Ubuntu alert USN-8435-1 (squid)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8435-1] Squid vulnerabilities
Date:
             
 
Tue, 16 Jun 2026 16:16:46 +0000
Message-ID:
             
 
<E1wZWT0-0002eF-6K@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8435-1
June 16, 2026

squid vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in Squid.

Software Description:
- squid: Web proxy cache server

Details:

It was discovered that Squid incorrectly handled FTP gateway processing
under certain circumstances, which could result in an out-of-bounds read. A
remote attacker could use this issue to cause Squid to crash, resulting in
a denial of service, or possibly obtain sensitive information.
(CVE-2026-47729)

It was discovered that Squid incorrectly handled cache digest processing
under certain circumstances, which could result in a heap-based buffer
overflow. A remote attacker could use this issue to cause Squid to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2026-50012)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  squid                           7.2-2ubuntu2.2

Ubuntu 25.10
  squid                           6.14-0ubuntu0.25.10.4

Ubuntu 24.04 LTS
  squid                           6.14-0ubuntu0.24.04.4

Ubuntu 22.04 LTS
  squid                           5.9-0ubuntu0.22.04.7

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8435-1
  CVE-2026-47729, CVE-2026-50012

Package Information:
  https://launchpad.net/ubuntu/+source/squid/7.2-2ubuntu2.2
  https://launchpad.net/ubuntu/+source/squid/6.14-0ubuntu0....
  https://launchpad.net/ubuntu/+source/squid/6.14-0ubuntu0....
  https://launchpad.net/ubuntu/+source/squid/5.9-0ubuntu0.2...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmoxdp0ACgkQcpJm3tlz
hgFE7xAAk8TbewgyY5L7CJFwKqf5Nzs1b7nqqD3cFcj9gZvJvEr0lD+4KAYCE2gv
UIDEt1p39CWf/CUUPLCmjJNpsN4c51MN+/pR7zwO8AZd+P7HfNGEDz4yJfrDIzMq
Hg+pqBK3Js34MXEeEKYvcDXevhF7zUNYhaYuch/eWaEdRMOFXYw7TgwKy6VfTYwC
gLnU2+gVKp/BR8yFGzVY0B2QcdRW9lbJuQne7PXu7+amTNJVTy0plebKkqilsXEV
EmodVusfFsw7n0Y2oBtRHbEa6bVP+ATq2FrK2MJuKdHgyHDf45nU4i6/t5h/ZobG
lVaStQJhbgYsU2b+STj29+SpBmYhR13dy+23K/6xUIMM+GOj1vwJv2/QQqx5sdkP
oWnjtH5wdSTmMd8iRhvGTwr/cD+FoOeTq+M2eSvXjCa/2iXuilYAkhez/H1QL5HZ
ihZMq8r4eFpC5ws5FDlYLROaBq031dLDPUmGEq+tYgihe0YYWI+AOB0E4vkyOiBP
MHb3d4LXXRQ5aKYSFD1qEKcku6+kj9La/8/Iaf5bJJwQ95f9r7wmePbeVL/U/6/h
4zt1Jr27KxqLN5xSKCSexDg3sgH1dmwpyaDE0YOR2KUtcoY2R5UVz+aKnLoGQ1/M
rVRLXQ33OU29Fcxb35CPiN8femsIflRfBokBMF2QNmdYT+4lnys=
=D/Ls
-----END PGP SIGNATURE-----