Varnish Cache 3.0.5 released

Tollef Fog Heen tfheen at
Mon Dec 2 14:12:35 CET 2013

It is my pleasure to announce the release of Varnish Cache 3.0.5. This
is a bugfix release which fixes amongst other errors CVE-2013-4484
where a malformed request and a particular configuration could cause
Varnish to crash.

Some other changes include:

* Fix bad interaction between -m, -c and -b for varnishlog.

* Prevent duplicate Content-Length headers being sent to clients when
  streaming is enabled.

* Stop printing ESI parse errors to stdout.

* Stop segfaulting if the first part of a synthetic page is NULL. 

A fuller list of changes is available from

Installation instructions and sources are available from

Tollef Fog Heen, on behalf of the Varnish team

More information about the varnish-announce mailing list