Summary
[6.6.2-6.1]
- Resolves: RHEL-89700 - varnish: request smuggling attacks (CVE-2025-47905)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | varnish | 0:6.6.2-6.el9_6.1 |
| Oracle Linux · 9 | varnish-devel | 0:6.6.2-6.el9_6.1 |
| Oracle Linux · 9 | varnish-docs | 0:6.6.2-6.el9_6.1 |
Vulnerabilities 1
-
Medium 5.4
Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via …