High ELSA-2025-8550 1 CVE

Important: varnish security update (Oracle Linux 10)

Published Jun 26, 2025 · Updated Jun 26, 2025

Ecosystem: Oracle Linux

Summary

[7.6.1-2.el10_0.1]
- Resolves: RHEL-89691 - varnish: request smuggling attacks (CVE-2025-47905)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 10	varnish	0:7.6.1-2.el10_0.1
Oracle Linux · 10	varnish-devel	0:7.6.1-2.el10_0.1
Oracle Linux · 10	varnish-docs	0:7.6.1-2.el10_0.1

Vulnerabilities 1

Medium 5.4

CVE-2025-47905

Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via …

varnish-software Varnish Cache varnish varnish Debian Ubuntu Alpine

May 13, 2025