Subject: CVS commit: pkgsrc/www/varnish
From: Tobias Nygren
Date: 2021-07-19 14:47:31
Message id: 20210719124731.7C88DFA95@cvs.NetBSD.org
Log Message:
varnish: update to 6.6.1

CVE-2021-36740: request smuggling attack can be performed on Varnish Cache
and Varnish Cache Plus servers that have the HTTP/2 protocol enabled. The
smuggled requests do not go through normal VCL processing, and any
authorization steps implemented in VCL would be bypassed.
Files:
RevisionActionfile
1.32modifypkgsrc/www/varnish/Makefile
1.16modifypkgsrc/www/varnish/distinfo