CLSA-2026-1784713205

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1784713205.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1784713205
Upstream
CVE (2)
Published
2026-07-22T11:21:53Z
Modified
2026-10-26T09:31:47Z
Summary
Fix CVE(s): CVE-2026-47729, CVE-2026-50012
Details
  • SECURITY UPDATE: out-of-bounds read in FTP gateway listing parser
    • debian/patches/CVE-2026-47729.patch: guard against a NUL byte before strchr() in ftpListParseParts, preventing an out-of-bounds read that could disclose memory from unrelated transactions
    • CVE-2026-47729
  • SECURITY UPDATE: heap buffer overflow in cache digest handling
    • debian/patches/CVE-2026-50012.patch: bound the mask copy in peerDigestSwapInMask so an on-the-wire payload larger than the advertised mask size cannot overflow the heap buffer
    • CVE-2026-50012
References

Affected packages

TuxCare:Ubuntu:16.04
squid

Package

Name
squid
Purl
pkg:deb/tuxcare/squid?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.12-1ubuntu7.17+tuxcare.els14

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1784713205.json"
squid-cgi

Package

Name
squid-cgi
Purl
pkg:deb/tuxcare/squid-cgi?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.12-1ubuntu7.17+tuxcare.els14

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1784713205.json"
squid-common

Package

Name
squid-common
Purl
pkg:deb/tuxcare/squid-common?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.12-1ubuntu7.17+tuxcare.els14

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1784713205.json"
squid-purge

Package

Name
squid-purge
Purl
pkg:deb/tuxcare/squid-purge?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.12-1ubuntu7.17+tuxcare.els14

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1784713205.json"
squid3

Package

Name
squid3
Purl
pkg:deb/tuxcare/squid3?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.12-1ubuntu7.17+tuxcare.els14

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1784713205.json"
squidclient

Package

Name
squidclient
Purl
pkg:deb/tuxcare/squidclient?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.12-1ubuntu7.17+tuxcare.els14

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1784713205.json"