From 56e140efc5a7fe4529b5010e529a3ee0bd7db912 Mon Sep 17 00:00:00 2001 From: Leona Maroni Date: Thu, 19 Mar 2026 17:10:18 +0100 Subject: [PATCH 1/3] varnish: migrate src to new url --- pkgs/servers/varnish/default.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkgs/servers/varnish/default.nix b/pkgs/servers/varnish/default.nix index d50f07e7001f..01a4ea97276e 100644 --- a/pkgs/servers/varnish/default.nix +++ b/pkgs/servers/varnish/default.nix @@ -31,7 +31,7 @@ let inherit version; src = fetchurl { - url = "https://varnish-cache.org/_downloads/${pname}-${version}.tgz"; + url = "https://vinyl-cache.org/_downloads/${pname}-${version}.tgz"; inherit hash; }; From 0ab20072e11449a0ecfcbfda342cc13bf40d2b28 Mon Sep 17 00:00:00 2001 From: Leona Maroni Date: Thu, 19 Mar 2026 17:10:18 +0100 Subject: [PATCH 2/3] varnish60: 6.0.16 -> 6.0.17 fixes VSV00018 --- pkgs/servers/varnish/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/servers/varnish/default.nix b/pkgs/servers/varnish/default.nix index 01a4ea97276e..4d0181c587ba 100644 --- a/pkgs/servers/varnish/default.nix +++ b/pkgs/servers/varnish/default.nix @@ -147,8 +147,8 @@ in { # EOL (LTS) TBA varnish60 = common { - version = "6.0.16"; - hash = "sha256-ZVJxDHp9LburwlJ1LCR5CKPRaSbNixiEch/l3ZP0QyQ="; + version = "6.0.17"; + hash = "sha256-CVmHd1hCDFE/WIZqjc1TfX1O2RqFetdNSO4ihmXoL5k="; }; # EOL 2026-03-15 varnish77 = common { From a4b3c2693d7ea501c3bcb36e5a473fb380410a2e Mon Sep 17 00:00:00 2001 From: Leona Maroni Date: Thu, 19 Mar 2026 17:10:18 +0100 Subject: [PATCH 3/3] varnish77: mark as vulnerable to VSV00018 https://vinyl-cache.org/security/VSV00018.html --- pkgs/servers/varnish/default.nix | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pkgs/servers/varnish/default.nix b/pkgs/servers/varnish/default.nix index 4d0181c587ba..c60e02ff5963 100644 --- a/pkgs/servers/varnish/default.nix +++ b/pkgs/servers/varnish/default.nix @@ -141,6 +141,9 @@ let lib.maintainers.osnyx ]; platforms = lib.platforms.unix; + knownVulnerabilities = lib.optionals (lib.versions.major version == "7") [ + "VSV00018: https://vinyl-cache.org/security/VSV00018.html" + ]; }; }; in