Linux
varnish security updates
Patch Radar has 73 security fixes for varnish, closing 16 CVEs, 1 of which is being exploited. The newest security fix is OPENSUSE-SU-2026:22131-1 (7.7.3-bp160.1.1), released November 7, 2026.
1 exploited CVEs
Latest version
n/a
Release date not known
Security fixes
73
On record in Patch Radar
CVEs
16
Closed by those fixes
Exploited
1
Vendor report or CISA KEV
Security fixes, newest first
| Priority | Fix | Release | Fixed in | CVEs | Exploited | Released |
|---|---|---|---|---|---|---|
| High | OPENSUSE-SU-2026:22131-1 | opensuse-leap 16.0 | 7.7.3-bp160.1.1 | 2 | Nov 7, 2026 | |
| Routine | DEBIAN-CVE-2026-93894 | Debian 13.5 (trixie) | 7.7.0-3+deb13u2 | 1 | Sep 18, 2026 | |
| Routine | DEBIAN-CVE-2026-50052 | Debian 13.5 (trixie) | 7.7.0-3+deb13u1 | 1 | Jun 24, 2026 | |
| Urgent | DEBIAN-CVE-2026-34475 | Debian 13.5 (trixie) | 7.7.0-3+deb13u2 | 1 | Mar 27, 2026 | |
| High | RLSA-2025:8337 | rocky 9 | 0:6.6.2-6.el9_6.1 | 1 | Oct 4, 2025 | |
| High | RLSA-2025:8550 | rocky 10 | 0:7.6.1-2.el10_0.1 | 1 | Oct 3, 2025 | |
| High | DEBIAN-CVE-2025-8671 | Debian 13.5 (trixie) | 7.7.0-3+deb13u1 | 1 | Aug 13, 2025 | |
| High | RLSA-2025:8336 | rocky 8 | 0:6.0.13-1.module+el8.10.0+1982+334a201b.1 | 1 | Jul 29, 2025 | |
| High | ELSA-2025-8550 | ol 10 | 0:7.6.1-2.el10_0.1 | 1 | Jun 26, 2025 | |
| High | ALSA-2025:8550 | almalinux 10 | 7.6.1-2.el10_0.1 | 1 | Jun 4, 2025 | |
| High | ALSA-2025:8336 | almalinux 8 | 6.0.13-1.module_el8.10.0+4003+9759c3c1.1 | 1 | Jun 2, 2025 | |
| High | ALSA-2025:8337 | almalinux 9 | 6.6.2-6.el9_6.1 | 1 | Jun 2, 2025 | |
| High | ELSA-2025-8336 | ol 8 | 0:6.0.13-1.module+el8.10.0+90594+95ad0b53.1 | 1 | Jun 2, 2025 | |
| High | ELSA-2025-8337 | ol 9 | 0:6.6.2-6.el9_6.1 | 1 | Jun 2, 2025 | |
| High | RHSA-2025:8336 | RHEL 8 | 0:6.0.13-1.module+el8.10.0+23111+831cc069.1 | 1 | Jun 2, 2025 | |
| High | RHSA-2025:8337 | RHEL 9 | 0:6.6.2-6.el9_6.1 | 1 | Jun 2, 2025 | |
| High | DLA-4187-1 | Debian 11.6 (bullseye) | 6.5.1-1+deb11u5 | 1 | May 28, 2025 | |
| High | DEBIAN-CVE-2025-47905 | Debian 12.15 (bookworm) | 7.1.1-2+deb12u1 | 1 | May 13, 2025 | |
| High | DEBIAN-CVE-2025-47905 | Debian 13.5 (trixie) | 7.7.0-2 | 1 | May 13, 2025 | |
| High | RHSA-2025:8550 | RHEL 10 | 7.6.1-2.el10_0.1 | 1 | May 13, 2025 | |
| Routine | DSA-5918-1 | Debian 12.15 (bookworm) | 7.1.1-2+deb12u1 | 1 | May 13, 2025 | |
| Routine | DLA-4101-1 | Debian 11.6 (bullseye) | 6.5.1-1+deb11u4 | 1 | Mar 31, 2025 | |
