varnish security update

2024-05-1014:32:38

Rockylinux Product Errata

errata.rockylinux.org

varnish cache

http accelerator

cvss

cve

denial of service

security update

rocky linux 9

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

An update is available for varnish.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don’t have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
rocky9aarch64varnish< 6.6.2-4.el9_3.1varnish-0:6.6.2-4.el9_3.1.aarch64.rpm
rocky9i686varnish< 6.6.2-4.el9_3.1varnish-0:6.6.2-4.el9_3.1.i686.rpm
rocky9ppc64levarnish< 6.6.2-4.el9_3.1varnish-0:6.6.2-4.el9_3.1.ppc64le.rpm
rocky9s390xvarnish< 6.6.2-4.el9_3.1varnish-0:6.6.2-4.el9_3.1.s390x.rpm
rocky9x86_64varnish< 6.6.2-4.el9_3.1varnish-0:6.6.2-4.el9_3.1.x86_64.rpm
rocky9aarch64varnish-devel< 6.6.2-4.el9_3.1varnish-devel-0:6.6.2-4.el9_3.1.aarch64.rpm
rocky9i686varnish-devel< 6.6.2-4.el9_3.1varnish-devel-0:6.6.2-4.el9_3.1.i686.rpm
rocky9ppc64levarnish-devel< 6.6.2-4.el9_3.1varnish-devel-0:6.6.2-4.el9_3.1.ppc64le.rpm
rocky9s390xvarnish-devel< 6.6.2-4.el9_3.1varnish-devel-0:6.6.2-4.el9_3.1.s390x.rpm
rocky9x86_64varnish-devel< 6.6.2-4.el9_3.1varnish-devel-0:6.6.2-4.el9_3.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
rocky	9	aarch64	varnish	< 6.6.2-4.el9_3.1	varnish-0:6.6.2-4.el9_3.1.aarch64.rpm
rocky	9	i686	varnish	< 6.6.2-4.el9_3.1	varnish-0:6.6.2-4.el9_3.1.i686.rpm
rocky	9	ppc64le	varnish	< 6.6.2-4.el9_3.1	varnish-0:6.6.2-4.el9_3.1.ppc64le.rpm
rocky	9	s390x	varnish	< 6.6.2-4.el9_3.1	varnish-0:6.6.2-4.el9_3.1.s390x.rpm
rocky	9	x86_64	varnish	< 6.6.2-4.el9_3.1	varnish-0:6.6.2-4.el9_3.1.x86_64.rpm
rocky	9	aarch64	varnish-devel	< 6.6.2-4.el9_3.1	varnish-devel-0:6.6.2-4.el9_3.1.aarch64.rpm
rocky	9	i686	varnish-devel	< 6.6.2-4.el9_3.1	varnish-devel-0:6.6.2-4.el9_3.1.i686.rpm
rocky	9	ppc64le	varnish-devel	< 6.6.2-4.el9_3.1	varnish-devel-0:6.6.2-4.el9_3.1.ppc64le.rpm
rocky	9	s390x	varnish-devel	< 6.6.2-4.el9_3.1	varnish-devel-0:6.6.2-4.el9_3.1.s390x.rpm
rocky	9	x86_64	varnish-devel	< 6.6.2-4.el9_3.1	varnish-devel-0:6.6.2-4.el9_3.1.x86_64.rpm