Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
89
security advisoryfedoraimportantFedora 43 Varnish Important Security Release CVE-2025-8671 2026-7f36ec4c65
Update to latest 7.7.x release available, a security release. Includes fixes for VSV00017 aka CVE-2025-8671, aAdded patches for for VSV00018 aka CVE-2026-34475, added patches for for VSV00019.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-7f36ec4c65 2026-07-01 01:21:48.846180+00:00 -------------------------------------------------------------------------------- Name : varnish Product : Fedora 43 Version : 7.7.3 Release : 2.fc43 URL : https://www.varnish-cache.org/ Summary : High-performance HTTP accelerator Description : This is Varnish Cache, a high-performance HTTP accelerator. Varnish Cache stores web pages in memory so web servers don’t have to create the same web page over and over again. Varnish Cache serves pages much faster than any application server; giving the website a significant speed up. Documentation wiki and additional information about Varnish Cache is available on: https://www.varnish-cache.org/ -------------------------------------------------------------------------------- Update Information: Update to latest 7.7.x release available, a security release. Includes fixes for VSV00017 aka CVE-2025-8671, aAdded patches for for VSV00018 aka CVE-2026-34475, added patches for for VSV00019. -------------------------------------------------------------------------------- ChangeLog: * Mon Jun 15 2026 Ingvar Hagelund - 7.7.3-2 - Update to latest 7.7.x release available, a security release - Includes fixes for VSV00017 aka CVE-2025-8671 - Added patches for for VSV00018 aka CVE-2026-34475 - Added patches for for VSV00019 * Fri Jul 25 2025 Luboš Uhliarik - 7.7.1-4 - bundle jemalloc in RHEL * Fri Jul 25 2025 Fedora Release Engineering - 7.7.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Thu May 22 2025 Ingvar Hagelund - 7.7.1-2 - Correct ABI and VRT versions - Pulled el7 support - Use systemd setup for users * Tue May 20 2025 Luboš Uhliarik - 7.7.1-1 -new version 7.7.1 * Thu Mar 27 2025 Ingvar Hagelund - 7.7.0-2 - Fix for eln build (merged from yselkowitz) - Fix for failing h2 switch check. Enabling full test suite again * Mon Mar 24 2025 Ingvar Hagelund - 7.7.0-1 - New upstream release - fedora now has completed the bin/sbin merge * Sun Jan 19 2025 Fedora Release Engineering - 7.6.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Mon Dec 2 2024 Ingvar Hagelund - 7.6.1-1 - New upstream release * Mon Sep 16 2024 Ingvar Hagelund - 7.6.0-1 - New upstream release - Updated checkout of pkg-varnish * Sat Jul 20 2024 Fedora Release Engineering - 7.5.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7f36ec4c65' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Latest Fedora 43 Varnish security release fixes critical issues revealed in multiple CVEs to enhance performance and reliability.. Varnish Cache update, Fedora 43 security release, HTTP accelerator security, CVE-2025-8671 fixes, security advisories. . Severity: Important. LinuxSecurity.com Team
Jun 30, 2026
•Important
Fedora
98
security advisoryunauthorized accessred hatRed Hat 7.0 RHSA-2001:097-04 Critical: Squid Unauthorized Access Issue
If Squid wasconfigured in accelerator-only mode, it was possible for remote usersto portscan machines through the Squid proxy, potentially allowing foraccess to machines not otherwise available.. ` --------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New squid packages for Red Hat Linux 7.0 Advisory ID: RHSA-2001:097-04 Issue date: 2001-07-12 Updated on: 2001-07-19 Product: Red Hat Linux Keywords: squid http_accel_host http_accel_with_proxy Cross references: Obsoletes: --------------------------------------------------------------------- 1. Topic: New squid packages are available for Red Hat Linux 7.0 that fix a possible security problem with Squid's HTTP accelerator feature. If Squid was configured in accelerator-only mode, it was possible for remote usersto portscan machines through the Squid proxy, potentially allowing for access to machines not otherwise available. It is recommended that users who use Squid in accelerator-only mode update to the fixed packages. Note that Red Hat Linux 7.1 is not affected by this vulnerability, nor are releases prior to Red Hat Linux 7.0. 