Bug#939333: varnish: VSV00003 DoS attack vector

2019-09-03 Thread Moritz Mühlenhoff
On Tue, Sep 03, 2019 at 10:43:55PM +0200, Steinar H. Gunderson wrote: > tags 939333 + patch > thanks > > On Tue, Sep 03, 2019 at 02:27:33PM +0200, Salvatore Bonaccorso wrote: > > See https://varnish-cache.org/security/VSV3.html . A CVE does not > > seem yet to be assigned (but a request pendin

Bug#939333: varnish: VSV00003 DoS attack vector

2019-09-03 Thread Steinar H. Gunderson
tags 939333 + patch thanks On Tue, Sep 03, 2019 at 02:27:33PM +0200, Salvatore Bonaccorso wrote: > See https://varnish-cache.org/security/VSV3.html . A CVE does not > seem yet to be assigned (but a request pending now). I made a backport to 6.1.1 for stable. It consists of all changes between

Processed: Re: Bug#939333: varnish: VSV00003 DoS attack vector

2019-09-03 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > tags 939333 + patch Bug #939333 [src:varnish] varnish: VSV3 DoS attack vector Added tag(s) patch. > thanks Stopping processing here. Please contact me if you need assistance. -- 939333: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=93933

Bug#939333: varnish: VSV00003 DoS attack vector

2019-09-03 Thread Salvatore Bonaccorso
Source: varnish Version: 6.2.0-1 Severity: grave Tags: security upstream Justification: user security hole Hi See https://varnish-cache.org/security/VSV3.html . A CVE does not seem yet to be assigned (but a request pending now). Regards, Salvatore