CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

www/varnish77.7.3_1

High-performance HTTP accelerator

Maintainer
dbaio@FreeBSD.org
Packages
varnish7 7.7.3_1
Upstream
Higher version available: 9.1.0
CPE
varnish_cache_project:varnish_cache from the port
WWW
https://varnish-cache.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (1) · listed, port not fixed yet

Fixed (10)

Show 10 fixed
VuXML entries whose affected range this version has left, plus CVEs whose record still lists this version although VuXML considers them fixed (usually a backported fix).
CVE-2023-444877.52023-10-10VuXML · The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in Aug…

Commits (24)

Bernhard Froehlich (decke) · 7.7.3_1
www/varnish7: Fix deprecated CPE_VENDOR
89aec59961
Ryan Steinmetz (zi) · 7.7.3_1
www/varnish7: Backport HTTP2 fix, bump PORTREVISION

Approved by:	dbaio@
Obtained from:	upstream
Security:	0f4bb64-52c6-11f1-a1c0-0050569f0b83
a11e56e77d
Ryan Steinmetz (zi) · 7.7.3
www/varnish7: Update to 7.7.3

Approved by:	maintainer (privately)
716963a8e3
Ryan Steinmetz (zi) · 7.7.2
www/varnish7: Update to 7.7.2

Approved by:	maintainer (privately)
Security:	e2d49973-785a-11f0-a1c0-0050569f0b83
f171e96dcb
Danilo G. Baio (dbaio) · 7.7.1
www/varnish7: Update to 7.7.1, Fix vulnerability

Release notes:	https://varnish-cache.org/releases/rel7.7.0.html
	 https://varnish-cache.org/releases/rel7.7.1.html

PR:		286338
PR:		287077
Security:	89c668d5-2f80-11f0-9632-641c67a117d8

Co-authored-by:	Danilo G. Baio <dbaio@FreeBSD.org>
46f9b9d693
Danilo G. Baio (dbaio) · 7.6.2
www/varnish7: Update to 7.6.2, Fix vulnerability

Release notes:	https://varnish-cache.org/releases/rel7.6.2.html#rel7-6-2
Security:	26f6733d-06a9-11f0-ba0b-641c67a117d8
64661d1906
Danilo G. Baio (dbaio) · 7.6.1
www/varnish7: Update to 7.6.1

Release notes:	https://varnish-cache.org/releases/rel7.6.0.html
a36cd0f7cb
Danilo G. Baio (dbaio) · 7.5.0
www/varnish7: Update to 7.5.0

Release notes:	https://varnish-cache.org/releases/rel7.5.0.html
54b3d2489c
Nuno Teixeira (eduardo) · 7.4.3_1
www/varnish7: Move man pages to share/man

Approved by:	portmgr (blanket)
1cf1be5e5b
Ryan Steinmetz (zi) · 7.4.3
www/varnish7: Update to 7.4.3, fix vulnerability

Release notes:	https://varnish-cache.org/security/VSV00014.html#vsv00014
Security:	05b7180b-e571-11ee-a1c0-0050569f0b83
Approved by:	dbai@ (maintainer)
9747ca2496
Danilo G. Baio (dbaio) · 7.4.2
www/varnish7: Update to 7.4.2, Fix vulnerability

Release notes:	https://varnish-cache.org/releases/rel7.4.2.html#rel7-4-2
Security:	f25a34b1-910d-11ee-a1a2-641c67a117d8
8a63ecc2d7
Danilo G. Baio (dbaio) · 7.4.1
www/varnish7: Update to 7.4.1

Release notes: https://varnish-cache.org/releases/rel7.4.0.html
               https://varnish-cache.org/releases/rel7.4.1.html
845bfaf9d6
Ryan Steinmetz (zi) · 7.3.0_1
www/varnish7: Merge in fix for github issue #3911 to fix double slash issue

- Bump PORTREVISION

Approved by:	maintainer (dbaio)
Obtained from:	Upstream commit de11d7d9e898a5668d3d5dc9e7eb55fc826b40da
e60ac1d2d4
Rene Ladan (rene) · 7.3.0
all: remove explicit versions in USES=python for "3.x+"

The logic in USES=python will automatically convert this to 3.8+ by
itself.

Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.

finance/quickfix: mark BROKEN with PYTHON

libtool: compile:  c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp  -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
          ^~~~~~~~~~
1 warning and 1 error generated.

Reviewed by:	portmgr, vishwin, yuri
Differential Revision:	<https://reviews.freebsd.org/D40568>
3d9a815d9c
Danilo G. Baio (dbaio) · 7.3.0
www/varnish7: Update to 7.3.0

Release notes: https://varnish-cache.org/releases/rel7.3.0.html
4150b7243a
Dimitry Andric (dim) · 7.2.1
www/varnish7: fix build with clang 15

During an exp-run for llvm 15 (see bug 265425), it turned out that
www/varnish7 failed to build with clang 15:

  adler32.c:189:15: error: a function definition without a prototype is deprecated in all versions of C and is not supported in C2x [-Werror,-Wdeprecated-non-prototype]
  uLong ZEXPORT adler32(adler, buf, len)
                ^

This is because varnish needlessly builds with -Werror. Turn it off, so
the warnings can simply be ignored.

PR:		268814
Approved by:	dbaio (maintainer)
MFH:		2023Q1
986c668ac6
Danilo G. Baio (dbaio) · 7.2.1
www/varnish7: Update to 7.2.1, Fix security issues

Release notes: https://varnish-cache.org/releases/rel7.2.1.html#rel7-2-1
aef95d69c7
Daniel Engberg (diizzy) · 7.2.0
www/varnish7: Use upstream release archive and some improvements to port

- Use upstream release archive as recommended by USE_GITHUB section
  in Porters Handbook
- Remove USES= compiler as there's no need to modify configure script
- Remove unneeded gmake and readline dependency definitions
- Use USES= localbase instead of CFLAGS variable
- Remove REINPLACE_CMD for GCC
- Rearrange Makefile to follow Porters Handbook more closely and
  improve readability

PR:		266467
Reviewed by:	dbaio (maintainer)
efcf58c686
Danilo G. Baio (dbaio) · 7.2.0
www/varnish7: Update to 7.2.0

Release notes: https://varnish-cache.org/releases/rel7.2.0.html
db8c98e4bc
Stefan Eßer (se) · 7.1.1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 7.1.1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Danilo G. Baio (dbaio) · 7.1.1
www/varnish7: Update to 7.1.1, Fix vulnerability issue

Release notes: https://varnish-cache.org/releases/rel7.1.1.html#rel7-1-1
408f816fe9
Bernhard Froehlich (decke) · 7.1.0
www/varnish[4|6|7]: Chase deprecated CPE information

According to NIST CPE dictionary the old CPE varnish-cache:varnish
has been deprecated by varnish-cache:varnish_cache.

Approved by:	portmgr (blanket)
Obtained from:	https://nvd.nist.gov/products/cpe/detail/728797
4dbbcdb446
Danilo G. Baio (dbaio) · 7.1.0
www/varnish7: New port

Release Notes:	https://varnish-cache.org/releases/rel7.1.0.html#rel7-1-0
16970dde43