Back Linuxsecurity

Fedora 44 Varnish 8.0.2 Important Security Fix VSV00019

Linuxsecurity •LinuxSecurity Advisories • June 13, 2026

New upstream release varnish-8.0.2, a security release. Includes fix for VSV00019. Dependent packages are included in this update.

* Tue May 26 2026 Ingvar Hagelund - 8.0.2-1 - New upstream release: A security release - Includes fix for VSV00019 * Sun May 17 2026 Ingvar Hagelund - 8.0.1-1 - New upstream release: A security relase - Includes fix for VSV00018, CVE-2026-34475

Fedora Update Notification FEDORA-2026-2148c0e80b 2026-06-13 01:09:32.029605+00:00 Name : varnish Product : Fedora 44 Version : 8.0.2 Release : 1.fc44 URL : Summary : High-performance HTTP accelerator Description : This is Varnish Cache, a high-performance HTTP accelerator. Varnish Cache stores web pages in memory so web servers don’t have to create the same web page over and over again. Varnish Cache serves pages much faster than any application server; giving the website a significant speed up. Documentation wiki and additional information Varnish Cache is available on:

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2148c0e80b' at the command line. For more information, refer to the dnf documentation available at

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 44 Varnish 8.0.2 Security Fix Addresses Vulnerability VSV00019 On June 13, 2026, Fedora released updates for multiple packages, including Varnish 8.0.2, which addresses a critical security vulnerability identified as VSV00019. This vulnerability affects various components within Fedora 44, including vmod-querystring, collectd, varnish-modules, and vmod-uuid. The updates were prompted by the need to patch the security flaw that could potentially allow unauthorized access or manipulation of web traffic. Users are advised to upgrade their systems using the provided command to mitigate risks associated with this vulnerability. The updates include dependent packages that ensure comprehensive protection against the identified threats. As of the latest reports, there is no indication of active exploitation of this vulnerability, but users are encouraged to apply the patches promptly. The security release emphasizes the importance of maintaining updated software to safeguard against emerging threats. 5 sources 58

Extracted Entities

CVEs (1)

CVE-2026-34475