[ALSA-2025:8336] Important: varnish:6 security update
Type:
security
Severity:
important
Release date:
2025-07-02
Description:
Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up. Security Fix(es): * varnish: request smuggling attacks (CVE-2025-47905) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 varnish-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.aarch64.rpm 93f3f89a08d17ac060a62b29ffa2f4672d057f81d436be66a0a7f45aba23e359
aarch64 varnish-devel-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.aarch64.rpm a1e1bc0fc405c2efa42bdc3dbd46755a455ee274374165837bc7f8bcc78e5c45
aarch64 varnish-docs-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.aarch64.rpm d9bdebf142683c57099aeec02b912f2657afa41b0f98949315295a044c218ba0
aarch64 varnish-modules-0.15.0-6.module_el8.9.0+3826+307eaba4.aarch64.rpm f2f661431dcae89d6c0541d7cb70ed5117122e94b0a36a3e1aebe7fa0b5be922
ppc64le varnish-docs-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.ppc64le.rpm 7a91814a74997a1f7d6aa1e139fc2bbd78eb2c1d86d4329481390d041a85899a
ppc64le varnish-modules-0.15.0-6.module_el8.9.0+3826+307eaba4.ppc64le.rpm a6d0b62c2f1b717e928d01d0336b21f259247f8a26f2722952c6864b63a401f1
ppc64le varnish-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.ppc64le.rpm e2d34f742b4a8a5bcd56dd374225b2554ad0bc83d4c522ee9c6136357f9be2ff
ppc64le varnish-devel-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.ppc64le.rpm ee673d0d45880844674d9b076fdedccfffb578ffec88ce96e26ee29c0707c082
s390x varnish-modules-0.15.0-6.module_el8.9.0+3826+307eaba4.s390x.rpm 28659d37dbbca025744a92bfc64de1f5c76568a4bdb476681c359f70da0cbb6f
s390x varnish-devel-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.s390x.rpm ad7ba8fc16afe3e61e185fb109cc994d0f72a3a1686633e554cdc59c9e98ebde
s390x varnish-docs-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.s390x.rpm b057d69c3a4f1b1ff86b40b5cee00ecd50ef332994ee706b9f40bf37607d3d2a
s390x varnish-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.s390x.rpm deb24a87eb41430c1d24601798218cc3fab1c4010e15381c1711b4c0908aa823
x86_64 varnish-devel-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.x86_64.rpm 0454bf0b1564b0f905ab84be427bb72ee5410428fcae375e7aec5ec3bfcf4bd4
x86_64 varnish-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.x86_64.rpm 698b6668a1f99f096e5888e2f4c6edceec14ed4a5d08d7d206dde259df3b2619
x86_64 varnish-modules-0.15.0-6.module_el8.9.0+3826+307eaba4.x86_64.rpm c0928e93090a149a3ba407ce5f247b194d561e6622ff81cfa8a44d8f510c6a81
x86_64 varnish-docs-6.0.13-1.module_el8.10.0+4003+9759c3c1.1.x86_64.rpm e3185b4ddec04a176fb13763b8c005498fbc063452c9c89950998ddf9473a5e9
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.