Back Linuxsecurity

Fedora 43 Varnish Important Security Release CVE-2025-8671 2026

Linuxsecurity •LinuxSecurity Advisories • July 1, 2026

Update to latest 7.7.x release available, a security release. Includes fixes for VSV00017 aka CVE-2025-8671, aAdded patches for for VSV00018 aka CVE-2026-34475, added patches for for VSV00019.

* Mon Jun 15 2026 Ingvar Hagelund - 7.7.3-2 - Update to latest 7.7.x release available, a security release - Includes fixes for VSV00017 aka CVE-2025-8671 - Added patches for for VSV00018 aka CVE-2026-34475 - Added patches for for VSV00019 * Fri Jul 25 2025 Luboš Uhliarik - 7.7.1-4 - bundle jemalloc in RHEL * Fri Jul 25 2025 Fedora Release Engineering - 7.7.1-3 - Rebuilt for * Thu May 22 2025 Ingvar Hagelund - 7.7.1-2 - Correct ABI and VRT versions - Pulled el7 support - Use systemd setup for users * Tue May 20 2025 Luboš Uhliarik - 7.7.1-1 - new version 7.7.1 * Thu Mar 27 2025 Ingvar Hagelund - 7.7.0-2 - Fix for eln build (merged from yselkowitz) - Fix for failing h2 switch check. Enabling full test suite again * Mon Mar 24 2025 Ingvar Hagelund - 7.7.0-1 - New upstream release - fedora now has completed the bin/sbin merge * Sun Jan 19 2025 Fedora Release Engineering - 7.6.1-2 - Rebuilt for * Mon Dec 2 2024 Ingvar Hagelund - 7.6.1-1 - New upstream release * Mon Sep 16 2024 Ingvar Hagelund - 7.6.0-1 - New upstream release - Updated checkout of pkg-varnish * Sat Jul 20 2024 Fedora Release Engineering - 7.5.0-2 - Rebuilt for

Fedora Update Notification FEDORA-2026-7f36ec4c65 2026-07-01 01:21:48.846180+00:00 Name : varnish Product : Fedora 43 Version : 7.7.3 Release : 2.fc43 URL : Summary : High-performance HTTP accelerator Description : This is Varnish Cache, a high-performance HTTP accelerator. Varnish Cache stores web pages in memory so web servers don’t have to create the same web page over and over again. Varnish Cache serves pages much faster than any application server; giving the website a significant speed up. Documentation wiki and additional information Varnish Cache is available on:

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7f36ec4c65' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Security Updates for Fedora 43 Address CVE-2025-8671 and CVE-2026-34475 On July 1, 2026, Fedora released multiple security updates for version 43, addressing vulnerabilities CVE-2025-8671 and CVE-2026-34475. These updates include patches for Varnish Cache and associated modules, which are critical for web performance and security. CVE-2025-8671, published on August 13, 2025, had its first public proof of concept (PoC) on August 19, 2025. CVE-2026-34475 was published on March 27, 2026, with a PoC available by April 30, 2026. The updates affect several components, including Varnish, vmod-querystring, collectd, and varnish-modules. Users are advised to upgrade to the latest versions to mitigate risks associated with these vulnerabilities. The updates can be installed using the 'dnf' package manager. The patches aim to enhance security and performance for Fedora 43 users. 4 sources 74

Extracted Entities

CVEs (2)

CVE-2025-8671 CVE-2026-34475