Skip to content
OpenAdvisories
High ALSA-2022:8643 1 CVE

Important: varnish security update

Published Nov 28, 2022 · Updated Oct 29, 2026

Summary

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* varnish: Request Forgery Vulnerability (CVE-2022-45060)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 3

ReleasePackageFixed in
AlmaLinux · 9 varnish 6.6.2-2.el9_1.1
AlmaLinux · 9 varnish-devel 6.6.2-2.el9_1.1
AlmaLinux · 9 varnish-docs 6.6.2-2.el9_1.1

Vulnerabilities 1

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-45060
  • report
    https://bugzilla.redhat.com/2141844
  • advisory
    https://errata.almalinux.org/9/ALSA-2022-8643.html