UbuntuUpdates.org

Package "varnish"

Name: varnish

Description:

state of the art, high-performance web accelerator
Latest version: 5.2.1-1ubuntu0.1
Release: bionic (18.04)
Level: security
Repository: universe
Homepage: https://www.varnish-cache.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "varnish"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "varnish" in Bionic

Repository Area Version
base universe 5.2.1-1
updates universe 5.2.1-1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 5.2.1-1ubuntu0.1 2022-06-08 20:06:19 UTC

  varnish (5.2.1-1ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: HTTP Request Smuggling
    - debian/patches/CVE-2022-23959.patch: Mark req doclose when failing
      to ignore req body. (LP: #1971504, LP: #1939281)
      CVE-2022-23959

 -- Luís Infante da Câmara <email address hidden> Wed, 04 May 2022 20:12:53 +0100
1971504 Multiple vulnerabilities in Bionic, Focal, Impish, Jammy and Kinetic
1939281 Please provide update for CVE-2021-36740 (VSV00007 Varnish HTTP/2 Request Smuggling Attack)
CVE-2022-23959 In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r


About   -   Send Feedback to @ubuntu_updates