Security update for varnish (moderate)

An update that fixes one vulnerability is now available.

Description:

This update for varnish fixes the following issues:

Security issue fixed:

• CVE-2019-15892: Fixed a potential denial of service by sending crafted
  HTTP/1 requests (boo#1149382).

Non-security issues fixed:

• Updated the package to release 6.2.1.
• Added a thread pool watchdog which will restart the worker process if
  scheduling tasks onto worker threads appears stuck. The new parameter
  “thread_pool_watchdog” configures it.
• Disabled error for clobbering, which caused bogus error in varnishtest.

This update was imported from the openSUSE:Leap:15.0:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Backports SLE-15-SP1:

  zypper in -t patch openSUSE-2019-2221=1

• openSUSE Backports SLE-15:

  zypper in -t patch openSUSE-2019-2221=1