Summary
It was discovered that Squid incorrectly handled FTP gateway processing
under certain circumstances, which could result in an out-of-bounds read. A
remote attacker could use this issue to cause Squid to crash, resulting in
a denial of service, or possibly obtain sensitive information.
(CVE-2026-47729)
It was discovered that Squid incorrectly handled cache digest processing
under certain circumstances, which could result in a heap-based buffer
overflow. A remote attacker could use this issue to cause Squid to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2026-50012)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | squid | 5.9-0ubuntu0.22.04.7 |
| Ubuntu · 24.04 LTS 24.04:LTS | squid | 6.14-0ubuntu0.24.04.4 |
| Ubuntu · 25.10 | squid | 6.14-0ubuntu0.25.10.4 |
| Ubuntu · 26.04 LTS 26.04:LTS | squid | 7.2-2ubuntu2.2 |