CLSA-2026-1784801011

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784801011.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1784801011
Upstream
CVE (2)
Published
2026-07-23T10:04:01Z
Modified
2026-10-26T09:30:42Z
Summary
Fix CVE(s): CVE-2026-47729, CVE-2026-50012
Details
  • SECURITY UPDATE: out-of-bounds read in FTP gateway listing parser
    • debian/patches/CVE-2026-47729.patch: guard against a NUL byte before strchr() in ftpListParseParts, preventing an out-of-bounds read that could disclose memory from unrelated transactions
    • CVE-2026-47729
  • SECURITY UPDATE: heap buffer overflow in cache digest handling
    • debian/patches/CVE-2026-50012.patch: bound the mask copy in peerDigestSwapInMask so an on-the-wire payload larger than the advertised mask size cannot overflow the heap buffer
    • CVE-2026-50012
References

Affected packages

TuxCare:Ubuntu:18.04
squid

Package

Name
squid
Purl
pkg:deb/tuxcare/squid?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.27-1ubuntu1.14+tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784801011.json"
squid-cgi

Package

Name
squid-cgi
Purl
pkg:deb/tuxcare/squid-cgi?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.27-1ubuntu1.14+tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784801011.json"
squid-common

Package

Name
squid-common
Purl
pkg:deb/tuxcare/squid-common?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.27-1ubuntu1.14+tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784801011.json"
squid-purge

Package

Name
squid-purge
Purl
pkg:deb/tuxcare/squid-purge?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.27-1ubuntu1.14+tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784801011.json"
squid3

Package

Name
squid3
Purl
pkg:deb/tuxcare/squid3?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.27-1ubuntu1.14+tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784801011.json"
squidclient

Package

Name
squidclient
Purl
pkg:deb/tuxcare/squidclient?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.27-1ubuntu1.14+tuxcare.els12

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784801011.json"