%global _hardened_build 1

%global debug_package %{nil}

# https://github.com/varnishcache/varnish-cache/issues/2269

%global _use_internal_dependency_generator 0

%global __find_provides %{_builddir}/%{name}-%{version}/find-provides %__find_provides

# Package scripts are now external

# https://github.com/varnishcache/pkg-varnish-cache

%global commit1 0ad2f22629c4a368959c423a19e352c9c6c79682

%global shortcommit1 %(c=%{commit1}; echo ${c:0:7})

%bcond_without python2

%bcond_with python3

%if %{with python2} == %{with python3}

%error Pick exactly one Python version

%endif

Summary: High-performance HTTP accelerator

Name: varnish

Version: 6.0.8

Release: 1%{?dist}.1

License: BSD

Group: System Environment/Daemons

URL: https://www.varnish-cache.org/

Source0: http://varnish-cache.org/_downloads/%{name}-%{version}%{?vd_rc}.tgz

Source1: https://github.com/varnishcache/pkg-varnish-cache/archive/%{commit1}.tar.gz#/pkg-varnish-cache-%{shortcommit1}.tar.gz

Patch1:  varnish-5.1.1.fix_ld_library_path_in_doc_build.patch

Patch4:  varnish-4.0.3_fix_varnish4_selinux.el6.patch

Patch9:  varnish-5.1.1.fix_python_version.patch

# https://github.com/varnishcache/varnish-cache/commit/5220c394232c25bb7a807a35e7394059ecefa821#diff-2279587378a4426edde05f42e1acca5e

Patch11: varnish-6.0.0.fix_el6_fortify_source.patch

# https://bugzilla.redhat.com/show_bug.cgi?id=2045031

Patch100: varnish-6.0.8.CVE-2022-23959.patch

Obsoletes: varnish-libs

%if %{with python3}

BuildRequires: python3, python3-sphinx, python3-docutils

%else

%if 0%{?rhel} >= 6

BuildRequires: python-sphinx

%endif

BuildRequires: python-docutils

%endif

BuildRequires: libedit-devel

BuildRequires: ncurses-devel

BuildRequires: pcre-devel

BuildRequires: pkgconfig

BuildRequires: gcc

BuildRequires: make

BuildRequires: graphviz

BuildRequires: nghttp2

%if 0%{?rhel} == 6

BuildRequires: selinux-policy

%endif

Requires: logrotate

Requires: ncurses

Requires: pcre

Requires: redhat-rpm-config

Requires(pre): shadow-utils

Requires(post): /usr/bin/uuidgen

# Varnish actually needs gcc installed to work. It uses the C compiler 

# at runtime to compile the VCL configuration files. This is by design.

Requires: gcc

%if 0%{?fedora} >= 17 || 0%{?rhel} >= 7

Requires(post): systemd-units

Requires(post): systemd-sysv

Requires(preun): systemd-units

Requires(postun): systemd-units

BuildRequires: systemd-units

%endif

%if 0%{?rhel} == 6

Requires: %{name}-selinux

Requires(post): policycoreutils, 

Requires(preun): policycoreutils

Requires(postun): policycoreutils

Requires(post): /sbin/chkconfig

Requires(preun): /sbin/chkconfig

Requires(preun): /sbin/service

%endif

%description

This is Varnish Cache, a high-performance HTTP accelerator.

Varnish Cache stores web pages in memory so web servers don’t have to

create the same web page over and over again. Varnish Cache serves

pages much faster than any application server; giving the website a

significant speed up.

