Bug#939333: varnish: VSV00003 DoS attack vector

2019-09-03 Thread Moritz Mühlenhoff
On Tue, Sep 03, 2019 at 10:43:55PM +0200, Steinar H. Gunderson wrote: > tags 939333 + patch > thanks > > On Tue, Sep 03, 2019 at 02:27:33PM +0200, Salvatore Bonaccorso wrote: > > See https://varnish-cache.org/security/VSV3.html . A CVE does not > > seem yet to be assigned (but a request

Bug#939333: varnish: VSV00003 DoS attack vector

2019-09-03 Thread Steinar H. Gunderson
tags 939333 + patch thanks On Tue, Sep 03, 2019 at 02:27:33PM +0200, Salvatore Bonaccorso wrote: > See https://varnish-cache.org/security/VSV3.html . A CVE does not > seem yet to be assigned (but a request pending now). I made a backport to 6.1.1 for stable. It consists of all changes

Bug#939333: varnish: VSV00003 DoS attack vector

2019-09-03 Thread Salvatore Bonaccorso
Source: varnish Version: 6.2.0-1 Severity: grave Tags: security upstream Justification: user security hole Hi See https://varnish-cache.org/security/VSV3.html . A CVE does not seem yet to be assigned (but a request pending now). Regards, Salvatore