High ELSA-2022-0418 1 CVE

Important: varnish:6 security update (Oracle Linux 8)

Published Feb 3, 2022 · Updated Feb 3, 2022

Ecosystem: Oracle Linux

Summary

varnish
[6.0.8-1.1]
- Resolves: #2047648 - CVE-2022-23959 varnish:6/varnish: Varnish HTTP/1 Request
Smuggling Vulnerability

varnish-modules
[0.15.0-6]
- Related: #1982862 - rebuild for new varnish version

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 8	varnish	0:6.0.8-1.module+el8.5.0+20491+1af4e193.1
Oracle Linux · 8	varnish-devel	0:6.0.8-1.module+el8.5.0+20491+1af4e193.1
Oracle Linux · 8	varnish-docs	0:6.0.8-1.module+el8.5.0+20491+1af4e193.1
Oracle Linux · 8	varnish-modules	0:0.15.0-6.module+el8.5.0+20320+0b4af72d

Vulnerabilities 1

Unscored —

CVE-2022-23959

In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Ca…

varnish varnish varnish Debian Ubuntu Alpine

Jan 26, 2022