tocsin

Debian/varnish: medium 4.8

Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.

Action: Upgrade varnish to 7.1.1-2+deb12u1 or later.

Affected

introducedfixedlast affected
07.1.1-2+deb12u1-

Fixed versions

7.1.1-2+deb12u1

Sources

published · modified · JSON