Documentation wiki and additional information about Varnish Cache is

available on: https://www.varnish-cache.org/

%package devel

Summary: Development files for %{name}

Group: Development/Libraries

BuildRequires: ncurses-devel

Provides: varnish-libs-devel = %{version}-%{release}

Obsoletes: varnish-libs-devel

%if %{with python2}

Requires: python

%endif

Requires: %{name} = %{version}-%{release}

%description devel

Development files for %{name}

Varnish Cache is a high-performance HTTP accelerator

%package docs

Summary: Documentation files for %name

Group: Documentation

%description docs

Documentation files for %name

%if 0%{?rhel} == 6

%package selinux

Summary: Minimal selinux policy for running varnish

Group:   System Environment/Daemons

%description selinux

Minimal selinux policy for running varnish4

%endif

%prep

%setup -q -n varnish-%{version}%{?vd_rc}

tar xzf %SOURCE1

ln -s pkg-varnish-cache-%{commit1}/redhat redhat

ln -s pkg-varnish-cache-%{commit1}/debian debian

cp redhat/find-provides .

%if 0%{?rhel} == 6

cp pkg-varnish-cache-%{commit1}/sysv/redhat/* redhat/

sed -i '8 i\RPM_BUILD_ROOT=%{buildroot}' find-provides

%endif

%patch1 -p1

%if 0%{?rhel} == 6

%patch4 -p0

%patch9 -p0

%patch11 -p0

%endif

%patch100 -p1

%build

%if 0%{?rhel} == 6

export CFLAGS="%{optflags} -fPIC"

export LDFLAGS=" -pie"

%endif

# https://gcc.gnu.org/wiki/FAQ#PR323

%ifarch %ix86

%if 0%{?fedora} > 21

export CFLAGS="%{optflags} -ffloat-store -fexcess-precision=standard"

%endif

%if 0%{?rhel} >= 6

export CFLAGS="%{optflags} -fPIC -ffloat-store"

%endif

%endif

# Man pages are prebuilt. No need to regenerate them.

export RST2MAN=/bin/true

%configure --disable-static \

  --with-jemalloc=no \

  --localstatedir=/var/lib  \

  --docdir=%{?_pkgdocdir}%{!?_pkgdocdir:%{_docdir}/%{name}-%{version}}

#ifarch x86_64 #arm

#  --disable-pcre-jit \

#endif

# We have to remove rpath - not allowed in Fedora

# (This problem only visible on 64 bit arches)

sed -i 's|^hardcode_libdir_flag_spec=.*|hardcode_libdir_flag_spec=""|g;

        s|^runpath_var=LD_RUN_PATH|runpath_var=DIE_RPATH_DIE|g' libtool

# I'll never understand libtool

mkdir lib/libvarnishapi/.libs

pushd lib/libvarnishapi/.libs

ln -s libvarnishapi.so libvarnishapi.so.1

popd

# Upstream github issue #2265

%if 0%{?rhel} == 6 

sed -i 's/-Werror$//g;' bin/varnishd/Makefile

sed -i 's/-Werror$//g;' lib/libvarnishapi/Makefile

%endif

make %{?_smp_mflags} V=1 

# One varnish user is enough

sed -i 's,User=varnishlog,User=varnish,g;' redhat/varnishncsa.service

# Explicit python, please

%if %{with python2}

sed -i 's/env python3/python2/g;' lib/libvcc/vmodtool.py lib/libvcc/vsctool.py

%else

sed -i 's/env python3/python3/g;' lib/libvcc/vmodtool.py lib/libvcc/vsctool.py

%endif

# Clean up the html documentation

rm -rf doc/html/_sources

%check

%ifarch ppc64 ppc64le aarch64

sed -i 's/48/128/g;' bin/varnishtest/tests/c00057.vtc

%endif

#make %{?_smp_mflags} check LD_LIBRARY_PATH="%{buildroot}%{_libdir}:%{buildroot}%{_libdir}/%{name}" VERBOSE=1

%install

rm -rf %{buildroot}

make install DESTDIR=%{buildroot} INSTALL="install -p"

