On Mar 29, Salvatore Bonaccorso <[email protected]> wrote:
There is no patch available for varnish 7.x, and backporting it appears too much complex to me. Since the vulnerability has a very narrow scope and it can be mitigated with very simple VCL, I do not think that it is worth doing a stable update just for this.Marco, can you identify the fixing commit for this issue?
This will be fixed by the next unstable upload, which is currently on hold waiting for some upstream changes.
-- ciao, Marco
signature.asc
Description: PGP signature
