Debian Patches

Status for varnish/7.1.1-2+deb12u1

Patch Description Author Forwarded Bugs Origin Last update
Add-all-well-known-headers-to-the-perfect-hash-looku.patch Add all well-known headers to the perfect hash lookup table
This expands the perfect hash lookup table to be able to match any entry
in the list of well-known headers from tbl/http_headers.h.

Previously only the headers that had a non-zero filter flag section was
kept in the fast match table.
Martin Blix Grydeland <martin@varnish-software.com> no debian https://github.com/varnishcache/varnish-cache/commit/fcf5722af75fdbf58dd425dd68d0beaa49bab4f4 2022-09-29
hpack-fix-pseudo-headers-handling.patch hpack: fix pseudo-headers handling
We should apply the same restrictions on the list of allowed characters inside
H/2 pseudo-headers as we do for H/1. This error is translated into the
headers we send to a backend over H/1.

Failure to do so could permit various exploits against a backend not handling
malformed H/1 requests.
Asad Sajjad Ahmed <asadsa@varnish-software.com> no debian https://github.com/varnishcache/varnish-cache/commit/515a93df894430767073ccd8265497b6b25b54b5 2022-09-30
0001-req_fsm-Close-the-connection-on-a-malformed-request.patch req_fsm: Close the connection on a malformed request Dag Haavi Finstad <daghf@varnish-software.com> no 2025-01-10
fix_vsv16 Dridi Boukelmoune (2):
v1f: Parse CRLF separately from other white space
vtc: Test coverage for VSV17

Nils Goroll (3):
Rename v1f_* pull callbacks for consistency
v1f: Read end-of-chunk as part of the chunk
v1f: pull chunk header parsing into an own function

Poul-Henning Kamp (1):
(SP|TAB) is rightfully called OWS in RFC7230
no

All known versions for source package 'varnish'

Links