CLSA-2026-1784716497
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784716497.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1784716497
- Upstream
CVE (2)
- Published
- 2026-07-22T10:35:24Z
- Modified
- 2026-10-26T09:32:05Z
- Summary
- Fix CVE(s): CVE-2026-47729, CVE-2026-50012
- Details
-
- SECURITY UPDATE: out-of-bounds read in FTP gateway directory-listing
parser
- debian/patches/CVE-2026-47729.patch: guard the whitespace-skipping strchr(w_space, *copyFrom) checks in ftpListParseParts() with a '*copyFrom &&' short-circuit so a listing date that is not followed by a filename cannot advance parsing past the input buffer
- CVE-2026-47729
- SECURITY UPDATE: heap buffer overflow in cache digest reply handling
- debian/patches/CVE-2026-50012.patch: bounds-check the received mask data size against the declared mask_size before the memcpy in peerDigestSwapInMask(), aborting the digest fetch when the on-the-wire size is larger than the mask
- CVE-2026-50012
- SECURITY UPDATE: out-of-bounds read in FTP gateway directory-listing
parser
- References
Affected packages
TuxCare:Ubuntu:20.04 / squid
Package
- Name
- squid
- Purl
- pkg:deb/tuxcare/squid?distro=ubuntu-20.04
TuxCare:Ubuntu:20.04 / squid-cgi
Package
- Name
- squid-cgi
- Purl
- pkg:deb/tuxcare/squid-cgi?distro=ubuntu-20.04
TuxCare:Ubuntu:20.04 / squid-common
Package
- Name
- squid-common
- Purl
- pkg:deb/tuxcare/squid-common?distro=ubuntu-20.04
TuxCare:Ubuntu:20.04 / squid-purge
Package
- Name
- squid-purge
- Purl
- pkg:deb/tuxcare/squid-purge?distro=ubuntu-20.04