2. Relevant releases/architectures: Red Hat Linux 7.0 - alpha, i386 3. Problem description: If Squid is configured with 'httpd_accel_host ' and 'httpd_accel_with_proxy off', access control lists will not be enabled. This could allow any remote user to use the squid server to access other sites, potentially ones that they could not reach otherwise. Thanks go to Paul Nasrat for notifying us of this vulnerability and to the Squid team for providing the patch. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. To update all RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will beupdated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 5. Bug IDs fixed ( for more info): 48026 - Squid passes acl's in httpd_accel mode in squid-2.3.STABLE4 6. RPMs required: Red Hat Linux 7.0: SRPMS: alpha: i386: 7. Verification: MD5 sum Package Name -------------------------------------------------------------------------- a72ff722df226623a845d667959b552b 7.0/en/os/SRPMS/squid-2.3.STABLE4-9.7.src.rpm 433b3aba62f07f7d151b95f75339ade7 7.0/en/os/alpha/squid-2.3.STABLE4-9.7.alpha.rpm adad3217cd16346eb5dcfa13a46d6289 7.0/en/os/i386/squid-2.3.STABLE4-9.7.i386.rpm These packages are GPG signed by Red Hat, Inc. for security. Our key is available at: You can verify each package with the following command: rpm --checksig If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg 8. References: Copyright(c) 2000, 2001 Red Hat, Inc. `. Critical advisory for Red Hat 7.0 addressing unauthorized access risks via Squid proxy. Immediate patch recommended.. Red Hat Squid Update, Security Advisory, Squid Access Control Fix, Linux Security Patch. . Severity: Critical. LinuxSecurity.com Team
Jul 20, 2001
•Critical
Red Hat
98
security advisoryred hatcriticalRed Hat Linux 7.0 RHSA-2001:097-04 Critical: Squid ACL Bypass Issue
New squid packages are available for Red Hat Linux 7.0 that fix a possible security problem with Squid's HTTP accelerator feature.. ` --------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New squid packages for Red Hat Linux 7.0 Advisory ID: RHSA-2001:097-04 Issue date: 2001-07-12 Updated on: 2001-07-19 Product: Red Hat Linux Keywords: squid http_accel_host http_accel_with_proxy Cross references: Obsoletes: --------------------------------------------------------------------- 1. Topic: New squid packages are available for Red Hat Linux 7.0 that fix a possible security problem with Squid's HTTP accelerator feature. If Squid was configured in accelerator-only mode, it was possible for remote usersto portscan machines through the Squid proxy, potentially allowing for access to machines not otherwise available. It is recommended that users who use Squid in accelerator-only mode update to the fixed packages. Note that Red Hat Linux 7.1 is not affected by this vulnerability, nor are releases prior to Red Hat Linux 7.0. 2. Relevant releases/architectures: Red Hat Linux 7.0 - alpha, i386 3. Problem description: If Squid is configured with 'httpd_accel_host ' and 'httpd_accel_with_proxy off', access control lists will not be enabled. This could allow any remote user to use the squid server to access other sites, potentially ones that they could not reach otherwise. Thanks go to Paul Nasrat for notifying us of this vulnerability and to the Squid team for providing the patch. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. To update all RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the listwill not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 5. Bug IDs fixed ( for more info): 48026 - Squid passes acl's in httpd_accel mode in squid-2.3.STABLE4 6. RPMs required: Red Hat Linux 7.0: SRPMS: alpha: i386: 7. Verification: MD5 sum Package Name -------------------------------------------------------------------------- a72ff722df226623a845d667959b552b 7.0/en/os/SRPMS/squid-2.3.STABLE4-9.7.src.rpm 433b3aba62f07f7d151b95f75339ade7 7.0/en/os/alpha/squid-2.3.STABLE4-9.7.alpha.rpm adad3217cd16346eb5dcfa13a46d6289 7.0/en/os/i386/squid-2.3.STABLE4-9.7.i386.rpm These packages are GPG signed by Red Hat, Inc. for security. Our key is available at: You can verify each package with the following command: rpm --checksig If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg 8. References: Copyright(c) 2000, 2001 Red Hat, Inc. `. Recent squid updates for Red Hat Linux 7.0 resolve a significant security flaw related to an ACL circumvention, potentially enabling unauthorized access for unprivileged users.. Squid Update, Red Hat Advisory, HTTP Accelerator Issue, Access Control Fix. . Severity: Critical. LinuxSecurity.com Team
Jul 19, 2001
•Critical
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!