varnish:6 security update

2022-11-2800:00:00

linux.oracle.com

varnish 6

security update

request forgery

http/1 request smuggling

0.003 Low

EPSS

Percentile

69.6%

JSON

varnish
[6.0.8-2.1]

Resolves: #2142092 - CVE-2022-45060 varnish:6/varnish: Request Forgery
Vulnerability
[6.0.8-2]
Resolves: #2047650 - CVE-2022-23959 varnish:6/varnish: Varnish HTTP/1 Request
Smuggling Vulnerability
varnish-modules
[0.15.0-6]
Related: #1982862 - rebuild for new varnish version

OSVersionArchitecturePackageVersionFilename
oracle linux8srcvarnish< 6.0.8-2.modulevarnish-6.0.8-2.module+el8.7.0+20885+cb213da4.1.src.rpm
oracle linux8srcvarnish-modules< 0.15.0-6.modulevarnish-modules-0.15.0-6.module+el8.5.0+20320+0b4af72d.src.rpm
oracle linux8aarch64varnish< 6.0.8-2.modulevarnish-6.0.8-2.module+el8.7.0+20885+cb213da4.1.aarch64.rpm
oracle linux8aarch64varnish-devel< 6.0.8-2.modulevarnish-devel-6.0.8-2.module+el8.7.0+20885+cb213da4.1.aarch64.rpm
oracle linux8aarch64varnish-docs< 6.0.8-2.modulevarnish-docs-6.0.8-2.module+el8.7.0+20885+cb213da4.1.aarch64.rpm
oracle linux8aarch64varnish-modules< 0.15.0-6.modulevarnish-modules-0.15.0-6.module+el8.5.0+20320+0b4af72d.aarch64.rpm
oracle linux8srcvarnish< 6.0.8-2.modulevarnish-6.0.8-2.module+el8.7.0+20885+cb213da4.1.src.rpm
oracle linux8srcvarnish-modules< 0.15.0-6.modulevarnish-modules-0.15.0-6.module+el8.5.0+20320+0b4af72d.src.rpm
oracle linux8x86_64varnish< 6.0.8-2.modulevarnish-6.0.8-2.module+el8.7.0+20885+cb213da4.1.x86_64.rpm
oracle linux8x86_64varnish-devel< 6.0.8-2.modulevarnish-devel-6.0.8-2.module+el8.7.0+20885+cb213da4.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	varnish	< 6.0.8-2.module	varnish-6.0.8-2.module+el8.7.0+20885+cb213da4.1.src.rpm
oracle linux	8	src	varnish-modules	< 0.15.0-6.module	varnish-modules-0.15.0-6.module+el8.5.0+20320+0b4af72d.src.rpm
oracle linux	8	aarch64	varnish	< 6.0.8-2.module	varnish-6.0.8-2.module+el8.7.0+20885+cb213da4.1.aarch64.rpm
oracle linux	8	aarch64	varnish-devel	< 6.0.8-2.module	varnish-devel-6.0.8-2.module+el8.7.0+20885+cb213da4.1.aarch64.rpm
oracle linux	8	aarch64	varnish-docs	< 6.0.8-2.module	varnish-docs-6.0.8-2.module+el8.7.0+20885+cb213da4.1.aarch64.rpm
oracle linux	8	aarch64	varnish-modules	< 0.15.0-6.module	varnish-modules-0.15.0-6.module+el8.5.0+20320+0b4af72d.aarch64.rpm
oracle linux	8	src	varnish	< 6.0.8-2.module	varnish-6.0.8-2.module+el8.7.0+20885+cb213da4.1.src.rpm
oracle linux	8	src	varnish-modules	< 0.15.0-6.module	varnish-modules-0.15.0-6.module+el8.5.0+20320+0b4af72d.src.rpm
oracle linux	8	x86_64	varnish	< 6.0.8-2.module	varnish-6.0.8-2.module+el8.7.0+20885+cb213da4.1.x86_64.rpm
oracle linux	8	x86_64	varnish-devel	< 6.0.8-2.module	varnish-devel-6.0.8-2.module+el8.7.0+20885+cb213da4.1.x86_64.rpm