Security update for squid

This update for squid fixes the following issues: CVE-2023-5824: Multiple issues in HTTP response caching bsc1216496. CVE-2023-49288: Use-After-Free in the HTTP Collapsed Forwarding Feature bsc1217825. CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to th...

Security update for squid (important)

openSUSE security update: security update for squid ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22080-1 Rating: important References: bsc1237027 bsc1260452 bsc1260453 bsc1260454 bsc1268272 bsc1268320 Cross-References: CVE-2026-32748 CVE-2026-335...

SUSE SLES15 Security Update : squid (SUSE-SU-2026:4621-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4621-1 advisory. - CVE-2026-32748: denial of service in ICP Request handling bsc1260453. - CVE-2026-33515: out of bounds read in ICP message handlin...

Security update for squid

This update for squid fixes the following issues: CVE-2026-32748: denial of service in ICP Request handling bsc1260453. CVE-2026-33515: out of bounds read in ICP message handling bsc1260454. CVE-2026-33526: denial of service in ICP Request handling bsc1260452. CVE-2026-47729: out-of-bounds read...

SUSE-SU-2026:4621-1 Security update for squid

This update for squid fixes the following issues: - CVE-2026-32748: denial of service in ICP Request handling bsc1260453. - CVE-2026-33515: out of bounds read in ICP message handling bsc1260454. - CVE-2026-33526: denial of service in ICP Request handling bsc1260452. - CVE-2026-47729: out-of-bound...

OPENSUSE-SU-2026:22080-1 Security update for squid

This update for squid fixes the following issues: - CVE-2026-32748: denial of service in ICP Request handling bsc1260453. - CVE-2026-33515: out of bounds read in ICP message handling bsc1260454. - CVE-2026-33526: denial of service in ICP Request handling bsc1260452. - CVE-2026-47729: out-of-bound...

SUSE-SU-2026:24224-1 Security update for squid

This update for squid fixes the following issues: - CVE-2026-32748: denial of service in ICP Request handling bsc1260453. - CVE-2026-33515: out of bounds read in ICP message handling bsc1260454. - CVE-2026-33526: denial of service in ICP Request handling bsc1260452. - CVE-2026-47729: out-of-bound...

CentOS Linux 8.4 [TuxCare] Security Update: squid Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1784713308)

The CentOS Linux 8.4 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1784713308 advisory. - Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP...

CentOS Linux 8 [TuxCare] Security Update: squid Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1784986918)

The CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1784986918 advisory. - Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP...

AlmaLinux 9.6 [TuxCare] Security Update: squid Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1784801979)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784801979 advisory. - Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP...

Rocky Linux 9.6 [TuxCare] Security Update: squid Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1784801979)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784801979 advisory. - Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP...

CentOS Linux 6 [TuxCare] Security Update: squid Multiple Vulnerabilities (CENTOS6:CLSA-2026:1784730197)

The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1784730197 advisory. - Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway...

CLSA-2026-1786353802 squid: Fix of 2 CVEs

CVE-2026-47729: fix out-of-bounds read in FTP gateway directory-listing parser when a listing entry date is not followed by a filename - CVE-2026-50012: fix heap buffer overflow in cache digest reply handling peerDigestSwapInMask by bounding mask data against the declared masksize...

CLSA-2026-1785147682 squid: Fix of 2 CVEs

CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions - CVE-2026-50012: fix heap buffer overflow in cache digest reply handling when the on-the-wire payload exceeds the advertised mask size...

CLSA-2026-1784987022 squid: Fix of 2 CVEs

CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions - CVE-2026-50012: fix heap buffer overflow in cache digest reply handling when the on-the-wire payload exceeds the advertised mask size...

CLSA-2026-1784986918 squid: Fix of 2 CVEs

CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions - CVE-2026-50012: fix heap buffer overflow in cache digest reply handling when the on-the-wire payload exceeds the advertised mask size...

CLSA-2026-1784805092 squid: Fix of 2 CVEs

CVE-2026-47729: fix out-of-bounds read in FTP gateway directory-listing parser when a listing entry date is not followed by a filename - CVE-2026-50012: fix heap buffer overflow in cache digest reply handling peerDigestSwapInMask by bounding mask data against the declared masksize...

CLSA-2026-1784805083 squid: Fix of 2 CVEs

CVE-2026-47729: fix out-of-bounds read in FTP gateway directory-listing parser when a listing entry date is not followed by a filename - CVE-2026-50012: fix heap buffer overflow in cache digest reply handling peerDigestSwapInMask by bounding mask data against the declared masksize...

CLSA-2026-1784801979 squid: Fix of 2 CVEs

CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions - CVE-2026-50012: fix heap buffer overflow in cache digest reply handling when the on-the-wire payload exceeds the advertised mask size...

CLSA-2026-1784801011 Fix CVE(s): CVE-2026-47729, CVE-2026-50012

SECURITY UPDATE: out-of-bounds read in FTP gateway listing parser - debian/patches/CVE-2026-47729.patch: guard against a NUL byte before strchr in ftpListParseParts, preventing an out-of-bounds read that could disclose memory from unrelated transactions - CVE-2026-47729 SECURITY UPDATE: heap buff...