OESA-2026-1164 squid security update

Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a...

Ubuntu 20.04 LTS / 22.04 LTS : Squid vulnerabilities (CVE-2025-54574)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the Ubuntu CVE-2025-54574 page. Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote cod...

Fedora: Security Advisory (FEDORA-2025-252c9276b3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Squid Buffer Overflow Vulnerability (GHSA-w4gv-vw3f-29g3, SQUID-2025:1)

Squid is prone to a buffer overflow vulnerability in URN handling. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-54574

creationtimestamp| type| source ---|---|--- 2025-08-02 03:01:24+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvf6fihpwq2d 2025-08-04 01:57:10+00:00| seen| https://bsky.app/profile/tamosan.bsky.social/post/3lvk3qikez62n 2025-08-04 16:27:18+00:00| seen|...

CVE-2025-54574

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access...

CVE-2025-54574 Squid's URN Handling can lead to Buffer Overflow

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access...

CVE-2025-54574

Summary: CVE-2025-54574 affects Squid proxy. In versions 6.3 and older, URN processing causes a heap buffer overflow that can enable remote code execution. Fix released in 6.4; workaround: disable URN access permissions. Multiple advisories (Debian, CloudLinux, Astra Linux, Fedora, etc.) corrobor...

CVE-2025-54574 Squid's URN Handling can lead to Buffer Overflow

Squid is a caching proxy for the Web. In versions 6.3 and below, Squid is vulnerable to a heap buffer overflow and possible remote code execution attack when processing URN due to incorrect buffer management. This has been fixed in version 6.4. To work around this issue, disable URN access...