Red Hat Security Advisory

RHSA-2022:8645

varnish:6 security update

Released 2022-11-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.8.4) varnish-6.0.6-2.module+el8.4.0+17241+96fc0d9c.3.aarch64::varnish:6, varnish-6.0.6-2.module+el8.4.0+17241+96fc0d9c.3.ppc64le::varnish:6, varnish-6.0.6-2.module+el8.4.0+17241+96fc0d9c.3.s390x::varnish:6 +15

TI-2022-22151 CVE-2022-45060 · GHSA-78x9-jhxm-553x

MEDIUM 41

An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01296 Published 2022-11-09 Fixed CWE-20