Issued at: 2023-10-24
Updated at: 2023-10-24
Synopsis
Important: varnish security update
Description
Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.
Security Fix(es):
* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 9 ppc64le
Rocky Linux 9 s390x
Rocky Linux 9 x86_64
Fixes
2242803
CVEs
CVE-2023-44487
Affected packages
Rocky Linux 9 x86_64 - AppStream
varnish-0:6.6.2-3.el9_2.1.i686.rpm
varnish-0:6.6.2-3.el9_2.1.src.rpm
varnish-0:6.6.2-3.el9_2.1.x86_64.rpm
varnish-docs-0:6.6.2-3.el9_2.1.x86_64.rpm
Rocky Linux 9 ppc64le - AppStream
varnish-0:6.6.2-3.el9_2.1.ppc64le.rpm
varnish-0:6.6.2-3.el9_2.1.src.rpm
varnish-docs-0:6.6.2-3.el9_2.1.ppc64le.rpm
Rocky Linux 9 s390x - AppStream
varnish-0:6.6.2-3.el9_2.1.s390x.rpm
varnish-0:6.6.2-3.el9_2.1.src.rpm
varnish-docs-0:6.6.2-3.el9_2.1.s390x.rpm
Rocky Linux 9 x86_64 - CRB
varnish-0:6.6.2-3.el9_2.1.src.rpm
varnish-devel-0:6.6.2-3.el9_2.1.i686.rpm
varnish-devel-0:6.6.2-3.el9_2.1.x86_64.rpm
Rocky Linux 9 s390x - CRB
varnish-0:6.6.2-3.el9_2.1.src.rpm
varnish-devel-0:6.6.2-3.el9_2.1.s390x.rpm
Rocky Linux 9 ppc64le - CRB
varnish-0:6.6.2-3.el9_2.1.src.rpm
varnish-devel-0:6.6.2-3.el9_2.1.ppc64le.rpm