High ELSA-2025-8336 1 CVE

Important: varnish:6 security update (Oracle Linux 8)

Published Jun 2, 2025 · Updated Jun 2, 2025

Ecosystem: Oracle Linux

Summary

varnish
[6.0.13-1.1]
- Resolves: RHEL-89695 - varnish: request smuggling attacks (CVE-2025-47905)

varnish-modules

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 8	varnish	0:6.0.13-1.module+el8.10.0+90594+95ad0b53.1
Oracle Linux · 8	varnish-devel	0:6.0.13-1.module+el8.10.0+90594+95ad0b53.1
Oracle Linux · 8	varnish-docs	0:6.0.13-1.module+el8.10.0+90594+95ad0b53.1
Oracle Linux · 8	varnish-modules	0:0.15.0-6.module+el8.10.0+90594+95ad0b53

Vulnerabilities 1

Medium 5.4

CVE-2025-47905

Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via …

varnish-software Varnish Cache varnish varnish Debian Ubuntu Alpine

May 13, 2025