Ben Kallus discovered that incorrect parsing of chunked transfer encodings in the Varnish web accelerator may result in HTTP request smuggling or cache poisoning.
https://security-tracker.debian.org/tracker/DSA-5918-1
Continue reading...
https://security-tracker.debian.org/tracker/DSA-5918-1
Continue reading...

