adv_varnish 4.0.11

This is a security update release. Advanced Varnish - Moderately critical - Access bypass - SA-CONTRIB-2024-033.

Module has an access bypass vulnerability which potentially allows anonymous users to see pages generated and cached for different roles.

We are supporting varnish caches for authenticated users by seperating pages into various role based bins. A cookie on the users side allows varnish to get a page from the correct bin. Unfortunately, the bin hash is by default entirely predictable, provided you known the role name. This release fixes the issue.

Important manual step: This release contains a user facing change on the module's configuration form; The Hashing Noise field is required from now on.