File _patchinfo of Package patchinfo.17738

<patchinfo incident="17738">
  <issue tracker="cve" id="2022-45059"/>
  <issue tracker="cve" id="2022-45060"/>
  <issue tracker="bnc" id="1205243">VUL-0: CVE-2022-45059: varnish: HTTP request smuggling via hop-by-hop headers</issue>
  <issue tracker="bnc" id="1205242">VUL-0: CVE-2022-45060: varnish: HTTP request forgery via character injection through HTTP/2 pseudo-headers</issue>
  <packager>jengelh</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for varnish</summary>
  <description>This update for varnish fixes the following issues:

Update to 7.2.1:

- CVE-2022-45059: Fixed a HTTP request smuggling via hop-by-hop headers (boo#1205243).
- CVE-2022-45060: Fixed a HTTP request forgery via character injection through HTTP/2 pseudo-headers (boo#1205242).
</description>
</patchinfo>
openSUSE Build Service is sponsored by