Dear Maintainer,

A new upstream release 7.1.0 is available, that fixes CVE-2022-23959.

I need this version for it to be automatically synced into Ubuntu
Kinetic
(see https://bugs.launchpad.net/ubuntu/+source/varnish/+bug/1971504).

Kind regards,
Luís Infante da Câmara

We believe that the bug you reported is fixed in the latest version of
varnish, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1010582@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Stig Sandbeck Mathisen <ssm@debian.org> (supplier of updated varnish package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 12 Jun 2022 19:33:56 +0200
Binary: libvarnishapi-dev libvarnishapi3 libvarnishapi3-dbgsym varnish varnish-dbgsym varnish-doc
Source: varnish
Architecture: all amd64 source
Version: 7.1.0-4
Distribution: experimental
Urgency: medium
Maintainer: Varnish Package Maintainers <team+varnish-team@tracker.debian.org>
Changed-By: Stig Sandbeck Mathisen <ssm@debian.org>
Closes: 1010582
Description:
 libvarnishapi-dev - development files for Varnish
 libvarnishapi3 - shared libraries for Varnish
 varnish    - state of the art, high-performance web accelerator
 varnish-doc - documentation for Varnish Cache
Changes:
 varnish (7.1.0-4) experimental; urgency=medium
 .
   * New upstream release (Closes: #1010582)
   * Bump soname for libvarnishapi
   * Depend on libpcre2-dev instead of libpcre3-dev
   * Drop superflous file patterns from debian/copyright
   * Update lintian overrides for embedded, modified zlib
   * Update lintian overrides for compiled javascript included in the
     documentation source tarball
Checksums-Sha1:
 5251d9f96cd1816467822584727e97321523eb5b 2519 varnish_7.1.0-4.dsc
 f678f15f3b4eab0a5663e3878955a72bf4fe0957 3787588 varnish_7.1.0.orig.tar.gz
 b9143c31a74e98b7cdf5b293c83130e24172b759 24044 varnish_7.1.0-4.debian.tar.xz
 ba3f7a102b713463afbbbed5ab66fdf596124570 182820 libvarnishapi-dev_7.1.0-4_amd64.deb
 055ca6ac7b0a6f581966bd4657b77b928b5cb480 233692 libvarnishapi3-dbgsym_7.1.0-4_amd64.deb
 a680c4fa49820f7e9a12e38473b53755b73e479b 177388 libvarnishapi3_7.1.0-4_amd64.deb
 53b6b5f9555277cc8a876b6317e97b501cc69825 2055576 varnish-dbgsym_7.1.0-4_amd64.deb
 fa5fb06d7a43680de3b7cb3b97aaaa3cddd569bd 818120 varnish-doc_7.1.0-4_all.deb
 041e0d9c6a63391e9986db5cbd2133fc7628b984 10698 varnish_7.1.0-4_amd64.buildinfo
 9747bd95e67d22f5f49b769434208c3d75f12a82 1047524 varnish_7.1.0-4_amd64.deb
Checksums-Sha256:
 45cb65838a38d2343652dac7b68bced963b318dad786f9859063abd43bef69ca 2519 varnish_7.1.0-4.dsc
 f54ab88685667664e5b3c39eb56ac8c624b6c1093436a7f8c555491144c69eba 3787588 varnish_7.1.0.orig.tar.gz
 dacfd3637989e3e04fbc2cb8db0fd7f6d02b03aa903116f96f6986f48227c6e4 24044 varnish_7.1.0-4.debian.tar.xz
 183ae566171c6270d201a254c191553b2acb406150cbe2357ff9f95110580021 182820 libvarnishapi-dev_7.1.0-4_amd64.deb
 691bd4251fb5b37822017a3b91231c842983833bbca204b6e11cd8a9cac4e26e 233692 libvarnishapi3-dbgsym_7.1.0-4_amd64.deb
 92381d123dd7d4897a52007dc3cc5876379cfeb62099b888d0f7bbbe7352faa2 177388 libvarnishapi3_7.1.0-4_amd64.deb
 099913621d22507ccfd6894ee1809b4f0ced0f59df1052278ab11c65047a9a9c 2055576 varnish-dbgsym_7.1.0-4_amd64.deb
 bc3380a42109b9e740df61184958f0aea820ec6eefa7c4499e2297a559ac7ff6 818120 varnish-doc_7.1.0-4_all.deb
 bb47a629a24d1fc893678c2fb90eb411d6e3b6e019665c7e915281f7f2d2cb61 10698 varnish_7.1.0-4_amd64.buildinfo
 e00ee2dff55599ebc8725b9e84e77a1337e884828b99af1fb639747e124c101a 1047524 varnish_7.1.0-4_amd64.deb
Files:
 078528839b70844c633c38209686b941 2519 web optional varnish_7.1.0-4.dsc
 785f9b70632b25deab5b0f92cb7b4d1e 3787588 web optional varnish_7.1.0.orig.tar.gz
 738e5c9c0a1708f42eaea3f04d9ce41a 24044 web optional varnish_7.1.0-4.debian.tar.xz
 9387c64e630e5721317bfa9a4feebd19 182820 libdevel optional libvarnishapi-dev_7.1.0-4_amd64.deb
 92c7243bfbc33c116cca2c926b5d1cbd 233692 debug optional libvarnishapi3-dbgsym_7.1.0-4_amd64.deb
 54fbbcffb60b0cdfb2bb7410ec74d8d9 177388 libs optional libvarnishapi3_7.1.0-4_amd64.deb
 c2485c8b9d5924fc86a4da867c7387f6 2055576 debug optional varnish-dbgsym_7.1.0-4_amd64.deb
 386e3a277f120f7c7a7a2e986d7995a6 818120 doc optional varnish-doc_7.1.0-4_all.deb
 819cf9dd3a8630e5055101192aa614f4 10698 web optional varnish_7.1.0-4_amd64.buildinfo
 cfc626316ddc2e7acf3f279538737f4d 1047524 web optional varnish_7.1.0-4_amd64.deb
-----BEGIN PGP SIGNATURE-----
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=Si4q
-----END PGP SIGNATURE-----

