(RHSA-2024:2820) Important: varnish security update

2024-05-1300:58:18

access.redhat.com

varnish cache

http accelerator

update

http/2 broken window attack

denial of service

cve-2024-30156

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.8%

JSON

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don’t have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9ppc64levarnish< 6.6.2-3.el9_2.2varnish-6.6.2-3.el9_2.2.ppc64le.rpm
RedHat9s390xvarnish-devel< 6.6.2-3.el9_2.2varnish-devel-6.6.2-3.el9_2.2.s390x.rpm
RedHat9x86_64varnish< 6.6.2-3.el9_2.2varnish-6.6.2-3.el9_2.2.x86_64.rpm
RedHat9s390xvarnish< 6.6.2-3.el9_2.2varnish-6.6.2-3.el9_2.2.s390x.rpm
RedHat9i686varnish-devel< 6.6.2-3.el9_2.2varnish-devel-6.6.2-3.el9_2.2.i686.rpm
RedHat9aarch64varnish-docs< 6.6.2-3.el9_2.2varnish-docs-6.6.2-3.el9_2.2.aarch64.rpm
RedHat9x86_64varnish-docs< 6.6.2-3.el9_2.2varnish-docs-6.6.2-3.el9_2.2.x86_64.rpm
RedHat9s390xvarnish-docs< 6.6.2-3.el9_2.2varnish-docs-6.6.2-3.el9_2.2.s390x.rpm
RedHat9i686varnish< 6.6.2-3.el9_2.2varnish-6.6.2-3.el9_2.2.i686.rpm
RedHat9x86_64varnish-devel< 6.6.2-3.el9_2.2varnish-devel-6.6.2-3.el9_2.2.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	ppc64le	varnish	< 6.6.2-3.el9_2.2	varnish-6.6.2-3.el9_2.2.ppc64le.rpm
RedHat	9	s390x	varnish-devel	< 6.6.2-3.el9_2.2	varnish-devel-6.6.2-3.el9_2.2.s390x.rpm
RedHat	9	x86_64	varnish	< 6.6.2-3.el9_2.2	varnish-6.6.2-3.el9_2.2.x86_64.rpm
RedHat	9	s390x	varnish	< 6.6.2-3.el9_2.2	varnish-6.6.2-3.el9_2.2.s390x.rpm
RedHat	9	i686	varnish-devel	< 6.6.2-3.el9_2.2	varnish-devel-6.6.2-3.el9_2.2.i686.rpm
RedHat	9	aarch64	varnish-docs	< 6.6.2-3.el9_2.2	varnish-docs-6.6.2-3.el9_2.2.aarch64.rpm
RedHat	9	x86_64	varnish-docs	< 6.6.2-3.el9_2.2	varnish-docs-6.6.2-3.el9_2.2.x86_64.rpm
RedHat	9	s390x	varnish-docs	< 6.6.2-3.el9_2.2	varnish-docs-6.6.2-3.el9_2.2.s390x.rpm
RedHat	9	i686	varnish	< 6.6.2-3.el9_2.2	varnish-6.6.2-3.el9_2.2.i686.rpm
RedHat	9	x86_64	varnish-devel	< 6.6.2-3.el9_2.2	varnish-devel-6.6.2-3.el9_2.2.x86_64.rpm