Back Linuxsecurity

Fedora 43 vmod-querystring Important Security Update CVE-2025

Linuxsecurity •LinuxSecurity Advisories • July 1, 2026

Update to latest 7.7.x release available, a security release. Includes fixes for VSV00017 aka CVE-2025-8671, aAdded patches for for VSV00018 aka CVE-2026-34475, added patches for for VSV00019.

* Fri Jun 19 2026 Dridi Boukelmoune - 2.0.3-11 - Rebuilt for varnish-7.7.3

Fedora Update Notification FEDORA-2026-7f36ec4c65 2026-07-01 01:21:48.846180+00:00 Name : vmod-querystring Product : Fedora 43 Version : 2.0.3 Release : 11.fc43 URL : Summary : QueryString module for Varnish Cache Description : The purpose of this module is to give you a fine-grained control over a URL's query-string in Varnish Cache. It's possible to remove the query-string, clean it, sort its parameters or filter it to only keep a subset of them. This can greatly improve your hit ratio and efficiency with Varnish, because by default two URLs with the same path but different query-strings are also different. This is what the RFCs mandate but probably not what you usually want for your web site or application. A query-string is just a character string starting after a question mark in a URL. But in a web context, it is usually a structured key/values store encoded with the `application/x-www-form-urlencoded' media type. This module deals with this kind of query-strings.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7f36ec4c65' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Security Updates for Fedora 43 Address CVE-2025-8671 and CVE-2026-34475 On July 1, 2026, Fedora released multiple security updates for version 43, addressing vulnerabilities CVE-2025-8671 and CVE-2026-34475. These updates include patches for Varnish Cache and associated modules, which are critical for web performance and security. CVE-2025-8671, published on August 13, 2025, had its first public proof of concept (PoC) on August 19, 2025. CVE-2026-34475 was published on March 27, 2026, with a PoC available by April 30, 2026. The updates affect several components, including Varnish, vmod-querystring, collectd, and varnish-modules. Users are advised to upgrade to the latest versions to mitigate risks associated with these vulnerabilities. The updates can be installed using the 'dnf' package manager. The patches aim to enhance security and performance for Fedora 43 users. 4 sources 74

Extracted Entities

CVEs (2)

CVE-2025-8671 CVE-2026-34475