openSUSE: 2022:10104-1 important: varnish
Description
This update for varnish fixes the following issues: Update to release 7.1.1: - CVE-2022-38150: Resolve a denial of service attack involving reason phrases (boo#1202350).
Patch
Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP4: zypper in -t patch openSUSE-2022-10104=1
Package List
- openSUSE Backports SLE-15-SP4 (aarch64 i586 ppc64le s390x x86_64): libvarnishapi3-7.1.1-bp154.2.6.1 varnish-7.1.1-bp154.2.6.1 varnish-devel-7.1.1-bp154.2.6.1
References
https://www.suse.com/security/cve/CVE-2022-38150.html https://bugzilla.suse.com/1202350