| Routine | DEBIAN-CVE-2025-30346 | Debian 13.5 (trixie) | 7.7.0-1 | 1 | Mar 21, 2025 | |
| High | RLSA-2024:1691 | rocky 9 | 0:6.6.2-4.el9_3.1 | 1 | May 10, 2024 | |
| High | RLSA-2024:1690 | rocky 8 | 0:6.0.13-1.module+el8.9.0+1777+0acf9965 | 1 | May 6, 2024 | |
| High | ELSA-2024-1690 | ol 8 | 0:6.0.13-1.module+el8.9.0+90264+d552af1c | 1 | Apr 9, 2024 | |
| High | ELSA-2024-1691 | ol 9 | 0:6.6.2-4.el9_3.1 | 1 | Apr 9, 2024 | |
| High | ALSA-2024:1690 | almalinux 8 | 6.0.13-1.module_el8.9.0+3786+e8a73bbf.alma.1 | 1 | Apr 8, 2024 | |
| High | ALSA-2024:1691 | almalinux 9 | 6.6.2-4.el9_3.1 | 1 | Apr 8, 2024 | |
| High | RHSA-2024:1690 | RHEL 8 | 0:6.0.13-1.module+el8.9.0+21617+7578fa11 | 1 | Apr 8, 2024 | |
| High | RHSA-2024:1691 | RHEL 9 | 0:6.6.2-4.el9_3.1 | 1 | Apr 8, 2024 | |
| High | DEBIAN-CVE-2024-30156 | Debian 13.5 (trixie) | 7.5.0-1 | 1 | Mar 24, 2024 | |
| Patch now | RLSA-2023:5924 | rocky 9 | 0:6.6.2-3.el9_2.1 | 1 | 1 | Oct 24, 2023 |
| Patch now | RLSA-2023:5989 | rocky 8 | 0:6.0.8-3.module+el8.8.0+1552+3570c668.1 | 1 | 1 | Oct 24, 2023 |
| Patch now | ELSA-2023-5924 | ol 9 | 0:6.6.2-3.el9_2.1 | 1 | 1 | Oct 24, 2023 |
| Patch now | ELSA-2023-5989 | ol 8 | 0:6.0.8-3.module+el8.8.0+21197+bdc2c048.1 | 1 | 1 | Oct 24, 2023 |
| Patch now | ALSA-2023:5989 | almalinux 8 | 6.0.8-3.module_el8.8.0+3665+0b8dabc5.1.alma.1 | 1 | 1 | Oct 23, 2023 |
| Patch now | RHSA-2023:5989 | RHEL 8 | 0:6.0.8-3.module+el8.8.0+20455+bdc2c048.1 | 1 | 1 | Oct 23, 2023 |
| Patch now | ALSA-2023:5924 | almalinux 9 | 6.6.2-3.el9_2.1 | 1 | 1 | Oct 19, 2023 |
| Patch now | RHSA-2023:5924 | RHEL 9 | 0:6.6.2-3.el9_2.1 | 1 | 1 | Oct 19, 2023 |
| Patch now | DEBIAN-CVE-2023-44487 | Debian 13.5 (trixie) | 7.5.0-1 | 1 | 1 | Oct 10, 2023 |
| High | DSA-5334-1 | Debian 11.6 (bullseye) | 6.5.1-1+deb11u3 | 1 | Jan 29, 2023 | |
| High | ELSA-2022-8643 | ol 9 | 0:6.6.2-2.el9_1.1 | 1 | Nov 29, 2022 | |
| High | RLSA-2022:8649 | rocky 8 | 0:6.0.8-2.module+el8.7.0+1094+66cdd070.1 | 1 | Nov 28, 2022 | |
| High | RLSA-2022:8643 | rocky 9 | 0:6.6.2-2.el9_1.1 | 1 | Nov 28, 2022 | |
| High | ALSA-2022:8643 | almalinux 9 | 6.6.2-2.el9_1.1 | 1 | Nov 28, 2022 | |
| High | ALSA-2022:8649 | almalinux 8 | 6.0.8-2.module_el8.7.0+3353+b11d8f2f.1 | 1 | Nov 28, 2022 | |
| High | ELSA-2022-8649 | ol 8 | 0:6.0.8-2.module+el8.7.0+20885+cb213da4.1 | 1 | Nov 28, 2022 | |
