[Git][security-tracker-team/security-tracker][master] DSA for varnish

[Aron Xu (@aron)]

Aron Xu pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b784350a by Aron Xu at 2026-10-25T11:46:27+08:00
DSA for varnish

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -207710,7 +207710,6 @@ CVE-2026-3098 (The Smart Slider 3 plugin for WordPress is vulnerable to Arbitrar
 CVE-2026-34475 (Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in ...)
 	- vinyl-cache <not-affected> (Fixed before initial upload to Debian)
 	- varnish <removed> (bug #1132231)
-	[trixie] - varnish <no-dsa> (Minor issue; can be mitigated by VCL rule)
 	[bookworm] - varnish <no-dsa> (Minor issue; can be mitigated by VCL rule)
 	[bullseye] - varnish <postponed> (Minor issue; can be mitigated by VCL rule)
 	NOTE: https://vinyl-cache.org/security/VSV00018.html


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,6 @@
+[25 Oct 2026] DSA-6584-1 varnish - security update
+	{CVE-2026-34475 CVE-2026-93894}
+	[trixie] - varnish 7.7.0-3+deb13u2
 [24 Oct 2026] DSA-6583-1 libheif - security update
 	[trixie] - libheif 1.23.6-2~deb13u1
 [23 Oct 2026] DSA-6582-1 brotli - security update


=====================================
data/dsa-needed.txt
=====================================
@@ -180,8 +180,6 @@ tomcat11
 --
 valkey (aron)
 --
-varnish (aron)
---
 vim
   Lee Garrett provided an update for review, <90276a53-99c9-4412-a26f-d84e87a8cb49 at rocketjump.eu>
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b784350ac0e4e0deb9f4c27b607ccd9a79012904

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b784350ac0e4e0deb9f4c27b607ccd9a79012904
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261025/b64687ce/attachment-0001.htm>