Back Linuxsecurity

Fedora 43 Varnish-Modules Urgent Security Patch CVE-2025

Linuxsecurity •LinuxSecurity Advisories • July 1, 2026

Update to latest 7.7.x release available, a security release. Includes fixes for VSV00017 aka CVE-2025-8671, aAdded patches for for VSV00018 aka CVE-2026-34475, added patches for for VSV00019.

* Wed Jun 17 2026 Ingvar Hagelund - 0.26.0-4 - Rebuilt for varnish-7.7.3

Fedora Update Notification FEDORA-2026-7f36ec4c65 2026-07-01 01:21:48.846180+00:00 Name : varnish-modules Product : Fedora 43 Version : 0.26.0 Release : 4.fc43 URL : Summary : A collection of modules ("vmods") extending Varnish VCL Description : This is a collection of modules ("vmods") extending Varnish VCL used for describing HTTP request/response policies with additional capabilities. This collection contains the following vmods: bodyaccess, header, saintmode, tcp, var, vsthrottle, xkey

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7f36ec4c65' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Security Updates for Fedora 43 Address CVE-2025-8671 and CVE-2026-34475 On July 1, 2026, Fedora released multiple security updates for version 43, addressing vulnerabilities CVE-2025-8671 and CVE-2026-34475. These updates include patches for Varnish Cache and associated modules, which are critical for web performance and security. CVE-2025-8671, published on August 13, 2025, had its first public proof of concept (PoC) on August 19, 2025. CVE-2026-34475 was published on March 27, 2026, with a PoC available by April 30, 2026. The updates affect several components, including Varnish, vmod-querystring, collectd, and varnish-modules. Users are advised to upgrade to the latest versions to mitigate risks associated with these vulnerabilities. The updates can be installed using the 'dnf' package manager. The patches aim to enhance security and performance for Fedora 43 users. 4 sources 74

Extracted Entities

CVEs (2)

CVE-2025-8671 CVE-2026-34475

Platforms (2)

Fedora 43 Varnish