UbuntuUpdates.org

Bugs fixes in "varnish"

Origin Bug number Title Date fixed
Launchpad 1986627 Incomplete fix for CVE-2020-11653 2022-08-24
Launchpad 1986627 Incomplete fix for CVE-2020-11653 2022-08-22
CVE CVE-2022-23959 In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r 2022-06-09
Launchpad 1939281 Please provide update for CVE-2021-36740 (VSV00007 Varnish HTTP/2 Request Smuggling Attack) 2022-06-09
Launchpad 1971504 Multiple vulnerabilities in Bionic, Focal, Impish, Jammy and Kinetic 2022-06-09
CVE CVE-2022-23959 In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r 2022-06-09
CVE CVE-2021-36740 Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This 2022-06-09
CVE CVE-2020-11653 An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a 2022-06-09
CVE CVE-2019-20637 An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does not clear a pointer between 2022-06-09
Launchpad 1939281 Please provide update for CVE-2021-36740 (VSV00007 Varnish HTTP/2 Request Smuggling Attack) 2022-06-09
Launchpad 1971504 Multiple vulnerabilities in Bionic, Focal, Impish, Jammy and Kinetic 2022-06-09
CVE CVE-2022-23959 In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r 2022-06-09
Launchpad 1971504 Multiple vulnerabilities in Bionic, Focal, Impish, Jammy and Kinetic 2022-06-09
CVE CVE-2022-23959 In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r 2022-06-08
Launchpad 1939281 Please provide update for CVE-2021-36740 (VSV00007 Varnish HTTP/2 Request Smuggling Attack) 2022-06-08
Launchpad 1971504 Multiple vulnerabilities in Bionic, Focal, Impish, Jammy and Kinetic 2022-06-08
CVE CVE-2022-23959 In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r 2022-06-08
CVE CVE-2021-36740 Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This 2022-06-08
CVE CVE-2020-11653 An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. It occurs when communication with a 2022-06-08
CVE CVE-2019-20637 An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does not clear a pointer between 2022-06-08



About   -   Send Feedback to @ubuntu_updates