-
Fri Apr 19 2024 Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 6.0.13-1
- new version 6.0.13
- HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)
-
Thu Oct 26 2023 Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-2.3
- Resolves: #2246295 - CVE-2023-44487 rh-varnish6-varnish: HTTP/2: Multiple
HTTP/2 enabled web servers are vulnerable to a DDoS attack(Rapid Reset Attack)
-
Mon Nov 14 2022 Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-2.2
- Resolves: #2142097 - CVE-2022-45060 rh-varnish6-varnish: varnish: Request
Forgery Vulnerability
-
Mon May 16 2022 Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-2.1
- Resolves: #2081576 - CVE-2022-23959 rh-varnish6-varnish: varnish: HTTP/1
request smuggling vulnerability
-
Thu Jul 22 2021 Luboš Uhliarik <luhliari@redhat.com> - 6.0.8-2
- new version 6.0.8
- Resolves: #1982864 - CVE-2021-36740 rh-varnish6-varnish: varnish: HTTP/2
request smuggling attack via a large Content-Length header for a POST request
-
Thu Apr 02 2020 Lubos Uhliarik <luhliari@redhat.com> - 6.0.6-1
- update to Varnish 6.0.6
- Resolves: #1819937 - rh-varnish6-varnish: varnish: remote clients may
cause Varnish to assert and restart which could result in DoS
- Resolves: #1707831 - Permissions wrong on /var/opt/rh/rh-varnish6/log/varnish
- remove unused varnish.tmpfiles
-
Tue Jan 28 2020 Lubos Uhliarik <luhliari@redhat.com> - 6.0.5-6
- Resolves: #1788975 - RFE: updated collection for Varnish 6
- update to Varnish 6.0.5
-
Thu Jan 03 2019 Lubos Uhliarik <luhliari@redhat.com> - 6.0.2-1
- Resolves: #1658671 - RFE: updated collection for Varnish 6
- update to Varnish 6.0.2
-
Wed Jul 18 2018 Luboš Uhliarik <luhliari@redhat.com> - 6.0.0-2
- update to Varnish 6.0.0
-
Fri Jan 19 2018 Luboš Uhliarik <luhliari@redhat.com> - 5.2.1-3
- Resolves: #1536402 - varnish crash with SEGFAULT on 1st use