# None of these for fedora

find %{buildroot}/%{_libdir}/ -name '*.la' -exec rm -f {} ';'

mkdir -p %{buildroot}/var/lib/varnish

mkdir -p %{buildroot}/var/log/varnish

mkdir -p %{buildroot}/var/run/varnish

mkdir -p %{buildroot}%{_sysconfdir}/ld.so.conf.d/

install -D -m 0644 etc/example.vcl %{buildroot}%{_sysconfdir}/varnish/default.vcl

install -D -m 0644 redhat/varnish.logrotate %{buildroot}%{_sysconfdir}/logrotate.d/varnish

install -D -m 0644 include/vcs_version.h %{buildroot}%{_includedir}/varnish

install -D -m 0644 include/vrt.h %{buildroot}%{_includedir}/varnish

# systemd support

%if 0%{?fedora} >= 17 || 0%{?rhel} >= 7

mkdir -p %{buildroot}%{_unitdir}

install -D -m 0644 redhat/varnish.service %{buildroot}%{_unitdir}/varnish.service

install -D -m 0644 redhat/varnishncsa.service %{buildroot}%{_unitdir}/varnishncsa.service

# default is standard sysvinit

%else

install -D -m 0644 redhat/varnish.sysconfig %{buildroot}%{_sysconfdir}/sysconfig/varnish

install -D -m 0755 redhat/varnish.initrc %{buildroot}%{_initrddir}/varnish

install -D -m 0755 redhat/varnishncsa.initrc %{buildroot}%{_initrddir}/varnishncsa

%endif

install -D -m 0755 redhat/varnishreload %{buildroot}%{_sbindir}/varnishreload

echo %{_libdir}/varnish > %{buildroot}%{_sysconfdir}/ld.so.conf.d/varnish-%{_arch}.conf

# No idea why these ends up with mode 600 in the debug package

chmod 644 lib/libvmod_*/*.c

chmod 644 lib/libvmod_*/*.h

# selinux module for el6

%if 0%{?rhel} == 6

cd selinux

make -f %{_datadir}/selinux/devel/Makefile

install -p -m 644 -D varnish4.pp %{buildroot}%{_datadir}/selinux/packages/%{name}/varnish4.pp

%endif

%files

%{_sbindir}/*

%{_bindir}/*

%{_libdir}/*.so.*

%{_libdir}/varnish

%{_var}/lib/varnish

%attr(0700,varnish,varnish) %dir %{_var}/log/varnish

%{_mandir}/man1/*.1*

%{_mandir}/man3/*.3*

%{_mandir}/man7/*.7*

%license LICENSE

%doc README.rst ChangeLog

%doc etc/builtin.vcl etc/example.vcl

%dir %{_sysconfdir}/varnish/

%config(noreplace) %{_sysconfdir}/varnish/default.vcl

%config(noreplace) %{_sysconfdir}/logrotate.d/varnish

%config %{_sysconfdir}/ld.so.conf.d/varnish-%{_arch}.conf

# systemd from fedora 17 and rhel 7

%if 0%{?fedora} >= 17 || 0%{?rhel} >= 7

%{_unitdir}/varnish.service

%{_unitdir}/varnishncsa.service

# default is standard sysvinit

%else

%config(noreplace) %{_sysconfdir}/sysconfig/varnish

%{_initrddir}/varnish

%{_initrddir}/varnishncsa

%endif

%files devel

%license LICENSE

%doc README.rst

%{_libdir}/lib*.so

%{_includedir}/%{name}

%{_libdir}/pkgconfig/varnishapi.pc

%{_datadir}/%{name}

%{_datadir}/aclocal/*.m4

%files docs

%license LICENSE

%doc doc/html

%doc doc/changes*.html

%if 0%{?rhel} == 6

%files selinux

%{_datadir}/selinux/packages/%{name}/varnish4.pp

%endif

%pre

getent group varnish >/dev/null || groupadd -r varnish

getent passwd varnish >/dev/null || \

       useradd -r -g varnish -d /var/lib/varnish -s /sbin/nologin \

               -c "Varnish Cache" varnish

exit 0

%post

%if 0%{?fedora} >= 17 || 0%{?rhel} >= 7

%systemd_post varnish.service

# Other distros: Use chkconfig

%else

/sbin/chkconfig --add varnish

/sbin/chkconfig --add varnishncsa 

%endif

/sbin/ldconfig

# Previous versions had varnishlog and varnishncsa running as root

chown varnish:varnish /var/log/varnish/varnishncsa.log 2>/dev/null || true

test -f /etc/varnish/secret || (uuidgen > /etc/varnish/secret && chmod 0600 /etc/varnish/secret)

