Comment 2 for bug 1939281

Revision history for this message
Luís Infante da Câmara (luis220413) wrote :

When reporting a public security vulnerability, check the box "This bug is a security vulnerability" and, when your report is complete, change the information type ("This report contains ... information") to Public Security.

Only Focal is vulnerable to CVE-2021-36740.

Patches for all Varnish CVEs in Ubuntu will be added tomorrow to bug #1971504.