[6.0] 1896280a3 Add VSV00004 to changes.rst

Martin Blix Grydeland martin at varnish-software.com
Mon Oct 21 11:29:07 UTC 2019


commit 1896280a3ed76599d85dc07f75799a0271b5512f
Author: Martin Blix Grydeland <martin at varnish-software.com>
Date:   Fri Oct 18 13:40:43 2019 +0200

    Add VSV00004 to changes.rst

diff --git a/doc/changes.rst b/doc/changes.rst
index 3dddc3952..c5260b2a0 100644
--- a/doc/changes.rst
+++ b/doc/changes.rst
@@ -62,6 +62,9 @@ Varnish Cache 6.0.5 (unreleased)
   utility run as the same user as the cache worker. This retires the
   VSM_NOPID environment variable.
 
+* Fixed clearing of a state variable that could case an information leak
+  (VSV00004_)
+
 .. _2395: https://github.com/varnishcache/varnish-cache/issues/2395
 .. _2572: https://github.com/varnishcache/varnish-cache/issues/2572
 .. _2905: https://github.com/varnishcache/varnish-cache/issues/2905
@@ -75,6 +78,7 @@ Varnish Cache 6.0.5 (unreleased)
 .. _2967: https://github.com/varnishcache/varnish-cache/issues/2967
 .. _2977: https://github.com/varnishcache/varnish-cache/issues/2977
 .. _3007: https://github.com/varnishcache/varnish-cache/issues/3007
+.. _VSV00004: https://varnish-cache.org/security/VSV00004.html
 
 ================================
 Varnish Cache 6.0.4 (2019-09-03)


More information about the varnish-commit mailing list