| High | RHSA-2022:8643 | RHEL 9 | 0:6.6.2-2.el9_1.1 | 1 | Nov 28, 2022 | |
| High | RHSA-2022:8649 | RHEL 8 | 0:6.0.8-2.module+el8.7.0+17239+94d153bd.1 | 1 | Nov 28, 2022 | |
| High | DEBIAN-CVE-2022-45059 | Debian 12.15 (bookworm) | 7.1.1-1.1 | 1 | Nov 9, 2022 | |
| High | DEBIAN-CVE-2022-45059 | Debian 13.5 (trixie) | 7.1.1-1.1 | 1 | Nov 9, 2022 | |
| High | DEBIAN-CVE-2022-45060 | Debian 12.15 (bookworm) | 7.1.1-1.1 | 1 | Nov 9, 2022 | |
| High | DEBIAN-CVE-2022-45060 | Debian 13.5 (trixie) | 7.1.1-1.1 | 1 | Nov 9, 2022 | |
| High | varnish 5.2.1-1ubuntu0.1+esm1 | Ubuntu 18.04.6 LTS (bionic) | 5.2.1-1ubuntu0.1+esm1 | 1 | Nov 8, 2022 | |
| High | varnish 6.2.1-2ubuntu0.2+esm1 | Ubuntu 20.04 LTS (focal) | 6.2.1-2ubuntu0.2+esm1 | 1 | Nov 8, 2022 | |
| High | varnish 6.6.1-1ubuntu0.2+esm1 | Ubuntu 22.04.1 LTS (jammy) | 6.6.1-1ubuntu0.2+esm1 | 1 | Nov 8, 2022 | |
| High | DEBIAN-CVE-2022-38150 | Debian 12.15 (bookworm) | 7.1.1-1 | 1 | Aug 11, 2022 | |
| High | DEBIAN-CVE-2022-38150 | Debian 13.5 (trixie) | 7.1.1-1 | 1 | Aug 11, 2022 | |
| High | DSA-5088-1 | Debian 11.6 (bullseye) | 6.5.1-1+deb11u2 | 1 | Mar 3, 2022 | |
| High | ALSA-2022:0418 | almalinux 8 | 6.0.8-1.module_el8.5.0+2620+03a0c2cc.1 | 1 | Feb 3, 2022 | |
| High | RLSA-2022:0418 | rocky 8 | 0:6.0.8-1.module+el8.5.0+736+fec10e21.1 | 1 | Feb 3, 2022 | |
| High | ELSA-2022-0418 | ol 8 | 0:6.0.8-1.module+el8.5.0+20491+1af4e193.1 | 1 | Feb 3, 2022 | |
| High | RHSA-2022:0418 | RHEL 8 | 0:6.0.8-1.module+el8.5.0+14089+03a0c2cc.1 | 1 | Feb 3, 2022 | |
| High | DEBIAN-CVE-2022-23959 | Debian 12.15 (bookworm) | 7.1.0-5 | 1 | Jan 26, 2022 | |
| High | DEBIAN-CVE-2022-23959 | Debian 13.5 (trixie) | 7.1.0-5 | 1 | Jan 26, 2022 | |
| High | varnish 6.2.1-2ubuntu0.1 | Ubuntu 20.04 LTS (focal) | 6.2.1-2ubuntu0.1 | 4 | Jan 25, 2022 | |
| High | varnish 5.2.1-1ubuntu0.1 | Ubuntu 18.04.6 LTS (bionic) | 5.2.1-1ubuntu0.1 | 2 | Jan 25, 2022 | |
| High | varnish 6.6.1-1ubuntu0.2 | Ubuntu 22.04.1 LTS (jammy) | 6.6.1-1ubuntu0.2 | 1 | Jan 25, 2022 | |
| High | ELSA-2021-2988 | ol 8 | 0:6.0.6-2.module+el8.4.0+20258+f99218b2.1 | 1 | Aug 3, 2021 | |
| High | RHSA-2021:2988 | RHEL 8 | 0:6.0.6-2.module+el8.4.0+11921+1a6539fc.1 | 1 | Aug 2, 2021 | |
| High | ELSA-2020-4756 | ol 8 | 0:6.0.6-2.module+el8.3.0+7653+45014445 | 3 | Nov 10, 2020 | |
| High | RHSA-2020:4756 | RHEL 8 | 0:6.0.6-2.module+el8.3.0+6843+b3b42fcc | 3 | Nov 4, 2020 |
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.