v1.1.1

Changes

• Upgrade Varnish Cache from version 6.0.11 to 6.0.13 with security fixes for:
  • VSV00013 Varnish HTTP/2 Rapid Reset Attack
  • VSV00014 Varnish HTTP/2 Broke Window Attack

Usage

- name: "varnish"
  version: "1.1.1"
  url: "https://bosh.io/d/github.com/springernature/varnish-boshrelease?v=1.1.1"
  sha1: "33ff9f9b84e28183522dfa0c816a3ea23eb73b0b"

v1.1.0

Changes

• Add support for Ubuntu Jammy stemcells
• Upgrade Varnish Cache from version 6.0.10 to 6.0.11: VSV00011 Varnish HTTP/2 Request Forgery Vulnerability

Usage

- name: "varnish"
  version: "1.1.0"
  url: "https://bosh.io/d/github.com/springernature/varnish-boshrelease?v=1.1.0"
  sha1: "815f956554f9dd387102d28f592216129cb26ebf"

v1.0.1

Changes

Upgrade Varnish Cache from version 6.0.9 to 6.0.10: VSV00008 Varnish HTTP/1 Request Smuggling Vulnerability

Usage

releases:
- name: "varnish"
  version: "1.0.1"
  url: "https://bosh.io/d/github.com/springernature/varnish-boshrelease?v=1.0.1"
  sha1: "31fc780aeff4294259d37fa3c65bd7a5ade05a31"

v1.0.0

Initial Release

BOSH release for deploying Varnish. This release is "production-ready", it packages the latest version (6.0.9) of the Varnish 6.0 LTS branch.

Packaged Versions

• autoconf: 2.69
• automake: 1.15.1
• libedit: 20210910-3.1
• libtool: 2.4.6
• ncurses: 6.3
• pkg-config: 0.29.2
• pip: 20.3.4
• jemalloc: 5.2.1
• pcre: 8.45
• varnish: 6.0.9
• varnish-modules: 0.15.1

Deployment

releases:
- name: varnish
  version: 1.0.0
  url: https://github.com/springernature/varnish-boshrelease/releases/download/v1.0.0/varnish-1.0.0.tgz
  sha1: 82e832d6d74ea6d1dc9456bbf813a977c6705939