varnish (4.0.2-1+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Correctly handle bogusly large chunk sizes.
    This fixes a denial of service attack vector where bogusly large chunk
    sizes in requests could be used to force restarts of the Varnish server.

 -- Salvatore Bonaccorso <carnil@debian.org>  Mon, 31 Jul 2017 20:30:41 +0200

varnish (4.0.2-1) unstable; urgency=medium

  * use /run instead of /var/run in sysv init scripts (Closes: #708975)
  * Remove explicit "exit 0" from init scripts
  * Check syntax of running varnish before restart
  * Imported upstream release 4.0.2

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 14 Oct 2014 22:53:05 +0200

varnish (4.0.1-1) unstable; urgency=medium

  * Imported upstream release 4.0.1
  * [5bdad65] Ensure header files end up in /usr/include/varnish
    (Closes: #745902)
  * [91747ac] Remove backported patch included in this release

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 26 Jun 2014 16:18:49 +0200

varnish (4.0.0-2) unstable; urgency=medium

  * Reload varnishlog/varnishnsca properly on logrotate (Closes: #676491)
  * Install new upstream changelog (Closes: #745892)
  * Add upstream patch to build on kFreeBSD (Closes: #744199)
  * Ensure varnish starts before the logging daemons
  * debian/test: make better tests

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 13 May 2014 15:04:56 +0200

varnish (4.0.0-1) unstable; urgency=medium

  * Imported Upstream version 4.0.0
  * [f39325d] Handle changes in documentation.
  * [adef4b7] Update libvarnishapi1 symbols list.
  * [05f83a6] Update list of architectures where jemalloc is not available
  * [d453e47] Use anonscm.debian.org VSC URIs
  * [f31fa49] Declare compliance with Debian Standards-Version 3.9.5
  * [83da9e2] Add lintian override for the generated search index
  * [2b56109] Add a NEWS file
  * [c729df4] Install new files needed for vmod development
  * [bc91563] Add python dependency for libvarnishapi-dev
  * [7679077] Install default "example.vcl" as /etc/varnish/default.vcl
  * [336d1e9] Ignore documentation not present in varnish 4

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 10 Apr 2014 14:20:00 +0200

varnish (3.0.5-2) unstable; urgency=medium

  [ Mattia Rizzolo ]
  * debian/varnish.init: Add a configtest action.
    Thanks to Samuele Giovanni Tonon (Closes: #740002) (LP: #1284095)

  [ Stig Sandbeck Mathisen ]
  * debian/varnish.service: Test configuration before starting, add reload

  [ Jonathan Davies ]
  * debian/varnish.init: Use start-stop-daemon for status
  * debian/varnish.init: Remove PID file on stop (Closes: #661602)

  [ Martin Pitt ]
  * Add missing "needs-root" test restriction to fix autopkgtest

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 24 Mar 2014 21:37:23 +0100

varnish (3.0.5-1) unstable; urgency=low

  * Imported upstream version 3.0.5

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 02 Dec 2013 15:06:11 +0100

varnish (3.0.4-2) unstable; urgency=low

  * Build against the packaged libjemalloc
  * use dh-autoreconf
  * Update autopkgtests
  * Bump Standards-Version (no changes)
  * remove unnecessary versions from dependencies
  * Break and sort dependencies (no changes)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sun, 24 Nov 2013 18:55:59 +0100

varnish (3.0.4-1) unstable; urgency=low

  [ Stig Sandbeck Mathisen ]
  * New upstream release
  * Add dep8 tests.
    Thanks to Yolanda Robla <yolanda.robla@canonical.com> (Closes: #710001)
  * Advertise "reload" in the init script help (Closes: #710525)

  [ Michael Stapelberg ]
  * use dh-systemd for proper systemd-related maintscripts

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sat, 29 Jun 2013 16:20:51 +0200

varnish (3.0.3-1) unstable; urgency=low

  [ Stig Sandbeck Mathisen ]
  * New upstream release

  [ Tollef Fog Heen ]
  * Make varnishlog's and varnishncsa's init script exit with the exit
    status of status_of_proc to make them useful.  Fixes upstream trac
    #1226.

