Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Fedora 42: Varnish Update - Low Risk Client-Side Desynchronization

fedora
Calendar Grey April 11, 2025
Dist Fedora Esm H88
The latest Varnish update addresses a minor client-side desynchronization bug. Please refer to the documentation for installation guidance.
Security: This update includes fix for VSV00015 aka CVE-2025-30346

Summary

This is Varnish Cache, a high-performance HTTP accelerator.

Varnish Cache stores web pages in memory so web servers don’t have to

create the same web page over and over again. Varnish Cache serves

pages much faster than any application server; giving the website a

significant speed up.

Documentation wiki and additional information about Varnish Cache is

available on: cache.org//

Update Information:

Security: This update includes fix for VSV00015 aka CVE-2025-30346. Upstream considers this a low risk problem. For details, refer to cache.org/security/VSV00015.html.

Topics%20covered

Topics Covered

security advisory software update Fedora varnish client-side desynchronization low risk issue

Change Log

* Mon Mar 24 2025 Ingvar Hagelund - 7.6.1-5 - Added fix prohibiting build on s390x * Mon Mar 24 2025 Ingvar Hagelund - 7.6.1-4 - Added security patch VSV00015 aka CVE-2025-30346, rhbz#2354008 * Sun Jan 19 2025 Fedora Release Engineering - 7.6.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

References


[ 1 ] Bug #2354008 - CVE-2025-30346 varnish: Client-Side Desynchronization in Varnish Cache https://bugzilla.redhat.com/show_bug.cgi?id=2354008

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-b7f0c55e00' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
low
Lowest
Low
Medium
High
Critical

Name: varnish
Product: Fedora 42
Version: 7.6.1
Release: 5.fc42
URL: cache.org//
Summary: High-performance HTTP accelerator

Topics%20covered

Topics Covered

security advisory software update Fedora varnish client-side desynchronization low risk issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here