Red Hat Security Advisory

RHSA-2022:0420

varnish:6 security update

Released 2022-02-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v. 8.1) varnish-6.0.2-2.module+el8.1.0+14093+aa8ea65f.1.ppc64le::varnish:6, varnish-6.0.2-2.module+el8.1.0+14093+aa8ea65f.1.src::varnish:6, varnish-6.0.2-2.module+el8.1.0+14093+aa8ea65f.1.x86_64::varnish:6 +7

Fixes 1 record

TI-2022-07931 CVE-2022-23959 · GHSA-fcqv-r8cv-f88h

In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10…

MEDIUM 43

In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 conn…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02011 Published 2022-01-26 Fixed CWE-444