ELSA-2025-8337

ELSA-2025-8337 - varnish security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-06-02

Description


[6.6.2-6.1]
- Resolves: RHEL-89700 - varnish: request smuggling attacks (CVE-2025-47905)


Related CVEs


CVE-2025-47905

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) varnish-6.6.2-6.el9_6.1.src.rpm52effb19b0734be9db3f3d5e4835ea8aee2000ecb0dfc5933f264201389beb63-ol9_aarch64_appstream
varnish-6.6.2-6.el9_6.1.src.rpm52effb19b0734be9db3f3d5e4835ea8aee2000ecb0dfc5933f264201389beb63-ol9_aarch64_codeready_builder
varnish-6.6.2-6.el9_6.1.aarch64.rpmae3b217b3fd065646f0bef85388d344e395a0692e37c29edeb31935a1819d052-ol9_aarch64_appstream
varnish-devel-6.6.2-6.el9_6.1.aarch64.rpm3a41ff9b9daf487a32382317288bac831985d219640d0b30744a38936bba669a-ol9_aarch64_codeready_builder
varnish-docs-6.6.2-6.el9_6.1.aarch64.rpmbb3e9504b54782014b693184cde65a5325b8cbe6d0fd997bae63e694bddc9a1f-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) varnish-6.6.2-6.el9_6.1.src.rpm52effb19b0734be9db3f3d5e4835ea8aee2000ecb0dfc5933f264201389beb63-ol9_x86_64_appstream
varnish-6.6.2-6.el9_6.1.src.rpm52effb19b0734be9db3f3d5e4835ea8aee2000ecb0dfc5933f264201389beb63-ol9_x86_64_codeready_builder
varnish-6.6.2-6.el9_6.1.i686.rpm17fff96c6c753366728023eaf5f1dcc8279adc64cb3fb69515c806375e9afa8e-ol9_x86_64_appstream
varnish-6.6.2-6.el9_6.1.x86_64.rpmc70faaf4b3f974b311b4d3f2d61446662386b4a7341250777ed43114e43304d4-ol9_x86_64_appstream
varnish-devel-6.6.2-6.el9_6.1.i686.rpm8aec5f9e1cb66a259f3dc591349b26ca0285ae7e5eeb14a8224f5614b89d396a-ol9_x86_64_codeready_builder
varnish-devel-6.6.2-6.el9_6.1.x86_64.rpmcda6de239edeed9818f5c512886bedcc450ef22ecf554e27b70e079211202305-ol9_x86_64_codeready_builder
varnish-docs-6.6.2-6.el9_6.1.x86_64.rpmfc6ed62433f177cc807c5c0bd01787e967982428ce93745dbd904d2025ce5fbc-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete