varnish-cache:6.6

Last commit made on 2022-01-12
Get this branch:
git clone -b 6.6 https://git.launchpad.net/varnish-cache

Branch merges

Branch information

Name:
6.6
Repository:
lp:varnish-cache

Recent commits

17c51b0... by Martin Blix Grydeland <email address hidden>

Prepare for 6.6.2

bf790bb... by Martin Blix Grydeland <email address hidden>

Add VSV00008 to the changelog

ec531e1... by Martin Blix Grydeland <email address hidden>

VRB_Ignore() errors and connection close test case

9ed39d1... by Martin Blix Grydeland <email address hidden>

Mark req doclose when failing to ignore req body

Previously we would ignore errors to iterate the request body into
oblivion in VRB_Ignore(), keeping the connection open. This opens an
out-of-sync vulnerability on H/1 connections.

This patch tests the status of the request body in VRB_Ignore(), marking
the request failed and that it should be closed on errors.

b920ea6... by Martin Blix Grydeland <email address hidden>

Disable building on alpine

ce2a4a2... by Martin Blix Grydeland <email address hidden>

Install sudo on alpine

e6a8c86... by Martin Blix Grydeland <email address hidden>

Prepare for 6.6.1

8e99340... by Martin Blix Grydeland <email address hidden>

Add VSV00007 to the changelog

087896b... by Martin Blix Grydeland <email address hidden>

VSV00007 Test case for H2 smuggling attack

7d73bc8... by Martin Blix Grydeland <email address hidden>

Take content length into account on H/2 request bodies

When receiving H/2 data frames, make sure to take the advertised content
length into account, and fail appropriately if the combined sum of the
data frames does not match the content length.