debhelper 10
  * Update symbols
  * Use hardening options

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 15 Sep 2016 16:49:13 +0200

varnish (4.1.3-2) unstable; urgency=medium

  * Build with -fexcess-precision=standard to fix FTBFS on i386.  See
    https://github.com/varnishcache/varnish-cache/issues/1875 for more
    information.

 -- Emanuele Rocca <ema@debian.org>  Tue, 19 Jul 2016 11:42:47 +0200

varnish (4.1.3-1) unstable; urgency=medium

  * New upstream release
  * Upstream renamed README into README.rst. Update debian/varnish.docs
    accordingly
  * Add myself to the Uploaders field

 -- Emanuele Rocca <ema@debian.org>  Thu, 07 Jul 2016 17:03:55 +0200

varnish (4.1.2-4) unstable; urgency=medium

  * Declare compliance with Debian policy 3.9.8
  * Use automatically built debug symbol packages
  * Update debian/copyright
  * Add Documentation= for varnishncsa.service

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 23 May 2016 22:20:11 +0200

varnish (4.1.2-3) unstable; urgency=medium

  * Use serverspec for autopkgtest
  * Remove old migration from postinst script

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 23 May 2016 16:51:41 +0200

varnish (4.1.2-2) unstable; urgency=medium

  * Fix FTBFS when building with dpkg-buildpackage -A (Closes: #806120)
  * Declare compliance with Debian Policy 3.9.7
  * Use https:// in Vcs-* fields
  * Update URL to upstream homepage

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 29 Mar 2016 15:55:33 +0200

varnish (4.1.2-1) unstable; urgency=medium

  * Imported upstream release 4.1.2-1
  * [784290d] Use Type=forking for systemd services.
    Thanks to Lasse Karstensen
  * [cbdc531] systemd: create /run directories for log daemons
  * [0b9cd9a] Remove the varnishlog service

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 04 Mar 2016 21:39:05 +0100

varnish (4.1.1-1) unstable; urgency=medium

  * Imported upstream release 4.1.1

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 28 Jan 2016 21:22:13 +0100

varnish (4.1.0-2) unstable; urgency=medium

  * The varnish cache worker now runs as the "vcache" user.
  * Group membership in "varnish" is now needed to access the shared memory
    used for varnish log and stats. The varnishlog, varnishncsa services run
    as this group.  /var/log/varnish is now owned by this group.
  * Examples for systemd for changing the varnish and varnishncsa commandlines
    have been added to /usr/share/doc/varnish/examples
  * [d948695] autopkgtest: use less complex tests for debci
  * [eb01441] varnish.service, remove redundant syntax check
  * [b072816] systemd units: restrict default access to files and devices.
    No network access for varnishlog and varnishncsa

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 06 Nov 2015 11:18:10 +0100

varnish (4.1.0-1) unstable; urgency=medium

  [ Tollef Fog Heen ]
  * Under systemd, ensure varnishlog/varnishncsa are running before trying
    to reload them, to avoid a spurious mail.

  [ Stig Sandbeck Mathisen ]
  * Imported upstream release 4.1.0-1
  * [23c5db9] Build depend on graphviz for doc
  * [c49f79e] Adjust varnish doc install source
  * [94a0031] Use Pre-Depends: ${misc:Pre-Depends} (lintian)
  * [e5ef8d1] Give the varnish user a home in /nonexistent
  * [e678ca3] Add new symbols for libvarnishapi1

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 12 Oct 2015 14:23:28 +0200

varnish (4.0.3-1) unstable; urgency=medium

  * Imported upstream release 4.0.3
  * [84d7292] Provide virtual packages for varnish ABI versions
  * [5c6fca3] Remove -w from example in /etc/default/varnish (Closes: #774963)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 23 Feb 2015 13:23:54 +0100

varnish (4.0.2-1) unstable; urgency=medium

  * use /run instead of /var/run in sysv init scripts (Closes: #708975)
  * Remove explicit "exit 0" from init scripts
  * Check syntax of running varnish before restart
  * Imported upstream release 4.0.2

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 14 Oct 2014 22:53:05 +0200

varnish (4.0.1-1) unstable; urgency=medium

  * Imported upstream release 4.0.1
  * [5bdad65] Ensure header files end up in /usr/include/varnish
    (Closes: #745902)
  * [91747ac] Remove backported patch included in this release

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 26 Jun 2014 16:18:49 +0200

varnish (4.0.0-2) unstable; urgency=medium

  * Reload varnishlog/varnishnsca properly on logrotate (Closes: #676491)
  * Install new upstream changelog (Closes: #745892)
  * Add upstream patch to build on kFreeBSD (Closes: #744199)
  * Ensure varnish starts before the logging daemons
  * debian/test: make better tests