# selinux module for el6

%if 0%{?rhel} == 6

%post selinux

if [ "$1" -le "1" ] ; then # First install

semodule -i %{_datadir}/selinux/packages/%{name}/varnish4.pp 2>/dev/null || :

fi

%preun selinux

if [ "$1" -lt "1" ] ; then # Final removal

semodule -r varnish4 2>/dev/null || :

fi

%postun

%if 0%{?fedora} >= 18 || 0%{?rhel} >= 7

%systemd_postun_with_restart varnish.service

%endif

/sbin/ldconfig

%postun selinux

if [ "$1" -ge "1" ] ; then # Upgrade

semodule -i %{_datadir}/selinux/packages/%{name}/varnish4.pp 2>/dev/null || :

fi

%endif

%preun

%if 0%{?fedora} >= 18 || 0%{?rhel} >= 7

%systemd_preun varnish.service

%else

if [ $1 -lt 1 ]; then

  # Package removal, not upgrade

  %if 0%{?fedora} >= 17 || 0%{?rhel} >= 7

  /bin/systemctl --no-reload disable varnish.service > /dev/null 2>&1 || :

  /bin/systemctl stop varnish.service > /dev/null 2>&1 || :

  /bin/systemctl stop varnishncsa.service > /dev/null 2>&1 || :

  %else

  /sbin/service varnish stop > /dev/null 2>&1

  /sbin/service varnishncsa stop > /dev/null 2>%1

  /sbin/chkconfig --del varnish

  /sbin/chkconfig --del varnishncsa 

  %endif

fi

%endif

%changelog

* Tue Feb 01 2022 Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-1.1

- Resolves: #2047648 - CVE-2022-23959 varnish:6/varnish: Varnish HTTP/1 Request

  Smuggling Vulnerability

* Thu Jul 22 2021 Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-1

- new version 6.0.8

- Resolves: #1982862 - CVE-2021-36740 varnish:6/varnish: HTTP/2 request

  smuggling attack via a large Content-Length header for a POST request

* Tue Apr 14 2020 Lubos Uhliarik <luhliari@redhat.com> - 6.0.6-2

- new version 6.0.6

- Resolves: #1795673 - RFE: rebase varnish:6 to latest 6.0.x LTS

- Resolves: #1790907 - CVE-2019-20637 varnish: not clearing pointer between two

  client requests leads to information disclosure

- Resolves: #1763958 - CVE-2019-15892 varnish:6/varnish: denial of service 

  handling certain crafted HTTP/1 requests 

* Mon Oct 08 2018 Lubos Uhliarik <luhliari@redhat.com> - 6.0.2-1

- new version 6.0.2 (#1633338)

* Wed Aug 01 2018 Luboš Uhliarik <luhliari@redhat.com> - 6.0.0-3

- Resolves: #1591765 - varnish: Remove dependency on jemalloc

* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 6.0.0-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

* Wed Apr 25 2018 Ingvar Hagelund <ingvar@redpill-linpro.com> - 6.0.0-1

- New upstream release

- Added a patch that fixes _FORTIFY_SOURCE=2 on copr/el6

- Added a patch fixing compilation on epel6

- Fresh checkout of pkg-varnish-cache

- Updated find-requires sed fix to update variant and moved it to prep

- Removed -libs subpackage

- varnish_reload_vcl changed name to varnishreload, as in upstream

- varnish.params is gone. To override startup configuration,

  use /etc/systemd/system/varnish.service

- Dropped patch and sed fixes for find-provides, as it is fixed upstream

- Dropped patch for test vsv00002, as it is fixed upstream

- Droppet patch for python3, as it is included upstream

- Dropped buildreq on groff, as tarball includes prebuilt manpages

- Dropped systemv to systemd helpers

- Updated project url

- Use prebuilt html files for docs subpackage

- Dropped unnecessary explicit require of initscripts, closes #1592398

* Wed Mar 28 2018 Joe Orton <jorton@redhat.com> - 5.2.1-5

- add conditional build support for Python 3

* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 5.2.1-4.1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

