Summary
varnish
[6.0.13-1]
- new version 6.0.13
- Resolves: RHEL-30378 - varnish:6/varnish: HTTP/2 Broken Window Attack may
result in denial of service (CVE-2024-30156)
varnish-modules
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | varnish | 0:6.0.13-1.module+el8.9.0+90264+d552af1c |
| Oracle Linux · 8 | varnish-devel | 0:6.0.13-1.module+el8.9.0+90264+d552af1c |
| Oracle Linux · 8 | varnish-docs | 0:6.0.13-1.module+el8.9.0+90264+d552af1c |
| Oracle Linux · 8 | varnish-modules | 0:0.15.0-6.module+el8.9.0+90264+d552af1c |
Vulnerabilities 1
-
High 7.5
Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, al…