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 13 May 2014 15:04:56 +0200

varnish (4.0.0-1) unstable; urgency=medium

  * Imported Upstream version 4.0.0
  * [f39325d] Handle changes in documentation.
  * [adef4b7] Update libvarnishapi1 symbols list.
  * [05f83a6] Update list of architectures where jemalloc is not available
  * [d453e47] Use anonscm.debian.org VSC URIs
  * [f31fa49] Declare compliance with Debian Standards-Version 3.9.5
  * [83da9e2] Add lintian override for the generated search index
  * [2b56109] Add a NEWS file
  * [c729df4] Install new files needed for vmod development
  * [bc91563] Add python dependency for libvarnishapi-dev
  * [7679077] Install default "example.vcl" as /etc/varnish/default.vcl
  * [336d1e9] Ignore documentation not present in varnish 4

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 10 Apr 2014 14:20:00 +0200

varnish (3.0.5-2) unstable; urgency=medium

  [ Mattia Rizzolo ]
  * debian/varnish.init: Add a configtest action.
    Thanks to Samuele Giovanni Tonon (Closes: #740002) (LP: #1284095)

  [ Stig Sandbeck Mathisen ]
  * debian/varnish.service: Test configuration before starting, add reload

  [ Jonathan Davies ]
  * debian/varnish.init: Use start-stop-daemon for status
  * debian/varnish.init: Remove PID file on stop (Closes: #661602)

  [ Martin Pitt ]
  * Add missing "needs-root" test restriction to fix autopkgtest

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 24 Mar 2014 21:37:23 +0100

varnish (3.0.5-1) unstable; urgency=low

  * Imported upstream version 3.0.5

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 02 Dec 2013 15:06:11 +0100

varnish (3.0.4-2) unstable; urgency=low

  * Build against the packaged libjemalloc
  * use dh-autoreconf
  * Update autopkgtests
  * Bump Standards-Version (no changes)
  * remove unnecessary versions from dependencies
  * Break and sort dependencies (no changes)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sun, 24 Nov 2013 18:55:59 +0100

varnish (3.0.4-1) unstable; urgency=low

  [ Stig Sandbeck Mathisen ]
  * New upstream release
  * Add dep8 tests.
    Thanks to Yolanda Robla <yolanda.robla@canonical.com> (Closes: #710001)
  * Advertise "reload" in the init script help (Closes: #710525)

  [ Michael Stapelberg ]
  * use dh-systemd for proper systemd-related maintscripts

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sat, 29 Jun 2013 16:20:51 +0200

varnish (3.0.3-1) unstable; urgency=low

  [ Stig Sandbeck Mathisen ]
  * New upstream release

  [ Tollef Fog Heen ]
  * Make varnishlog's and varnishncsa's init script exit with the exit
    status of status_of_proc to make them useful.  Fixes upstream trac
    #1226.

  [ Stig Sandbeck Mathisen ]
  * Do not rewrite /etc/default/varnish on upgrade.
    Thanks to Andreas Beckmann <anbe@debian.org> (Closes: 698577)
  * Undo mangling of /etc/default/varnish that happened during lenny->squeeze
    upgrade.
    Thanks to Andreas Beckmann <anbe@debian.org> (Closes: 698577)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sun, 05 May 2013 15:53:14 +0200

varnish (3.0.2-2) unstable; urgency=low

  [ Knut Arne Bjørndal ]
  * Fix exit code from reload-vcl (Closes: #664857)

  [ Stig Sandbeck Mathisen ]
  * Do not run build tests by default (Closes: #663667)
  * Use debhelper compat level 9 (Closes: #663064)
    This gives us multiarch and hardening flags
  * Remove /etc/varnish/secret on purge (Closes: #656220)
  * Bump standards-version (no changes)
  * Add systemd services
  * Remove vcs_version.h patch

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 01 May 2012 16:20:31 +0200

varnish (3.0.2-1) unstable; urgency=low

  * New upstream release
  * Build from upstream tarball instead of git tag
  * debian/watch: more specific regular expression

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sat, 29 Oct 2011 15:23:24 +0200

varnish (3.0.1-2) unstable; urgency=low

  [ Tollef Fog Heen ]
  * Make it possible to override DAEMON_OPTS for varnishlog and
    varnishncsa.
  * Make /etc/init.d/varnish status exit with a sensible status code
    rather than always being 0 (Closes: #637110)
  * Add missing options to reload-vcl to allow -C, -i, -M.

