Stay Secure with the Latest Linux Advisories

security advisoryvarnishmageia

Mageia 7: MGASA-2020-0154 Critical: Varnish Restart Issue

Updated varnish packages fix security vulnerability: An assert can be triggered in Varnish Cache when using Varnish with a TLS termination proxy, and the proxy and Varnish use the PROXY version 2. The assert will cause Varnish to restart, and the cache will be empty after the . MGASA-2020-0154 - Updated varnish packages fix security vulnerability Publication date: 02 Apr 2020 URL: https://advisories.mageia.org/MGASA-2020-0154.html Type: security Affected Mageia releases: 7 Updated varnish packages fix security vulnerability: An assert can be triggered in Varnish Cache when using Varnish with a TLS termination proxy, and the proxy and Varnish use the PROXY version 2. The assert will cause Varnish to restart, and the cache will be empty after the restart (VSV00005). References: - https://bugs.mageia.org/show_bug.cgi?id=26404 - https://vinyl-cache.org/security/VSV00005.html - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/FWJNWSLEZGPJBSBKJBLCPFOAO36PCZ7N/ SRPMS: - 7/core/varnish-6.3.2-1.mga7 . The latest varnish updates mitigate a security vulnerability that results in unexpected restarts and potential cache depletion for TLS proxy configurations.. Varnish Update, Mageia Security, TLS Proxy Vulnerability. . Severity: Critical. LinuxSecurity.com Team

Apr 02, 2020 •Critical Mageia