* Thu Dec 21 2017 Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.2.1-4

- Disabled pcre-jit on x86_64 and arm in rawhide for now. It does not

  work, and makes other varnish dependant packages crash

  (upstream bug #2521)

* Thu Nov 16 2017 Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.2.1-3

- Disabled running make check again. Too many timing issues. All tests run

  successfully on all arches from time to time, but seldom in a single

  run while all redhat builders are loaded.

* Thu Nov 16 2017 Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.2.1-2

- Added patch for vsv00002 on ppc64[le]

- Added buildreq on nghttp2 for the test suite

* Wed Nov 15 2017 Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.2.1-1

- New upstream release. A security release

  Includes fix for CVE-2017-8807, closes 1512798, 1513523, 1513524

* Mon Oct 23 2017 Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.2.0-2

- Use ix86 macro for all ifarch matches of 32bit x86 hardware

- Added Makefile hack for el6 also to libvarnishapi

* Thu Oct 12 2017 Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.2.0-1

- New upstream release

* Fri Aug 04 2017 Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.1.3-2

- Disabled jemalloc on aarch64, as it fails reproducably

- Disabled running make check. Too many timing issues. All tests run

  successfully on all arches from time to time, but not in a single

  run.

* Thu Aug 03 2017 Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.1.3-1

- New upstream release, including fix for VSV00001

* Wed Aug 02 2017 Patrick Uiterwijk <patrick@puiterwijk.org> - 5.1.2-3

- Added patch for vsv00001

* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 5.1.2-1.1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

* Fri Apr 07 2017 Ingvar Hagelund <ingvar@redpill-linpro.com> 5.1.2-1

- New upstream release

- Updated pkg-varnish checkout to 5b97619, setting systemd memlock limit

  to actual 82MB, as it says in the comment

- Disabled stripping and building of debug packages, upstream issue #2269

* Thu Mar 16 2017 Ingvar Hagelund <ingvar@redpill-linpro.com> 5.1.1-1

- New upstream release

- Rebased patches for 5.1.1

- Removed patches merged upstream

- Pulled support for rhel5 and clones

- Updated pkg-varnish checkout to 92373fe

* Mon Feb 13 2017 Ingvar Hagelund <ingvar@redpill-linpro.com> 5.0.0-2

- Updated snapshot of pgk-varnish

- Added a patch for varnish_reload_vcl, fixes stricter vcl names 

* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 5.0.0-1.1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

* Wed Sep 14 2016 Ingvar Hagelund <ingvar@redpill-linpro.com> 5.0.0-1

- New upstream release: 5.0.0

- Rebased patches for 5.0.0

- Added patch from upstream fixing a h/2 bug visible on secondary arches

- New snapshot of pkg-varnish

- Some cosmetic changes to reduce the diff to the upstream specfile

- Renamed subpackage varnish-libs-devel to just varnish-devel

  (as in upstream)

- Removed varnishlog initrc and systemd start scripts, as in upstream

  (Nobody should run varnishlog as a daemon continously)

* Thu Sep 01 2016 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.3-5

- Changed ownership of varnishlog and varnishncsa logs, as previous

  versions have had them run as root

- Removed old outcommented config that is no longer in use

* Mon Aug 29 2016 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.3-4

- Removed out-commented stuff about building from git

- Removed out-commented sub package -libs-static

- Use user varnish also for varnishlog and varnishncsa (#1371181)

- Changed owner of /var/log/varnish, so varnishlog/ncsa can start (#1371181)

