MGASA-2020-0154
Updated varnish packages fix security vulnerability
Updated varnish packages fix security vulnerability:
An assert can be triggered in Varnish Cache when using Varnish with a TLS termination proxy, and the proxy and Varnish use the PROXY version 2. The assert will cause Varnish to restart, and the cache will be empty after the restart (VSV00005).
What each source reports
OSV No score
Updated varnish packages fix security vulnerability
Updated varnish packages fix security vulnerability:
An assert can be triggered in Varnish Cache when using Varnish with a TLS termination proxy, and the proxy and Varnish use the PROXY version 2. The assert will cause Varnish to restart, and the cache will be empty after the restart (VSV00005).
- Record
MGASA-2020-0154- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
varnishMageia:7 |
before 6.3.2-1.mga7 | 6.3.2-1.mga7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2020-0154 is a vulnerability with no CVSS score yet in varnish, published April 2, 2020. No source lists public exploit code. Fixed in varnish 6.3.2-1.mga7.