VSV00006 front page announcement

40a84ce5 · Nils Goroll · f58651d8 · 40a84ce5
Unverified Commit 40a84ce5 authored Mar 16, 2021 by Nils Goroll
Hide whitespace changes
Inline Side-by-side

Showing with 9 additions and 0 deletions

index.rst R1/source/index.rst +9 -0

No files found.
--- a/R1/source/index.rst
+++ b/R1/source/index.rst
@@ -6,6 +6,15 @@ Varnish HTTP Cache
 What is happening
 -----------------

+2021-03-16 - Denial of Service in varnish-modules
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Some versions of the separate `varnish-modules` bundle allow for a
+potential denial of service attack when the ``header.append()`` or
+``header.copy()`` functions are used.
+
+Please see :ref:`VSV00006`.
+
 2021-03-15 - Varnish 6.6.0 is released
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~