- Reduced the number of parallell checks, to not overflow the builders

* Fri Aug 05 2016 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.3-3

- Reduced the number of parallell checks ran by make, to reduce 

  stress on the builders

* Fri Aug 05 2016 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.3-2

- Added python2.4 fix for el5 to the fedora tree

* Thu Aug 04 2016 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.3-1

- New upstream release

- New snapshot of pkg-varnish, commit 4e27994

- README is now named README.rst

- Rebased Werror patch for el6

- vmod vcc files readable for all users

- set explicit python version in vmodtool.py

- Remove superflous Makefile.in.orig generated by patch

* Thu Mar 31 2016 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.2-2

- Added missing tarball for pkg-varnish

* Tue Mar 29 2016 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.2-1

- New upstream realease

- New checkout of pkg-varnish-cache from github

- Removed systemd patches now merged upstream

- Updated fix_python_24 patch for el5

- General i386 floating point precision fix (was fix for gcc6) now for more

  fedoras/el variants

* Mon Feb 29 2016 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.1-4

- Rebuilt against jemalloc-4.1.0-1

- fix for gcc6 now for fedora >23

* Thu Feb 04 2016 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.1-3

- Added "-ffloat-store -fexcess-precision=standard" to CFLAGS on i386

  to work around a bug in gcc6, see

  https://github.com/dhobsd/Varnish-Cache/commit/9f1035d 

- Quieted unpacking of distro package source

* Wed Feb 03 2016 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.1-2

- Added patch from upstream, daemonizing varnishd in systemd, as

  it handles SIGHUP otherwice when running foregrounded under systemd

* Fri Jan 29 2016 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.1-1

- New upstream release

- Rebased sphinx build patch

- Removed patch for dns corner case, it has been fixed upstream

- Removed patch for pcre madness test. It has been removed

- Added new source pkg-varnish-cache from github, replacing varnish-cache-redhat

- Also stop varnishlog and varnishncsa on package removal

- Removed redhat/README.rst. It is no longer included upstream

* Wed Oct 21 2015 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.0-2

- Moved LICENSE to license catalog for fedora and el7

* Fri Oct 09 2015 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.0-1

- New upstream release 4.1.0

- Changed buildreqs list to be one per line

- Skipped patches included upstream

- Rebased sphinx build patch

- Changed description to match upstream

- Added basic buildreqs gcc and make

- Included vcs_version.h and vrt.h to produce correct provides, even 

  when building in a non-standard buildroot

- Patched local find_provides similarily

- Added a couple of patches that adjusts test values for the koji 

  i686 and ppc64 build servers

- Added -fPIC and -pie for el6 rebuilds

- redhat subdir is now fetched from new upstream gitrepo

* Tue Sep 01 2015 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.3-6

- Rebuilt for jemalloc-4.0.0

* Wed Aug 26 2015 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.0-0.1.tp1

- Added patch for varnish unix-jail, instead of old-style -u user

* Fri Aug 21 2015 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.1.0-0.0.tp1

- New upstream tech preview release

- Removed patches included upstream

- Prebuild html docs now placed in doc dir already

* Fri Aug 21 2015 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.3-5

- Added example vcl files explicitly. They are installed by make, but

  have been removed by the cleaning of docroot in older rpmbuild. This makes

  varnish build again in rawhide

* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.0.3-4.1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Wed May 27 2015 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.3-4

- libs-devel package now requires python, closing #1225243

* Fri Mar 13 2015 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.3-3

- Added a patch fixing a crash on bogus content-length header,

  closing #1200034

* Fri Mar 06 2015 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.3-2

- Added selinux module for varnish4 on el6

* Thu Mar 05 2015 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.3-1

- New upstream release

- Removed systemd patch included upstream

- Rebased trivial Werr-patch for varnish-4.0.3

- Added patch to build on el5

* Tue Nov 25 2014 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.2-1

- New upstream release

- Rebased sphinx makefile patch

- Added systemd services patch from Federico Schwindt

* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.0.1-2.1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