We believe that the bug you reported is fixed in the latest version of
varnish, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1010582@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Stig Sandbeck Mathisen <ssm@debian.org> (supplier of updated varnish package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Wed, 15 Jun 2022 21:16:48 +0200
Binary: libvarnishapi-dev libvarnishapi3 libvarnishapi3-dbgsym varnish varnish-dbgsym varnish-doc
Source: varnish
Architecture: all amd64 source
Version: 7.1.0-5
Distribution: unstable
Urgency: medium
Maintainer: Varnish Package Maintainers <team+varnish-team@tracker.debian.org>
Changed-By: Stig Sandbeck Mathisen <ssm@debian.org>
Closes: 1010582
Description:
 libvarnishapi-dev - development files for Varnish
 libvarnishapi3 - shared libraries for Varnish
 varnish    - state of the art, high-performance web accelerator
 varnish-doc - documentation for Varnish Cache
Changes:
 varnish (7.1.0-5) unstable; urgency=medium
 .
   * New upstream release (Closes: #1010582)
   * Bump soname for libvarnishapi
   * Depend on libpcre2-dev instead of libpcre3-dev
   * Drop superfluous file patterns from debian/copyright
   * Update lintian overrides for embedded, modified zlib
   * Update lintian overrides for compiled javascript included in the
     documentation source tarball
Checksums-Sha1:
 b3837c8a98081c2493cbcb7e97bde2a6a3d5056e 2519 varnish_7.1.0-5.dsc
 a28a7644f0bdcd82f1741012635f5dc73f67c5d1 24040 varnish_7.1.0-5.debian.tar.xz
 57ab3d8e5132e1a263e6b82b6451a45b766dcc67 182808 libvarnishapi-dev_7.1.0-5_amd64.deb
 8dd0ca18ece9704599307d2a06cc4618744f8cb6 233684 libvarnishapi3-dbgsym_7.1.0-5_amd64.deb
 3b60487943e0617ae27a45df720817bcd6fdb377 177364 libvarnishapi3_7.1.0-5_amd64.deb
 287769146c3dd497f33eb29594d1a6dc1ef6fc10 2055684 varnish-dbgsym_7.1.0-5_amd64.deb
 9daf23615bab62e67e66c2926bdb62e54df41a09 818124 varnish-doc_7.1.0-5_all.deb
 8585d17167219e806ecc91ae5085a4afb815c377 10701 varnish_7.1.0-5_amd64.buildinfo
 47bc09c91a76bb577cd2bf6adc4882a3761b8531 1047040 varnish_7.1.0-5_amd64.deb
Checksums-Sha256:
 462323f09eabc166d3a4299ea05696993a21bbab7a5a88e75324c6ebf357b83a 2519 varnish_7.1.0-5.dsc
 cf9f97b4a5a588088e0a7396a88c8b9bc0cc19a05d3871761f3d0ca90a6acb70 24040 varnish_7.1.0-5.debian.tar.xz
 4755affd4eb7630aff8b471544c827ef1b879d35092c145c022f297996d79f9c 182808 libvarnishapi-dev_7.1.0-5_amd64.deb
 c414806b15ca568cdb7acb0dd401bfcc1ace33935bbb0fd81201234db948665f 233684 libvarnishapi3-dbgsym_7.1.0-5_amd64.deb
 c8e1907abd0dfcd8598b4f05623f7a0286bdffdc5ba01d7951a7305bc8ce76b1 177364 libvarnishapi3_7.1.0-5_amd64.deb
 dc887593210fb3000cafd3b70a39b32e79b93b3380976f5324cbdd53a34431bd 2055684 varnish-dbgsym_7.1.0-5_amd64.deb
 29d247c4c937ca26154acce9e44ce96e8331a944ae8d3f7e704104c46e074fe4 818124 varnish-doc_7.1.0-5_all.deb
 0428a79cc0efe49e814f561c1b7a62960fb78f7a9cc09c8668a657867e0ef94b 10701 varnish_7.1.0-5_amd64.buildinfo
 900c2b8cdff2a2c368edcdf5a407e42936783cfb84820f057019e1270063b92e 1047040 varnish_7.1.0-5_amd64.deb
Files:
 681832013eea06a429895b53b2feba80 2519 web optional varnish_7.1.0-5.dsc
 95326c9a40b705dac20120bf228381ad 24040 web optional varnish_7.1.0-5.debian.tar.xz
 7ed64c8aedbb8797c601535539f5c1bf 182808 libdevel optional libvarnishapi-dev_7.1.0-5_amd64.deb
 4e6377b74d029e83232e1158e5c4d75a 233684 debug optional libvarnishapi3-dbgsym_7.1.0-5_amd64.deb
 4c6d67a43344ee10b3b1207be7cd7a43 177364 libs optional libvarnishapi3_7.1.0-5_amd64.deb
 118a4338bf4c0cb5d96f9aec12607ca2 2055684 debug optional varnish-dbgsym_7.1.0-5_amd64.deb
 8b250f888cf2d38e1ab49978352e3bc9 818124 doc optional varnish-doc_7.1.0-5_all.deb
 67919cedd351f9f02858c4d2658f1e2c 10701 web optional varnish_7.1.0-5_amd64.buildinfo
 f10599818fddf1ed57f026d38891bd2c 1047040 web optional varnish_7.1.0-5_amd64.deb
-----BEGIN PGP SIGNATURE-----

