Lucene search

K
mageiaGentoo FoundationMGASA-2014-0065
HistoryFeb 13, 2014 - 11:44 p.m.

Updated varnish packages fix CVE-2013-4484 and correct service behaviour

2014-02-1323:44:30
Gentoo Foundation
advisories.mageia.org
6

0.039 Low

EPSS

Percentile

92.0%

Updated varnish packages fix security vulnerabilities: Varnish before 3.0.5 allows remote attackers to cause a denial of service (child-process crash and temporary caching outage) via a GET request with trailing whitespace characters and no URI (CVE-2013-4484). Also, the services have been converted from SysV init scripts to systemd- native services, which should allow for more consistent behavior.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchvarnish< 3.0.3-7.5varnish-3.0.3-7.5.mga3
Mageia4noarchvarnish< 3.0.3-12.1varnish-3.0.3-12.1.mga4