VDB
WID-SEC-W-2025-1005
WID-SEC-W-2025-1005
PUBLISHED
Varnish ist ein Reverse-Proxy, der als HTTP-Beschleuniger verwendet wird.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian Linux | ||
| Open Source Varnish HTTP Cache 7.6.3 | ||
| Open Source Varnish HTTP Cache <7.7.1 | ||
| Open Source Varnish HTTP Cache 7.7.1 | ||
| Red Hat Enterprise Linux | ||
| Open Source Varnish HTTP Cache 6.0.13r14 Enterprise | ||
| Open Source Varnish HTTP Cache <6.0.13r14 Enterprise | ||
| Open Source Varnish HTTP Cache 6.0.14 LTS | ||
| Open Source Varnish HTTP Cache <7.6.3 | ||
| Open Source Arch Linux | ||
| Oracle Linux | ||
| Fedora Linux | ||
| Open Source Varnish HTTP Cache <6.0.14 LTS |
Timeline
- May 12, 2025 CVE Published
- Jul 29, 2025 CVE Updated
- Apr 1, 2026 Distribution Patch
- Apr 1, 2026 Distribution Patch
- Apr 1, 2026 Distribution Patch
- Apr 1, 2026 Distribution Patch
- Apr 1, 2026 Distribution Patch
- Apr 1, 2026 Distribution Patch
- Apr 1, 2026 Distribution Patch
- Apr 1, 2026 Distribution Patch
- Apr 1, 2026 Distribution Patch
- Apr 1, 2026 Distribution Patch
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1005.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1005 advisory
- https://varnish-cache.org/security/VSV00016.html url
- https://varnish-cache.org/lists/pipermail/varnish-announce/2025-May/000767.html url
- https://lists.debian.org/debian-security-announce/2025/msg00081.html url
- https://lists.debian.org/debian-security-announce/2025/msg00082.html url
- https://security.archlinux.org/ASA-202505-13 url
- https://access.redhat.com/errata/RHSA-2025:8294 url
- https://access.redhat.com/errata/RHSA-2025:8310 url
- https://lists.debian.org/debian-lts-announce/2025/05/msg00040.html url
- https://access.redhat.com/errata/RHSA-2025:8336 url
- https://access.redhat.com/errata/RHSA-2025:8337 url
- https://access.redhat.com/errata/RHSA-2025:8340 url
- https://access.redhat.com/errata/RHSA-2025:8351 url
- https://access.redhat.com/errata/RHSA-2025:8350 url
- https://access.redhat.com/errata/RHSA-2025:8349 url
- https://access.redhat.com/errata/RHSA-2025:8339 url
- https://linux.oracle.com/errata/ELSA-2025-8337.html url
- https://linux.oracle.com/errata/ELSA-2025-8336.html url
- https://access.redhat.com/errata/RHSA-2025:8550 url
…and 2 more