iQJDBAEBCgAtFiEEeZ5n7uInSAMeBaLcfbqVjBwFVTgFAmKqMowPHHNzbUBkZWJp
YW4ub3JnAAoJEH26lYwcBVU4DVMP/jJ7PTpvoG9EZ4+Hf8vK5lYrd6jA6m/CZ7Sh
DcFaCmo6ywFD+n7a+plN459klTnOmeK9HE/FX3bNX5F0pmR0qtSlCmrQkcXe1wyA
5Umqh/mROKOGxi2/5jfGLA6q8f1K7OMmP/sWtAayNWpS6CXoEHvIg8GX0u7KPQiX
mnjZzmtxtnnpmNT3AVsoQD19yqs1ysNreNQdyrY0oVQT3jLuXA7Ut9mSfIkB5+fv
yqYwoZAYQxd3a6KQDSGXS/Ua+nG2cq41CqIECkoALCIK/qVDGmLkdfdoK7c8GUl5
orFJ3s+/et2J5XOzsCE8JWgEPeKGir0Yx1e+sp8NUPCheifBPB1urPhrt3JYTSbT
Rf1kpfRWSXJp2+IohpNuaYw92vquVBtWcIpL4lWQ8C2XCW9F/sdt4bMNfp3/8Amj
CKvRDiC5US4C+EqF/y+1mFTMpVP7hOAs2mqsp0UYiK9yMLrXJUbZaY/G6sB+mDQd
cm++4aI3PZouAMrL63wjnyfhpACUGkOZ8nWXUZf8ZaorMOGAK+o9hOinRahbnKoE
bwCVEeqZdS88CWGpSTbmq2T9AgjrHob3epGtVPzaFhnylL2wzZqvRBEFBQg58R2i
ORocH8N6FwSeZtpfBxRa6Mftmu48u0Hpfc2swWJizTt21HNRmoD3pO02znmzpOJ+
1nqO8awj
=F9Wl
-----END PGP SIGNATURE-----