Alerts This Week
Warning Icon 1 1,295
Alerts This Week
Warning Icon 1 1,295

Fedora 43 vmod-querystring Important Security Update CVE-2025-8671

fedora
Calendar Grey June 30, 2026
Dist Fedora Esm H88
Security update for Fedora 43 vmod-querystring fixes vulnerabilities CVE-2025-8671, CVE-2026-34475 with insights on system integrity.
Update to latest 7.7.x release available, a security release

Summary

The purpose of this module is to give you a fine-grained control over a URL's

query-string in Varnish Cache. It's possible to remove the query-string, clean

it, sort its parameters or filter it to only keep a subset of them.

This can greatly improve your hit ratio and efficiency with Varnish, because

by default two URLs with the same path but different query-strings are also

different. This is what the RFCs mandate but probably not what you usually

want for your web site or application.

A query-string is just a character string starting after a question mark in a

URL. But in a web context, it is usually a structured key/values store encoded

with the `application/x-www-form-urlencoded' media type. This module deals

with this kind of query-strings.

Update Information:

Update to latest 7.7.x release available, a security release. Includes fixes for VSV00017 aka CVE-2025-8671, aAdded patches for for VSV00018 aka CVE-2026-34475, added patches for for VSV00019.

Change Log

* Fri Jun 19 2026 Dridi Boukelmoune - 2.0.3-11 - Rebuilt for varnish-7.7.3

References

Fedora Update Notification FEDORA-2026-7f36ec4c65 2026-07-01 01:21:48.846180+00:00 Name : vmod-querystring Product : Fedora 43 Version : 2.0.3 Release : 11.fc43 URL : https://github.com/dridi/libvmod-querystring Summary : QueryString module for Varnish Cache Description : The purpose of this module is to give you a fine-grained control over a URL's query-string in Varnish Cache. It's possible to remove the query-string, clean it, sort its parameters or filter it to only keep a subset of them. This can greatly improve your hit ratio and efficiency with Varnish, because by default two URLs with the same path but different query-strings are also different. This is what the RFCs mandate but probably not what you usually want for your web site or application. A query-string is just a character string starting after a question mark in a URL. But in a web context, it is usually a structured key/values store encoded with the `application/x-www-form-urlencoded' media type. This module deals with this kind of query-strings.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7f36ec4c65' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: vmod-querystring
Product: Fedora 43
Version: 2.0.3
Release: 11.fc43
Summary: QueryString module for Varnish Cache

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here