Issued at: 2023-10-24
Updated at: 2023-10-24
Synopsis
Important: varnish security update
Description
Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.
Security Fix(es):
* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 8 aarch64
Rocky Linux 8 x86_64
Fixes
2242803
CVEs
CVE-2023-44487
Affected packages
Rocky Linux 8 aarch64 - AppStream
varnish-0:6.0.8-3.module+el8.8.0+1552+3570c668.1.aarch64.rpm
varnish-0:6.0.8-3.module+el8.8.0+1552+3570c668.1.src.rpm
varnish-devel-0:6.0.8-3.module+el8.8.0+1552+3570c668.1.aarch64.rpm
varnish-docs-0:6.0.8-3.module+el8.8.0+1552+3570c668.1.aarch64.rpm
varnish-modules-0:0.15.0-6.module+el8.5.0+677+2a78a869.aarch64.rpm
varnish-modules-0:0.15.0-6.module+el8.5.0+677+2a78a869.src.rpm
varnish-modules-debuginfo-0:0.15.0-6.module+el8.5.0+677+2a78a869.aarch64.rpm
varnish-modules-debugsource-0:0.15.0-6.module+el8.5.0+677+2a78a869.aarch64.rpm
Rocky Linux 8 x86_64 - AppStream
varnish-0:6.0.8-3.module+el8.8.0+1552+3570c668.1.src.rpm
varnish-0:6.0.8-3.module+el8.8.0+1552+3570c668.1.x86_64.rpm
varnish-devel-0:6.0.8-3.module+el8.8.0+1552+3570c668.1.x86_64.rpm
varnish-docs-0:6.0.8-3.module+el8.8.0+1552+3570c668.1.x86_64.rpm
varnish-modules-0:0.15.0-6.module+el8.5.0+677+2a78a869.src.rpm
varnish-modules-0:0.15.0-6.module+el8.5.0+677+2a78a869.x86_64.rpm
varnish-modules-debuginfo-0:0.15.0-6.module+el8.5.0+677+2a78a869.x86_64.rpm
varnish-modules-debugsource-0:0.15.0-6.module+el8.5.0+677+2a78a869.x86_64.rpm