  [ Stig Sandbeck Mathisen ]
  * Do not rewrite /etc/default/varnish on upgrade.
    Thanks to Andreas Beckmann <anbe@debian.org> (Closes: 698577)
  * Undo mangling of /etc/default/varnish that happened during lenny->squeeze
    upgrade.
    Thanks to Andreas Beckmann <anbe@debian.org> (Closes: 698577)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sun, 05 May 2013 15:53:14 +0200

varnish (3.0.2-2) unstable; urgency=low

  [ Knut Arne Bjørndal ]
  * Fix exit code from reload-vcl (Closes: #664857)

  [ Stig Sandbeck Mathisen ]
  * Do not run build tests by default (Closes: #663667)
  * Use debhelper compat level 9 (Closes: #663064)
    This gives us multiarch and hardening flags
  * Remove /etc/varnish/secret on purge (Closes: #656220)
  * Bump standards-version (no changes)
  * Add systemd services
  * Remove vcs_version.h patch

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 01 May 2012 16:20:31 +0200

varnish (3.0.2-1) unstable; urgency=low

  * New upstream release
  * Build from upstream tarball instead of git tag
  * debian/watch: more specific regular expression

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sat, 29 Oct 2011 15:23:24 +0200

varnish (3.0.1-2) unstable; urgency=low

  [ Tollef Fog Heen ]
  * Make it possible to override DAEMON_OPTS for varnishlog and
    varnishncsa.
  * Make /etc/init.d/varnish status exit with a sensible status code
    rather than always being 0 (Closes: #637110)
  * Add missing options to reload-vcl to allow -C, -i, -M.

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sat, 24 Sep 2011 13:22:56 +0200

varnish (3.0.1-1) unstable; urgency=low

  * New upstrem release
  * Do not run autogen.sh unless we need to
  * Enable build tests on presumably sane architectures and buildbot hosts

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 02 Sep 2011 21:27:03 +0200

varnish (3.0.0-5) unstable; urgency=low

  [ Tollef Fog Heen ]
  * Drop build-dep on tcl, it's no longer needed.
  * Change automake build-dep to automake rather than forcing 1.9.
  * Remove .la files rather than neutering them.
  * Remove .a files, they are not supported upstream.
  * Move /usr/lib/varnish/lib*.so to varnish package, add Replaces
  * Add --fail-missing to dh_install call and fix up varnish.install.

  [ Stig Sandbeck Mathisen ]
  * Update lintian-overrides
  * Use packaged javascript libraries

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 24 Aug 2011 13:36:26 +0200

varnish (3.0.0-4) unstable; urgency=low

  * Add package with detached debugging symbols for varnish (Thanks,
    Jean-Baptiste Quenot)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 18 Jul 2011 12:25:02 +0200

varnish (3.0.0-3) unstable; urgency=low

  * Disable build tests (Closes: #632320)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sun, 17 Jul 2011 12:08:19 +0200

varnish (3.0.0-2) unstable; urgency=low

  [ Daniel Baumann ]
  * Conditionally replace jquery.js in dh_installdocs override in order to
    not fail when building arch any packages only (Closes: #631895).

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 28 Jun 2011 06:53:35 +0200

varnish (3.0.0-1) unstable; urgency=low

  * New upstream release
  * Add a varnish-log package
  * Rename the library packages, to reflect library name
  * Add new upstream URI to debian/watch

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 23 Jun 2011 10:49:45 +0200

varnish (2.1.5-2) unstable; urgency=low

  * Release for unstable

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 21 Mar 2011 10:16:07 +0100

varnish (2.1.5-1) experimental; urgency=low

  * New upstream release
  * Change default storage method to malloc, 256 MB
  * Start varnishd by default, since the new storage method has less system
    impact
  * Update symbols file for 2.1.5

