Varnish Cache 3.0.5 released

Tollef Fog Heen tfheen at varnish-software.com
Mon Dec 2 14:12:35 CET 2013


It is my pleasure to announce the release of Varnish Cache 3.0.5. This
is a bugfix release which fixes amongst other errors CVE-2013-4484
where a malformed request and a particular configuration could cause
Varnish to crash.

Some other changes include:

* Fix bad interaction between -m, -c and -b for varnishlog.

* Prevent duplicate Content-Length headers being sent to clients when
  streaming is enabled.

* Stop printing ESI parse errors to stdout.

* Stop segfaulting if the first part of a synthetic page is NULL. 

A fuller list of changes is available from
http://varnish-cache.org/trac/browser/doc/changes.rst

Installation instructions and sources are available from
https://www.varnish-cache.org/releases/varnish-cache-3.0.5

--
Tollef Fog Heen, on behalf of the Varnish team



More information about the varnish-announce mailing list