Red Hat Security AdvisoryRHSA-2025:8294
varnish:6 security update
Released 2025-05-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.8.8) varnish-6.0.8-3.module+el8.8.0+23121+d8c7990e.3.aarch64::varnish:6, varnish-6.0.8-3.module+el8.8.0+23121+d8c7990e.3.ppc64le::varnish:6, varnish-6.0.8-3.module+el8.8.0+23121+d8c7990e.3.s390x::varnish:6 +15
Fixes 1 record
Priority LOW 25
Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via HTTP/1 requests, because the product incorrectly permits CRLF to be skipped to delimit chunk boundari…
CVSS 3.1MEDIUM 5.4· Network · No auth · No interaction · EPSS 0.00367 · Published 2025-05-13 · Fixed in 6.0.14 LTS, 7.6.3 +1 CWE-444