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 02 Feb 2011 13:33:53 +0100

varnish (2.1.4-1) experimental; urgency=low

  * New upstream version
  * Update symbols file for 2.1.4
  * Cherry-pick fix for upstream bug #801. Remove duplicate Content-
    Length header

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 03 Nov 2010 16:44:08 +0100

varnish (2.1.3-8) unstable; urgency=high

  * Fix random secret creation on non-Linux kernels (Closes: #596373)
  * Urgency "high" due to FTBFS RC bug during squeeze freeze

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 24 Sep 2010 17:51:20 +0200

varnish (2.1.3-7) unstable; urgency=high

  [ Faidon Liambotis ]
  * Fix FTBFS race condition in tests/v00014.vtc (Closes: #594777)

  [ Stig Sandbeck Mathisen ]
  * Urgency "high" due to FTBFS RC bug during squeeze freeze

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 09 Sep 2010 21:03:24 +0200

varnish (2.1.3-6) unstable; urgency=low

  * Install only libvarnishapi.so (Closes: #592244)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Sat, 28 Aug 2010 00:43:50 +0200

varnish (2.1.3-5) unstable; urgency=low

  * Ensure a PATH is set (Closes: #592906)
  * debian/rules: Rewrite to do arch tests better, do not test on mipsel
    (Closes: #593979)
  * Disable build tests on sh4 (Closes: #594302)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 25 Aug 2010 10:47:26 +0200

varnish (2.1.3-4) unstable; urgency=low

  * Make sure we do not run the build tests on "armel" (by specifying
    "arm" instead of "armel")

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 06 Aug 2010 01:59:40 +0200

varnish (2.1.3-3) unstable; urgency=low

  * Disable build tests for some architectures (Closes: #591256)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 02 Aug 2010 00:00:30 +0200

varnish (2.1.3-2) unstable; urgency=low

  * Install all the needed library symlinks (Closes: #585128) (LP:
    #488258)
  * Use a different user for the varnish log daemons (LP: #461593)
  * Do not start automatically when installed (LP: #569060)
  * Clean up rules file, use debhelper v7

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 29 Jul 2010 23:36:35 +0200

varnish (2.1.3-1) unstable; urgency=low

  * New upstream version

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 28 Jul 2010 18:21:30 +0200

varnish (2.1.2-1) unstable; urgency=low

  * New upstream version

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 21 May 2010 09:26:49 +0200

varnish (2.1.1-1) unstable; urgency=low

  * New upstream version
  * Fix issue with "/etc/init.d/varnish reload" not working more than a few
    times when /bin/sh is provided by "dash"

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 27 Apr 2010 13:10:08 +0200

varnish (2.1.0-2) unstable; urgency=low

  * Enable access control for the varnishd management port (CVE-2009-2936)
  * Fix varnishd.1 man page, document -S option used for access control

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 29 Mar 2010 21:11:49 +0000

varnish (2.1.0-1) unstable; urgency=low

  * New upstream version
  * Fix small error in man/vcl.7so

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 24 Mar 2010 13:26:08 +0000

varnish (2.0.6-2) unstable; urgency=low

  * Set the mailing list address as maintainer, and the members as uploaders
  * Fix "Varnish 2.0.6 incompatible with libvarnish1 2.0.5" by adding a
    versioned dependency on libvarnish1 (Closes: #566756)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 25 Jan 2010 07:07:54 +0000

varnish (2.0.6-1) unstable; urgency=low

  * New upstream version (Closes: #561506)
  * debian/patches/vcl.7.patch: Remove patch, no longer needed
  * debian/libvarnish1.symbols: Removed some symbols for libvarnishcompat.so.1
  * init scripts: Add "status" argument (Closes: #561538)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 22 Dec 2009 15:38:53 +0000

