Red Hat Security AdvisoryRHSA-2025:8336
varnish:6 security update
Released 2025-06-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) varnish-6.0.13-1.module+el8.10.0+23111+831cc069.1.aarch64::varnish:6, varnish-6.0.13-1.module+el8.10.0+23111+831cc069.1.ppc64le::varnish:6, varnish-6.0.13-1.module+el8.10.0+23111+831cc069.1.s390x::varnish:6 +15
Fixes 1 record
Priority LOW 25
Varnish Cache before 7.6.3 and 7.7 before 7.7.1, and Varnish Enterprise before 6.0.13r14, allow client-side desync via HTTP/1 requests, because the product incorrectly permits CRLF to be skipped to delimit chunk boundari…
CVSS 3.1MEDIUM 5.4· Network · No auth · No interaction · EPSS 0.00367 · Published 2025-05-13 · Fixed in 6.0.14 LTS, 7.6.3 +1 CWE-444
