MGASA-2020-0025
Updated varnish packages fix security vulnerability
Updated varnish packages fix security vulnerability:
A bug has been discovered in Varnish Cache where we fail to clear a pointer between the handling of one client requests and the next on the same connection. This can under specific circumstances lead to information being leaked from the connection workspace (VSV00004).
The varnish package has been updated to version 6.3.1, which includes many fixes and enhancements. See the upstream documentation for details.
What each source reports
OSV No score
Updated varnish packages fix security vulnerability
Updated varnish packages fix security vulnerability:
A bug has been discovered in Varnish Cache where we fail to clear a pointer between the handling of one client requests and the next on the same connection. This can under specific circumstances lead to information being leaked from the connection workspace (VSV00004).
The varnish package has been updated to version 6.3.1, which includes many fixes and enhancements. See the upstream documentation for details.
- Record
MGASA-2020-0025- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
varnishMageia:7 |
before 6.3.1-1.mga7 | 6.3.1-1.mga7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2020-0025 is a vulnerability with no CVSS score yet in varnish, published January 7, 2020. No source lists public exploit code. Fixed in varnish 6.3.1-1.mga7.