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sat, 24 Sep 2011 13:22:56 +0200

varnish (3.0.1-1) unstable; urgency=low

  * New upstrem release
  * Do not run autogen.sh unless we need to
  * Enable build tests on presumably sane architectures and buildbot hosts

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 02 Sep 2011 21:27:03 +0200

varnish (3.0.0-5) unstable; urgency=low

  [ Tollef Fog Heen ]
  * Drop build-dep on tcl, it's no longer needed.
  * Change automake build-dep to automake rather than forcing 1.9.
  * Remove .la files rather than neutering them.
  * Remove .a files, they are not supported upstream.
  * Move /usr/lib/varnish/lib*.so to varnish package, add Replaces
  * Add --fail-missing to dh_install call and fix up varnish.install.

  [ Stig Sandbeck Mathisen ]
  * Update lintian-overrides
  * Use packaged javascript libraries

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 24 Aug 2011 13:36:26 +0200

varnish (3.0.0-4) unstable; urgency=low

  * Add package with detached debugging symbols for varnish (Thanks,
    Jean-Baptiste Quenot)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 18 Jul 2011 12:25:02 +0200

varnish (3.0.0-3) unstable; urgency=low

  * Disable build tests (Closes: #632320)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sun, 17 Jul 2011 12:08:19 +0200

varnish (3.0.0-2) unstable; urgency=low

  [ Daniel Baumann ]
  * Conditionally replace jquery.js in dh_installdocs override in order to
    not fail when building arch any packages only (Closes: #631895).

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 28 Jun 2011 06:53:35 +0200

varnish (3.0.0-1) unstable; urgency=low

  * New upstream release
  * Add a varnish-log package
  * Rename the library packages, to reflect library name
  * Add new upstream URI to debian/watch

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 23 Jun 2011 10:49:45 +0200

varnish (2.1.5-2) unstable; urgency=low

  * Release for unstable

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 21 Mar 2011 10:16:07 +0100

varnish (2.1.5-1) experimental; urgency=low

  * New upstream release
  * Change default storage method to malloc, 256 MB
  * Start varnishd by default, since the new storage method has less system
    impact
  * Update symbols file for 2.1.5

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 02 Feb 2011 13:33:53 +0100

varnish (2.1.4-1) experimental; urgency=low

  * New upstream version
  * Update symbols file for 2.1.4
  * Cherry-pick fix for upstream bug #801. Remove duplicate Content-
    Length header

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 03 Nov 2010 16:44:08 +0100

varnish (2.1.3-8) unstable; urgency=high

  * Fix random secret creation on non-Linux kernels (Closes: #596373)
  * Urgency "high" due to FTBFS RC bug during squeeze freeze

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 24 Sep 2010 17:51:20 +0200

varnish (2.1.3-7) unstable; urgency=high

  [ Faidon Liambotis ]
  * Fix FTBFS race condition in tests/v00014.vtc (Closes: #594777)

  [ Stig Sandbeck Mathisen ]
  * Urgency "high" due to FTBFS RC bug during squeeze freeze

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 09 Sep 2010 21:03:24 +0200

varnish (2.1.3-6) unstable; urgency=low

  * Install only libvarnishapi.so (Closes: #592244)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sat, 28 Aug 2010 00:43:50 +0200

varnish (2.1.3-5) unstable; urgency=low

  * Ensure a PATH is set (Closes: #592906)
  * debian/rules: Rewrite to do arch tests better, do not test on mipsel
    (Closes: #593979)
  * Disable build tests on sh4 (Closes: #594302)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 25 Aug 2010 10:47:26 +0200

varnish (2.1.3-4) unstable; urgency=low

  * Make sure we do not run the build tests on "armel" (by specifying
    "arm" instead of "armel")

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 06 Aug 2010 01:59:40 +0200

varnish (2.1.3-3) unstable; urgency=low

  * Disable build tests for some architectures (Closes: #591256)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 02 Aug 2010 00:00:30 +0200

varnish (2.1.3-2) unstable; urgency=low

  * Install all the needed library symlinks (Closes: #585128) (LP:
    #488258)
  * Use a different user for the varnish log daemons (LP: #461593)
  * Do not start automatically when installed (LP: #569060)
  * Clean up rules file, use debhelper v7

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 29 Jul 2010 23:36:35 +0200

varnish (2.1.3-1) unstable; urgency=low

  * New upstream version

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 28 Jul 2010 18:21:30 +0200

varnish (2.1.2-1) unstable; urgency=low

  * New upstream version

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 21 May 2010 09:26:49 +0200

varnish (2.1.1-1) unstable; urgency=low

  * New upstream version
  * Fix issue with "/etc/init.d/varnish reload" not working more than a few
    times when /bin/sh is provided by "dash"

