Most recent entries from all

ALSA-2022:0418 — Important: varnish:6 security update

Affected: AlmaLinux:8: varnish, AlmaLinux:8: varnish-devel, AlmaLinux:8: varnish-docs, AlmaLinux:8: varnish-modules

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* varnish: HTTP/1 request smuggling vulnerability (CVE-2022-23959)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BIT-varnish-2022-23959

Affected: Bitnami: varnish

In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections.

EUVD-2026-13962

fkie_cve-2022-23959

GHSA-fcqv-r8cv-f88h

gsd-2022-23959

OESA-2022-1623 — varnish security update

Affected: openEuler:20.03-LTS-SP1: varnish, openEuler:20.03-LTS-SP2: varnish, openEuler:20.03-LTS-SP3: varnish, openEuler:22.03-LTS: varnish

This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x, depending on your architecture. Security Fix(es): In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 connections(CVE-2022-23959)

openSUSE-SU-2022:0148-1 — Security update for varnish

Security update for varnish

RHSA-2022:0420 — Red Hat Security Advisory: varnish:6 security update

varnish: HTTP/1 request smuggling vulnerability

UBUNTU-CVE-2022-23959

Affected: Ubuntu:14.04:LTS: varnish, Ubuntu:Pro:16.04:LTS: varnish, Ubuntu:18.04:LTS: varnish, Ubuntu:20.04:LTS: varnish, Ubuntu:22.04:LTS: varnish, Ubuntu:24.04:LTS: varnish, Ubuntu:25.10: varnish, Ubuntu:26.04:LTS: varnish

WID-SEC-W-2022-0198 — Varnish HTTP Cache: Schwachstelle ermöglicht Offenlegung von Informationen und Cache Poisoning

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Varnish HTTP Cache ausnutzen, um Informationen offenzulegen und ein Cache Poisoning zu verursachen.