advisories/26404.adv

type: security
subject: Updated varnish packages fix security vulnerability
src:
  7:
   core:
     - varnish-6.3.2-1.mga7
description: |
  Updated varnish packages fix security vulnerability:

  An assert can be triggered in Varnish Cache when using Varnish with a TLS
  termination proxy, and the proxy and Varnish use the PROXY version 2. The
  assert will cause Varnish to restart, and the cache will be empty after the
  restart (VSV00005).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=26404
 - https://varnish-cache.org/security/VSV00005.html
 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/FWJNWSLEZGPJBSBKJBLCPFOAO36PCZ7N/
ID: MGASA-2020-0154
1	type: security
2	subject: Updated varnish packages fix security vulnerability
3	src:
4	7:
5	core:
6	- varnish-6.3.2-1.mga7
7	description: \|
8	Updated varnish packages fix security vulnerability:
9
10	An assert can be triggered in Varnish Cache when using Varnish with a TLS
11	termination proxy, and the proxy and Varnish use the PROXY version 2. The
12	assert will cause Varnish to restart, and the cache will be empty after the
13	restart (VSV00005).
14	references:
15	- https://bugs.mageia.org/show_bug.cgi?id=26404
16	- https://varnish-cache.org/security/VSV00005.html
17	- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/FWJNWSLEZGPJBSBKJBLCPFOAO36PCZ7N/
18	ID: MGASA-2020-0154