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 27 Apr 2010 13:10:08 +0200

varnish (2.1.0-2) unstable; urgency=low

  * Enable access control for the varnishd management port (CVE-2009-2936)
  * Fix varnishd.1 man page, document -S option used for access control

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 29 Mar 2010 21:11:49 +0000

varnish (2.1.0-1) unstable; urgency=low

  * New upstream version
  * Fix small error in man/vcl.7so

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 24 Mar 2010 13:26:08 +0000

varnish (2.0.6-2) unstable; urgency=low

  * Set the mailing list address as maintainer, and the members as uploaders
  * Fix "Varnish 2.0.6 incompatible with libvarnish1 2.0.5" by adding a
    versioned dependency on libvarnish1 (Closes: #566756)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 25 Jan 2010 07:07:54 +0000

varnish (2.0.6-1) unstable; urgency=low

  * New upstream version (Closes: #561506)
  * debian/patches/vcl.7.patch: Remove patch, no longer needed
  * debian/libvarnish1.symbols: Removed some symbols for libvarnishcompat.so.1
  * init scripts: Add "status" argument (Closes: #561538)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 22 Dec 2009 15:38:53 +0000

varnish (2.0.5-1) unstable; urgency=low

  * New upstream release
  * Add README.source with information about quilt
  * Convert to source format 3.0 (quilt)
  * Add patch for vcl(7)
  * Remove patch for varnishd(1)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 09 Nov 2009 11:52:34 +0000

varnish (2.0.4-5) unstable; urgency=low

  * Add s390 to list of architectures not using jemalloc

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 27 Jul 2009 21:49:42 +0000

varnish (2.0.4-4) unstable; urgency=low

  * Remove s390 jemalloc patch
  * Add patch for varnishd(1)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 24 Jul 2009 13:02:38 +0000

varnish (2.0.4-3) unstable; urgency=low

  * Actually check for s390 in the jemalloc patch.

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 21 Jul 2009 20:29:29 +0000

varnish (2.0.4-2) unstable; urgency=low

  * Change Vcs-Browser and Vcs-Svn to reflect the packaging move to
    alioth
  * Add support for VCL reload via /etc/init.d/varnishd reload
  * Added a symbols file for libvarnish1
  * Add patch from Ingvar Hagelund to define *_2POW on s390, we should then be
    able to use jemalloc
  * Add build dependency on quilt

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 10 Jun 2009 17:11:03 +0000

varnish (2.0.4-1) unstable; urgency=low

  * New upstream version

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 27 Apr 2009 08:12:28 +0000

varnish (2.0.3-2) UNRELEASED; urgency=low

  * Add /usr/lib/pkgconfig/varnishapi.pc to the libvarnish-dev package

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 19 Feb 2009 07:22:14 +0100

varnish (2.0.3-1) unstable; urgency=low

  * New upstream version

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 18 Feb 2009 09:04:17 +0000

varnish (2.0.2-1) unstable; urgency=low

  * New upstream version
  * Change defaults to use configuration file /etc/varnish/default.vcl
    when starting varnishd

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 17 Nov 2008 07:31:05 +0100

varnish (2.0.1-2) unstable; urgency=low

  [ Kees Cook ]
  * debian/rules: disable jemalloc on architectures that lack *_2POW
    definitions (Closes: #503381).

  [ Stig Sandbeck Mathisen ]
  * Add a man page for varnishtest
  * Disable jemalloc on m64k as well

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 30 Oct 2008 08:00:56 +0100

varnish (2.0.1-1) unstable; urgency=low

  * New upstream version
  * Fix synopsis on binary packages (Closes: #502118)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 17 Oct 2008 21:03:16 +0200

varnish (2.0-1) unstable; urgency=low

  * New upstream version
  * Add varnishncsa init script, defaults and log rotation (Closes: #501454)
  * Add dependency on libc6.1-dev (Closes: #481067)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 16 Oct 2008 14:04:42 +0200

varnish (2.0~rc1-1) unstable; urgency=low

  * New upstream version
  * Fix syntax error in varnishlog init script

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 08 Oct 2008 13:45:40 +0200

varnish (2.0~beta1-1) UNRELEASED; urgency=low

  [ Stig Sandbeck Mathisen ]
  * New upstream release

  [ Tollef Fog Heen ]
  * Fix up clean rule so as to work correctly on fresh sources too.
  * Fix up Makefile.am to get rid of files we don't ship.
  * Fix XSIsm in debian/varnish.varnishlog.init (-o in a test).
  * Rename libvarnish0-dev to libvarnish-dev again, bump soname to
    libvarnish1.

