Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Oracle Linux 9 ELSA-2024-1691 Important Varnish Update for DoS

oracle
Calendar Grey April 10, 2024
Oracle Linux Logo Esm H88
Critical Oracle Linux Security Notification ELSA-2024-1691 outlines essential varnish enhancements and strategies for risk mitigation.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[6.6.2-4.1] - Resolves: RHEL-30387 - varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156) [6.6.2-4] - Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487 - Resolves: RHEL-12817

Topics%20covered

Topics Covered

security advisory update DoS important mitigation Oracle Linux Varnish

SRPMs

https://oss.oracle.com:443/ol9/SRPMS-updates//varnish-6.6.2-4.el9_3.1.src.rpm

x86_64

varnish-6.6.2-4.el9_3.1.i686.rpm varnish-6.6.2-4.el9_3.1.x86_64.rpm varnish-docs-6.6.2-4.el9_3.1.x86_64.rpm varnish-devel-6.6.2-4.el9_3.1.i686.rpm varnish-devel-6.6.2-4.el9_3.1.x86_64.rpm

aarch64

varnish-6.6.2-4.el9_3.1.aarch64.rpm varnish-docs-6.6.2-4.el9_3.1.aarch64.rpm varnish-devel-6.6.2-4.el9_3.1.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2024-30156

Topics%20covered

Topics Covered

security advisory update DoS important mitigation Oracle Linux Varnish

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here