* Wed Jul 30 2014 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.1-2

- Rebased patch for el6

* Wed Jul 30 2014 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.1-1 

- New upstream release 

- systemd support for rhel7 

- Dropped patches included upstream 

* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.0.0-3.1

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

* Wed Apr 23 2014 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.0-3

- Added a patch that fixes broken find_provides and hard coded provides

  from upstream

- Added _isa macro to the libs dependency and updated Group definitions to

  more modern tags, closes bz 1090196

- Added aclocal macros to libs-devel sub package

* Tue Apr 22 2014 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.0-2

- Use _pkgdocdir macro on fedora

* Fri Apr 11 2014 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.0-1

- New upstream release

- Updated patches to match new release

- Dropped patches included upstream

* Tue Apr 01 2014 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.0-0.4.beta1

- New upstream beta release

- Added a few patches from upstream git for building on ppc

* Wed Mar 12 2014 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.0-0.3.tp2+20140327

- Daily snapshot build

* Wed Mar 12 2014 Ingvar Hagelund <ingvar@redpill-linpro.com> 4.0.0-0.2.tp2+20140306

- First try on wrapping 4.0.0-tp2+ daily snapshot series

- Added the rc and __find_provides macros from upstream

- Added LD_LIBRARY_PATH fix for varnishd-to-sphinx doc thing

- Changed LD_LIBRARY_PATH for make check to something more readable

- etc/zope-plone.vcl is gone. example.vcl replaces default.vcl as example vcl doc

- Now using example.vcl for /etc/varnish/default.vcl

- Added docdir to configure call, to get example docs in the right place

- Systemd scripts are now upstream

- Added some explicit provides not found automatically

* Tue Dec 03 2013 Ingvar Hagelund <ingvar@redpill-linpro.com> 3.0.5-1

- New upstream release

- Dropped patch for CVE-2013-4484, as it's in upstream

* Thu Nov 21 2013 Ingvar Hagelund <ingvar@redpill-linpro.com> 3.0.4-2

- Changed default mask for varnish log dir to 700, closing #915413 

- Added a patch for CVE-2013-4484 from upstream, closing #1025128

* Mon Aug 12 2013 Ingvar Hagelund <ingvar@redpill-linpro.com> 3.0.4-1

- New upstream release

- Added libedit-devel to the build reqs

- Changed the old-style initrc sed patching to a blacklist as in upstream

- Some tab vs space cleanup to make rpmlint more happy

- Added requirement of redhat-rpm-config, which provides redhat-hardened-cc1,

  needed for _hardened_build, closes #975147

- Removed no-pcre patch, as pcre is now switched off by default upstream

* Sun Jul 28 2013 Dennis Gilmore <dennis@ausil.us> - 3.0.3-6

- no pcre jit on arm arches

* Wed May 15 2013 Ingvar Hagelund <ingvar@redpill-linpro.com> 3.0.3-5

- Added macro _hardened_build to enforce compiling with PIE, closes #955156

- moved ldconfig in postun script to a shell line, since the following lines

  may expand to more shell commands on fedora >=18

- Corrected some bogus dates in the changelog

* Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.0.3-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

* Tue Oct 09 2012 Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.0.3-3

- Upped the minimum number of threads from 1 to 5, closes #861493

* Tue Sep 18 2012 Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.0.3-2

- Added a patch from phk, fixing upstream ppc64 bug #1194

* Tue Aug 21 2012 Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.0.3-1

- New upstream release

- Remove unneeded hacks for ppc

- Remove hacks for rhel4, we no longer support that

- Remove unneeded hacks for docs, since we use the pregenerated docs

- Add new systemd scriptlets from f18+

- Added a patch switching off pcre jit on i386 and ppc to avoid upstream bug #1191 

* Sun Jul 22 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.0.2-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

* Mon Mar 12 2012 Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.0.2-2

- Added PrivateTmp=true to varnishd unit file, closing #782539

- Fixed comment typos in varnish unit file

* Tue Mar 06 2012 Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.0.2-1

- New upstream version 3.0.2

- Removed INSTALL as requested by rpmlint