2021¶

News archive of the year 2021¶

Varnish 6.0.9 is released¶

2021-11-24

Varnish 6.0.9 has been released and can be found here: Varnish Cache 6.0.9

This maintenance release is recommended for all users of the 6.0 LTS and contains several bug fixes.

Varnish 7.0.1 is released¶

2021-11-23

Varnish 7.0.1 has been released and can be found here: Varnish Cache 7.0.1

This is a maintenance release to correct some bugs that got into the 7.0.0 release.

Varnish 7.0.0 is released¶

2021-09-15

Our bi-annual “fresh” release is here: Varnish Cache 7.0.0

The 6.5 series is no longer supported in any capacity.

(The 2022-03-15 release is likely to be 8.0.0)

Open Source parallel ESI for varnish-cache¶

2021-08-17

https://code.uplex.de/uplex-varnish/libvdp-pesi

https://gitlab.com/uplex/varnish/libvdp-pesi (mirror)

we have released a Varnish Delivery Processor (VDP) for parallel ESI processing, which can deliver relevant speedups where portions of ESI-processed objects are not served from cache.

Read The pESI Announcement for more details.

HTTP/2 Request Smuggling Vulnerability¶

2021-07-13

All supported versions of Varnish suffer from a request smuggling vulnerability when the HTTP/2 support is enabled. Please see VSV00007 Varnish HTTP/2 Request Smuggling Attack for more information.

Security releases: 6.0.8, 6.6.1 and 6.5.2¶

2021-07-13

Varnish versions 6.0.8, 6.6.1 and 6.5.2 are now available. These releases fix the vulnerability described in VSV00007.

Varnish 6.0.8 is released¶

2021-07-13

We are happy to announce the release of Varnish Cache 6.0.8.

This combined maintenance and security release is recommended for all users of the 6.0 LTS and contains several bug fixes, improvements and new features. More information is available in the Change log

Denial of Service in varnish-modules¶

2021-03-16

Some versions of the separate varnish-modules bundle allow for a potential denial of service attack when the header.append() or header.copy() functions are used.

Please see VSV00006 varnish-modules Denial of Service.

Varnish 6.6.0 is released¶

2021-03-15

Our bi-annual “fresh” release is here: Varnish Cache 6.6.0

(The 2021-09-15 release is likely to be 7.0.0)