varnish 7.7.1

varnish.changes

@@ -1,3 +1,22 @@
+-------------------------------------------------------------------
+Thu May 15 05:19:43 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 7.7.1
+  * VSV-16: Resolve request smuggling attack
+
+-------------------------------------------------------------------
+Sun Apr 13 19:01:43 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 7.7.0
+  * The `linux` jail gained control of transparent huge pages
+    settings.
+  * An issue has been fixed which could cause a crash when varnishd
+    receives an invalid Content-Range header from a backend.
+  * Timestamping for HTTP/2 requests (when idle period begins) has
+    been switched to be more in line with HTTP/1.
+  * VSV-15: The client connection is now always closed when a
+    malformed request is received. [CVE-2025-30346, boo#1239892]
+
 -------------------------------------------------------------------
 Sat Oct  5 15:23:58 UTC 2024 - Andrea Manzini <andrea.manzini@suse.com>
 

varnish.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package varnish
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -25,7 +25,7 @@
 %define _fillupdir %_localstatedir/adm/fillup-templates
 %endif
 Name:           varnish
-Version:        7.6.0
+Version:        7.7.1
 Release:        0
 Summary:        Accelerator for HTTP services
 License:        BSD-2-Clause
@@ -160,8 +160,7 @@ fi
 %postun
 %service_del_postun varnish.service varnishlog.service
 
-%post   -n %library_name -p /sbin/ldconfig
-%postun -n %library_name -p /sbin/ldconfig
+%ldconfig_scriptlets -n %library_name
 
 %files
 %_unitdir/*.service