Alerts This Week
Warning Icon 1 905
Alerts This Week
Warning Icon 1 905

Fedora 44 vmod-querystring Critical Security Fix VSV00019

fedora
Calendar Grey June 12, 2026
Dist Fedora Esm H88
Update for Fedora 44 includes vmod-querystring security release addressing VSV00019, enhancing Varnish Cache operation.
New upstream release varnish-8.0.2, a security release

Summary

The purpose of this module is to give you a fine-grained control over a URL's

query-string in Varnish Cache. It's possible to remove the query-string, clean

it, sort its parameters or filter it to only keep a subset of them.

This can greatly improve your hit ratio and efficiency with Varnish, because

by default two URLs with the same path but different query-strings are also

different. This is what the RFCs mandate but probably not what you usually

want for your web site or application.

A query-string is just a character string starting after a question mark in a

URL. But in a web context, it is usually a structured key/values store encoded

with the `application/x-www-form-urlencoded' media type. This module deals

with this kind of query-strings.

Update Information:

New upstream release varnish-8.0.2, a security release. Includes fix for VSV00019. Dependent packages are included in this update.

Topics%20covered

Topics Covered

security advisory security issue fedora critical security release querystring

Change Log

* Tue Jun 2 2026 Dridi Boukelmoune - 2.0.3-13 - Rebuilt for varnish-8.0.2.1

References

Fedora Update Notification FEDORA-2026-2148c0e80b 2026-06-13 01:09:32.029605+00:00 Name : vmod-querystring Product : Fedora 44 Version : 2.0.3 Release : 13.fc44 URL : https://github.com/dridi/libvmod-querystring Summary : QueryString module for Varnish Cache Description : The purpose of this module is to give you a fine-grained control over a URL's query-string in Varnish Cache. It's possible to remove the query-string, clean it, sort its parameters or filter it to only keep a subset of them. This can greatly improve your hit ratio and efficiency with Varnish, because by default two URLs with the same path but different query-strings are also different. This is what the RFCs mandate but probably not what you usually want for your web site or application. A query-string is just a character string starting after a question mark in a URL. But in a web context, it is usually a structured key/values store encoded with the `application/x-www-form-urlencoded' media type. This module deals with this kind of query-strings.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2148c0e80b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: vmod-querystring
Product: Fedora 44
Version: 2.0.3
Release: 13.fc44
URL: https://github.com/dridi/libvmod-querystring
Summary: QueryString module for Varnish Cache

Topics%20covered

Topics Covered

security advisory security issue fedora critical security release querystring

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here