1162 matches found
GHSA-FH7V-Q458-7VMW ibexa/http-cache affected by Breach with Varnish VCL
Impact This is not a vulnerability in the code per se, but included Varnish VCL templates enable compression of API and JSON messages. This is a potential case of the BREACH vulnerability, which affects HTTP compression, where secrets can be extracted through carefully crafted requests. The fix...
ibexa/http-cache affected by Breach with Varnish VCL
Impact This is not a vulnerability in the code per se, but included Varnish VCL templates enable compression of API and JSON messages. This is a potential case of the BREACH vulnerability, which affects HTTP compression, where secrets can be extracted through carefully crafted requests. The fix...
ezsystems/ezplatform-http-cache affected by Breach with Varnish VCL
Impact This is not a vulnerability in the code per se, but included Varnish VCL templates enable compression of API and JSON messages. This is a potential case of the BREACH vulnerability, which affects HTTP compression, where secrets can be extracted through carefully crafted requests. The fix...
GHSA-MGFG-7533-7JF6 ezsystems/ezplatform-http-cache affected by Breach with Varnish VCL
Impact This is not a vulnerability in the code per se, but included Varnish VCL templates enable compression of API and JSON messages. This is a potential case of the BREACH vulnerability, which affects HTTP compression, where secrets can be extracted through carefully crafted requests. The fix...
PT-2024-40073 · Apache +1 · Apache +1
Name of the Vulnerable Software and Affected Versions: ibexa post-install versions prior to the patched versions Description: The issue is related to the BREACH vulnerability, which affects HTTP compression and can allow secrets to be extracted through carefully crafted requests. This is due to...
Fedora 37 : varnish / varnish-modules (2022-0d5dcc031e)
The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-0d5dcc031e advisory. New upstream release: A security release. This release includes fix for CVE-2022-45059 VSV00011 and CVE-2022-45060 VSV00010. From the upstream relea...
Fedora 36 : varnish (2022-d77f991ed2)
The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-d77f991ed2 advisory. Automatic update for varnish-7.0.2-1.fc36. Changelog Wed Jan 26 2022 Ingvar Hagelund - 7.0.2-1 - New upstream release. A security release - Includes fix for...
RHEL 8 : varnish:6 (RHSA-2024:4937)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4937 advisory. Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and ov...
RHSA-2023:6021 Red Hat Security Advisory: varnish:6 security update
Bulletin has no description...
RHSA-2023:6022 Red Hat Security Advisory: varnish:6 security update
Bulletin has no description...
RHSA-2023:6023 Red Hat Security Advisory: varnish:6 security update
Bulletin has no description...
RHSA-2023:5989 Red Hat Security Advisory: varnish security update
Bulletin has no description...
RHSA-2023:6020 Red Hat Security Advisory: varnish:6 security update
Bulletin has no description...
RHSA-2023:7334 Red Hat Security Advisory: rh-varnish6-varnish security update
Bulletin has no description...
RHSA-2023:5930 Red Hat Security Advisory: varnish security update
Bulletin has no description...
RHSA-2023:5924 Red Hat Security Advisory: varnish security update
Bulletin has no description...
RHSA-2020:4756 Red Hat Security Advisory: varnish:6 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2022:4745 Red Hat Security Advisory: rh-varnish6-varnish security update
Bulletin has no description...