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 01 Sep 2008 09:05:44 +0000

varnish (1.2-0) unstable; urgency=low

  [ Stig Sandbeck Mathisen ]
  * New upstream release.
  * Check if varnishlog is running before attempting reload from
    logrotate postscript. (Closes: #462029)

  [ Fabio Tranchitella ]
  * debian/varnish.dirs: removed unused lintian overrides dir.
  * debian/rules: backup and restore of config.sub and config.guess to not
    include them into the diff.gz in case of multiple builds from the same
    working directory.

  [ Tollef Fog Heen ]
  * Remove TODO from Makefile.am to make make dist happier.
  * Run make distclean if Makefile exists.

 -- Tollef Fog Heen <tfheen@ubuntu.com>  Mon, 23 Jun 2008 16:04:38 +0200

varnish (1.1.2) unstable; urgency=low

  * New upstream release
  * Renamed library and development packages to reflect sonames

 -- Stig Sandbeck Mathisen <ssm@fnord.no>  Wed, 12 Sep 2007 16:05:22 +0200

varnish (1.1.1-1) unstable; urgency=low

  [Lars Bahner]
  * New upstream release
  * User and Group id added to default DAEMON_OPTS
  * Added user and group creation to postinst
  * Added missing man pages

  [Stig Sandbeck Mathisen]
  * Set statedir to /var/lib
  * Removed -n switch from varnish defaults file and varnishlog init script.
    Use the default instance name instead.

 -- Stig Sandbeck Mathisen <ssm@linpro.no>  Tue, 04 Sep 2007 12:27:09 +0200

varnish (1.1-1) unstable; urgency=low

  * New upstream release
  * Split package into varnish, libvarnish and libvarnish-dev

 -- Stig Sandbeck Mathisen <ssm@linpro.no>  Fri, 20 Jul 2007 14:37:36 +0200

varnish (1.0.4-1) unstable; urgency=low

  * New upstream version (Closes: #424560)
  * Use the upstream default configuration file, renamed to default.vcl.
    Default template in /etc/default/varnish does not use this, but a
    commented-out alternative does.
  * Changed init script.  Use lsb init library functions, move more defaults
    to /etc/default/varnish, to make init script simpler.
  * Changed postrm, /var/lib/varnish disappeared on upgrade, making varnish
    non-startable.
  * Added example vcl for zope and plone.

 -- ssm <ssm@linpro.no>  Wed, 16 May 2007 13:50:08 +0200

varnish (1.0.3-2) unstable; urgency=low

  * Added postrm to partially solve 400384

 -- Lars Bahner <bahner@debian.org>  Tue, 27 Feb 2007 20:41:10 +0100

varnish (1.0.3-1) unstable; urgency=low

  * new upstream release
  * set VARNISH_MAX_WORKER_THREADS to 2048 instead of INF.
    (closes: #412004)

 -- Lars Bahner <bahner@debian.org>  Tue, 27 Feb 2007 20:16:38 +0100

varnish (1.0.2-2) unstable; urgency=low

  * Preliminary LSB compliabnce in init-script
  * Lintian override

 -- Lars Bahner <bahner@debian.org>  Mon, 23 Oct 2006 14:20:22 +0200

varnish (1.0.2-1) unstable; urgency=low

  * New upstream release

 -- Lars Bahner <bahner@linpro.no>  Thu, 19 Oct 2006 15:51:37 +0200

varnish (1.0.2-1~svn20061012) unstable; urgency=low

  * Added README for Debian
  * svn-based source
  * Added target to create configure to build from pristine source
  * Added init-script and defaults
  * Moved backend storage to /var/lib/varnish/

 -- Lars Bahner <bahner@linpro.no>  Fri, 13 Oct 2006 09:58:13 +0200

varnish (1.0.1-3) unstable; urgency=low

  * Bumped automake dependency to automake1.9

 -- Lars Bahner <bahner@debian.org>  Tue, 10 Oct 2006 15:00:39 +0200

varnish (1.0.1-2) unstable; urgency=low

  * Removed wrong upstream author.
  * Added dependency on gcc-4.1 needed by varnish at runtime.

 -- Lars Bahner <bahner@debian.org>  Fri,  6 Oct 2006 17:54:53 +0200

varnish (1.0.1-1) unstable; urgency=low

  * Initial release (Closes: #382451)

 -- Lars Bahner <bahner@debian.org>  Fri,  6 Oct 2006 16:26:57 +0200
