Summary
varnish
[6.0.8-2.1]
- Resolves: #2142092 - CVE-2022-45060 varnish:6/varnish: Request Forgery
Vulnerability
[6.0.8-2]
- Resolves: #2047650 - CVE-2022-23959 varnish:6/varnish: Varnish HTTP/1 Request
Smuggling Vulnerability
varnish-modules
[0.15.0-6]
- Related: #1982862 - rebuild for new varnish version
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | varnish | 0:6.0.8-2.module+el8.7.0+20885+cb213da4.1 |
| Oracle Linux · 8 | varnish-devel | 0:6.0.8-2.module+el8.7.0+20885+cb213da4.1 |
| Oracle Linux · 8 | varnish-docs | 0:6.0.8-2.module+el8.7.0+20885+cb213da4.1 |
| Oracle Linux · 8 | varnish-modules | 0:0.15.0-6.module+el8.5.0+20320+0b4af72d |
Vulnerabilities 1
-
High 7.5
An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x be…