Summary
It was discovered that Squid incorrectly handled certain ICP traffic. In
environments where ICP support is enabled, a remote attacker could use this
issue to cause Squid to crash, resulting in a denial of service, or obtain
small amounts of sensitive information.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | squid | 5.9-0ubuntu0.22.04.5 |
| Ubuntu · 24.04 LTS 24.04:LTS | squid | 6.14-0ubuntu0.24.04.2 |
| Ubuntu · 25.10 | squid | 6.14-0ubuntu0.25.10.2 |