Summary
[6.6.2-4.1]
- Resolves: RHEL-30387 - varnish: HTTP/2 Broken Window Attack may result
in denial of service (CVE-2024-30156)
[6.6.2-4]
- Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487
- Resolves: RHEL-12817
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | varnish | 0:6.6.2-4.el9_3.1 |
| Oracle Linux · 9 | varnish-devel | 0:6.6.2-4.el9_3.1 |
| Oracle Linux · 9 | varnish-docs | 0:6.6.2-4.el9_3.1 |
Vulnerabilities 1
-
High 7.5
Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, al…