varnish (2.0.5-1) unstable; urgency=low

  * New upstream release
  * Add README.source with information about quilt
  * Convert to source format 3.0 (quilt)
  * Add patch for vcl(7)
  * Remove patch for varnishd(1)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 09 Nov 2009 11:52:34 +0000

varnish (2.0.4-5) unstable; urgency=low

  * Add s390 to list of architectures not using jemalloc

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 27 Jul 2009 21:49:42 +0000

varnish (2.0.4-4) unstable; urgency=low

  * Remove s390 jemalloc patch
  * Add patch for varnishd(1)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 24 Jul 2009 13:02:38 +0000

varnish (2.0.4-3) unstable; urgency=low

  * Actually check for s390 in the jemalloc patch.

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Tue, 21 Jul 2009 20:29:29 +0000

varnish (2.0.4-2) unstable; urgency=low

  * Change Vcs-Browser and Vcs-Svn to reflect the packaging move to
    alioth
  * Add support for VCL reload via /etc/init.d/varnishd reload
  * Added a symbols file for libvarnish1
  * Add patch from Ingvar Hagelund to define *_2POW on s390, we should then be
    able to use jemalloc
  * Add build dependency on quilt

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 10 Jun 2009 17:11:03 +0000

varnish (2.0.4-1) unstable; urgency=low

  * New upstream version

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 27 Apr 2009 08:12:28 +0000

varnish (2.0.3-2) UNRELEASED; urgency=low

  * Add /usr/lib/pkgconfig/varnishapi.pc to the libvarnish-dev package

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 19 Feb 2009 07:22:14 +0100

varnish (2.0.3-1) unstable; urgency=low

  * New upstream version

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 18 Feb 2009 09:04:17 +0000

varnish (2.0.2-1) unstable; urgency=low

  * New upstream version
  * Change defaults to use configuration file /etc/varnish/default.vcl
    when starting varnishd

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 17 Nov 2008 07:31:05 +0100

varnish (2.0.1-2) unstable; urgency=low

  [ Kees Cook ]
  * debian/rules: disable jemalloc on architectures that lack *_2POW
    definitions (Closes: #503381).

  [ Stig Sandbeck Mathisen ]
  * Add a man page for varnishtest
  * Disable jemalloc on m64k as well

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 30 Oct 2008 08:00:56 +0100

varnish (2.0.1-1) unstable; urgency=low

  * New upstream version
  * Fix synopsis on binary packages (Closes: #502118)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Fri, 17 Oct 2008 21:03:16 +0200

varnish (2.0-1) unstable; urgency=low

  * New upstream version
  * Add varnishncsa init script, defaults and log rotation (Closes: #501454)
  * Add dependency on libc6.1-dev (Closes: #481067)

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Thu, 16 Oct 2008 14:04:42 +0200

varnish (2.0~rc1-1) unstable; urgency=low

  * New upstream version
  * Fix syntax error in varnishlog init script

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Wed, 08 Oct 2008 13:45:40 +0200

varnish (2.0~beta1-1) UNRELEASED; urgency=low

  [ Stig Sandbeck Mathisen ]
  * New upstream release

  [ Tollef Fog Heen ]
  * Fix up clean rule so as to work correctly on fresh sources too.
  * Fix up Makefile.am to get rid of files we don't ship.
  * Fix XSIsm in debian/varnish.varnishlog.init (-o in a test).
  * Rename libvarnish0-dev to libvarnish-dev again, bump soname to
    libvarnish1.

 -- Stig Sandbeck Mathisen <ssm@debian.org>  Mon, 01 Sep 2008 09:05:44 +0000

varnish (1.2-0) unstable; urgency=low

  [ Stig Sandbeck Mathisen ]
  * New upstream release.
  * Check if varnishlog is running before attempting reload from
    logrotate postscript. (Closes: #462029)

  [ Fabio Tranchitella ]
  * debian/varnish.dirs: removed unused lintian overrides dir.
  * debian/rules: backup and restore of config.sub and config.guess to not
    include them into the diff.gz in case of multiple builds from the same
    working directory.

