portage-ng / portage / www-servers / vinyl-cache / 9.0.2
version « ‹ 9.0.2 › »
graphs detail deptree gantt
cli --merge --fetchonly --info
security glsa 1 bugs 1
legacy emerge pmerge
portage-ng glsa
1 advisory reference www-servers/vinyl-cache · none place version 9.0.2 in a vulnerable range
▸ GLSA 202608-26 Vinyl Cache: Multiple Vulnerabilities this version unaffected low remote 2026-08-26

Multiple vulnerabilities have been found in Vinyl Cache, allowing request smuggling and denial of service.

Announced
2026-08-26
Revised
2026-08-27 (revision 2)
Access
remote
Bugs
#880627 #918416 #959302 #964043 #975350
Advisory
https://security.gentoo.org/glsa/202608-26

Affected packages

PackageArchVulnerableUnaffected
www-servers/vinyl-cache*< 8.0.2>= 8.0.2

Background

Vinyl Cache is a web application accelerator. Vinyl Cache was previously named Varnish.

Description

Multiple vulnerabilities have been discovered in Vinyl Cache. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Vinyl Cache users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-servers/vinyl-cache-8.0.2"

References