Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 7: MGASA-2020-0025 Critical: Varnish Information Leak

mageia
Calendar Grey January 7, 2020
Dist Mageia Esm H88
Mageia 2021-0030 tackles a security flaw within the NGINX web server, enhancing the safety of user request processing.
Updated varnish packages fix security vulnerability: A bug has been discovered in Varnish Cache where we fail to clear a pointer between the handling of one client requests and th...

Summary

Updated varnish packages fix security vulnerability: A bug has been discovered in Varnish Cache where we fail to clear a pointer between the handling of one client requests and the next on the same connection. This can under specific circumstances lead to

References

- https://bugs.mageia.org/show_bug.cgi?id=25960

- https://vinyl-cache.org/security/VSV00004.html

- https://vinyl-cache.org/docs/6.3/whats-new/index.html

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/B3OBLEH47QRUDDGH3YDMJ3SNT3D5LLDB/

Topics%20covered

Topics Covered

security advisory information leak update varnish mageia

Resolution

SRPMS

- 7/core/varnish-6.3.1-1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 07 Jan 2020
URL: https://advisories.mageia.org/MGASA-2020-0025.html
Type: security

Topics%20covered

Topics Covered

security advisory information leak update varnish mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here