  [ Tollef Fog Heen ]
  * Remove TODO from Makefile.am to make make dist happier.
  * Run make distclean if Makefile exists.

 -- Tollef Fog Heen <tfheen@ubuntu.com>  Mon, 23 Jun 2008 16:04:38 +0200

varnish (1.1.2) unstable; urgency=low

  * New upstream release
  * Renamed library and development packages to reflect sonames

 -- Stig Sandbeck Mathisen <ssm@fnord.no>  Wed, 12 Sep 2007 16:05:22 +0200

varnish (1.1.1-1) unstable; urgency=low

  [Lars Bahner]
  * New upstream release
  * User and Group id added to default DAEMON_OPTS
  * Added user and group creation to postinst
  * Added missing man pages

  [Stig Sandbeck Mathisen]
  * Set statedir to /var/lib
  * Removed -n switch from varnish defaults file and varnishlog init script.
    Use the default instance name instead.

 -- Stig Sandbeck Mathisen <ssm@linpro.no>  Tue, 04 Sep 2007 12:27:09 +0200

varnish (1.1-1) unstable; urgency=low

  * New upstream release
  * Split package into varnish, libvarnish and libvarnish-dev

 -- Stig Sandbeck Mathisen <ssm@linpro.no>  Fri, 20 Jul 2007 14:37:36 +0200

varnish (1.0.4-1) unstable; urgency=low

  * New upstream version (Closes: #424560)
  * Use the upstream default configuration file, renamed to default.vcl.
    Default template in /etc/default/varnish does not use this, but a
    commented-out alternative does.
  * Changed init script.  Use lsb init library functions, move more defaults
    to /etc/default/varnish, to make init script simpler.
  * Changed postrm, /var/lib/varnish disappeared on upgrade, making varnish
    non-startable.
  * Added example vcl for zope and plone.

 -- ssm <ssm@linpro.no>  Wed, 16 May 2007 13:50:08 +0200

varnish (1.0.3-2) unstable; urgency=low

  * Added postrm to partially solve 400384

 -- Lars Bahner <bahner@debian.org>  Tue, 27 Feb 2007 20:41:10 +0100

varnish (1.0.3-1) unstable; urgency=low

  * new upstream release
  * set VARNISH_MAX_WORKER_THREADS to 2048 instead of INF.
    (closes: #412004)

 -- Lars Bahner <bahner@debian.org>  Tue, 27 Feb 2007 20:16:38 +0100

varnish (1.0.2-2) unstable; urgency=low

  * Preliminary LSB compliabnce in init-script
  * Lintian override

 -- Lars Bahner <bahner@debian.org>  Mon, 23 Oct 2006 14:20:22 +0200

varnish (1.0.2-1) unstable; urgency=low

  * New upstream release

 -- Lars Bahner <bahner@linpro.no>  Thu, 19 Oct 2006 15:51:37 +0200

varnish (1.0.2-1~svn20061012) unstable; urgency=low

  * Added README for Debian
  * svn-based source
  * Added target to create configure to build from pristine source
  * Added init-script and defaults
  * Moved backend storage to /var/lib/varnish/

 -- Lars Bahner <bahner@linpro.no>  Fri, 13 Oct 2006 09:58:13 +0200

varnish (1.0.1-3) unstable; urgency=low

  * Bumped automake dependency to automake1.9

 -- Lars Bahner <bahner@debian.org>  Tue, 10 Oct 2006 15:00:39 +0200

varnish (1.0.1-2) unstable; urgency=low

  * Removed wrong upstream author.
  * Added dependency on gcc-4.1 needed by varnish at runtime.

 -- Lars Bahner <bahner@debian.org>  Fri,  6 Oct 2006 17:54:53 +0200

varnish (1.0.1-1) unstable; urgency=low

  * Initial release (Closes: #382451)

 -- Lars Bahner <bahner@debian.org>  Fri,  6 Oct 2006 16:26:57 +0200
