Ubuntu
varnish package

  1. Bug #1709153
  2. Comment #2

Comment 2 for bug 1709153

Revision history for this message
Seth Arnold (seth-arnold) wrote :

Note that trusty's varnish is also vulnerable to CVE-2017-12425. Could you work that into the patch too? (Note fetch_number() from trusty/varnish-3.0.5/bin/varnishd/cache_fetch.c )

Thanks