Lucene search

K
oraclelinuxOracleLinuxELSA-2021-2988
HistoryAug 03, 2021 - 12:00 a.m.

varnish:6 security update

2021-08-0300:00:00
linux.oracle.com
18
varnish 6
security update
http/2
request smuggling
content-length header
post request

EPSS

0.007

Percentile

79.9%

varnish
[6.0.6-2.1]

  • Resolves: #1982861 - CVE-2021-36740 varnish:6/varnish: HTTP/2 request
    smuggling attack via a large Content-Length header for a POST request
    varnish-modules
    [0.15.0-5]
  • Related: #1795673 - RFE: rebase varnish:6 to latest 6.0.x LTS