af18d8ea1b
JimFuller-RedHat
2026-01-08
Subject
docs: explicitly call out Slowloris as not a security flaw
Binary
No binary (build failed)
Architecture & Compiler Flags
—
Build Log
(log yok)
Commit Diff GitHub →
.github/scripts/pyspelling.words+1 -0
| @@ -778,6 +778,7 @@ singlecwd | |
| SINIX | |
| Sintonen | |
| sizeof | |
| + | Slowloris |
| SLE | |
| slist | |
| sln | |
docs/VULN-DISCLOSURE-POLICY.md+2 -1
| @@ -224,7 +224,8 @@ problem. There are already several benign and likely reasons for transfers to | |
| stall and never end, so applications that cannot deal with never-ending | |
| transfers already need to have counter-measures established. | |
| - | If the problem avoids the regular counter-measures when it causes a never- |
| + | Well known attacks, like [Slowloris](https://en.wikipedia.org/wiki/Slowloris_(cyber_attack)), that send partial |
| + | requests are usually not considered a flaw. If the problem avoids the regular counter-measures when it causes a never- |
| ending transfer, it might be a security problem. | |
| ## Not practically possible | |