varnish-6.6.2-3.el9.1

エラータID: AXSA:2023-6534:03

Release date: 
Monday, October 23, 2023 - 08:15
Subject: 
varnish-6.6.2-3.el9.1
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. varnish-6.6.2-3.el9.1.src.rpm
    MD5: 9bc76d86d9ed16ec52c707aef3cd984a
    SHA-256: c40a3ee797b00170f0cd2c4ee33f39b1e88da0201d0668502c4798bfe03bc897
    Size: 3.39 MB

Asianux Server 9 for x86_64
  1. varnish-6.6.2-3.el9.1.i686.rpm
    MD5: 65742fdc3f6ec8d86685b46fcc64a489
    SHA-256: 3ed51b6c66a1bba850904e92f30ee660b7b302dffc075a099359dc605535681d
    Size: 1.10 MB
  2. varnish-6.6.2-3.el9.1.x86_64.rpm
    MD5: 6a8c632bae7565490f30b2671aedf246
    SHA-256: 198e68744bd6ca46536adcce662fb69cf3204a237da696fa95d5e5b740853527
    Size: 1.07 MB
  3. varnish-devel-6.6.2-3.el9.1.i686.rpm
    MD5: d0f4fa3729c8a489a75a50745d144b46
    SHA-256: eb0924d396567caa6ba1139d2fb78099342bcfdf9c1ff24971fda5e6fc613564
    Size: 111.98 kB
  4. varnish-devel-6.6.2-3.el9.1.x86_64.rpm
    MD5: da69ea02329bb601f7cfd0e2c98e6401
    SHA-256: a062596c220707fe861758b1bf0ffd5b0c030fdc20ca51452b11868a1d120203
    Size: 111.97 kB
  5. varnish-docs-6.6.2-3.el9.1.x86_64.rpm
    MD5: aa2a429decd735977b55e8b895cba2e6
    SHA-256: 4fc1d810bfe81b84d040580b031c292fb6c42f4994baf4b7bb9f2efb32b65a69
    Size: 646.08 kB