Red Hat Security AdvisoryRHSA-2022:4745
rh-varnish6-varnish security update
Released 2022-05-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for RHEL Workstation(v. 7) rh-varnish6-varnish-6.0.8-2.el7.1, rh-varnish6-varnish-devel-6.0.8-2.el7.1, rh-varnish6-varnish-docs-6.0.8-2.el7.1 +1
- Red Hat Software Collections for RHEL(v. 7) rh-varnish6-varnish-6.0.8-2.el7.1, rh-varnish6-varnish-devel-6.0.8-2.el7.1, rh-varnish6-varnish-docs-6.0.8-2.el7.1 +1
Fixes 1 record
Priority MEDIUM 43
In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 conn…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02011 · Published 2022-01-26 · Fixed CWE-444
