varnish security update

2024-04-0900:00:00

linux.oracle.com

varnish

security update

denial of service

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

JSON

[6.6.2-4.1]

Resolves: RHEL-30387 - varnish: HTTP/2 Broken Window Attack may result
in denial of service (CVE-2024-30156)
[6.6.2-4]
Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487
Resolves: RHEL-12817

OSVersionArchitecturePackageVersionFilename
oracle linux9srcvarnish< 6.6.2-4.el9_3.1varnish-6.6.2-4.el9_3.1.src.rpm
oracle linux9srcvarnish< 6.6.2-4.el9_3.1varnish-6.6.2-4.el9_3.1.src.rpm
oracle linux9aarch64varnish< 6.6.2-4.el9_3.1varnish-6.6.2-4.el9_3.1.aarch64.rpm
oracle linux9aarch64varnish-devel< 6.6.2-4.el9_3.1varnish-devel-6.6.2-4.el9_3.1.aarch64.rpm
oracle linux9aarch64varnish-docs< 6.6.2-4.el9_3.1varnish-docs-6.6.2-4.el9_3.1.aarch64.rpm
oracle linux9srcvarnish< 6.6.2-4.el9_3.1varnish-6.6.2-4.el9_3.1.src.rpm
oracle linux9srcvarnish< 6.6.2-4.el9_3.1varnish-6.6.2-4.el9_3.1.src.rpm
oracle linux9i686varnish< 6.6.2-4.el9_3.1varnish-6.6.2-4.el9_3.1.i686.rpm
oracle linux9x86_64varnish< 6.6.2-4.el9_3.1varnish-6.6.2-4.el9_3.1.x86_64.rpm
oracle linux9i686varnish-devel< 6.6.2-4.el9_3.1varnish-devel-6.6.2-4.el9_3.1.i686.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	9	src	varnish	< 6.6.2-4.el9_3.1	varnish-6.6.2-4.el9_3.1.src.rpm
oracle linux	9	src	varnish	< 6.6.2-4.el9_3.1	varnish-6.6.2-4.el9_3.1.src.rpm
oracle linux	9	aarch64	varnish	< 6.6.2-4.el9_3.1	varnish-6.6.2-4.el9_3.1.aarch64.rpm
oracle linux	9	aarch64	varnish-devel	< 6.6.2-4.el9_3.1	varnish-devel-6.6.2-4.el9_3.1.aarch64.rpm
oracle linux	9	aarch64	varnish-docs	< 6.6.2-4.el9_3.1	varnish-docs-6.6.2-4.el9_3.1.aarch64.rpm
oracle linux	9	src	varnish	< 6.6.2-4.el9_3.1	varnish-6.6.2-4.el9_3.1.src.rpm
oracle linux	9	src	varnish	< 6.6.2-4.el9_3.1	varnish-6.6.2-4.el9_3.1.src.rpm
oracle linux	9	i686	varnish	< 6.6.2-4.el9_3.1	varnish-6.6.2-4.el9_3.1.i686.rpm
oracle linux	9	x86_64	varnish	< 6.6.2-4.el9_3.1	varnish-6.6.2-4.el9_3.1.x86_64.rpm
oracle linux	9	i686	varnish-devel	< 6.6.2-4.el9_3.1	varnish-devel-6.6.2-4.el9_3.1.i686.rpm