openSUSE-SU-2026:22080-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22080-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/openSUSE-SU-2026:22080-1
- Upstream
- Related
- Published
- 2026-10-09T13:28:23Z
- Modified
- 2026-10-19T17:23:12Z
- Summary
- Security update for squid
- Details
-
This update for squid fixes the following issues:
- CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453).
- CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454).
- CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452).
- CVE-2026-47729: out-of-bounds read attack against the ftp gateway due to a improper validation of syntactic correctness of input (bsc#1268272).
- CVE-2026-50012: Improper Input Validation bug (bsc#1268320).
Changes for squid:
Update to 6.14:
- Do not leak HttpReply when checking http_reply_access (bsc#1237027)
- References
-
- https://bugzilla.suse.com/1237027
- https://bugzilla.suse.com/1260452
- https://bugzilla.suse.com/1260453
- https://bugzilla.suse.com/1260454
- https://bugzilla.suse.com/1268272
- https://bugzilla.suse.com/1268320
- https://www.suse.com/security/cve/CVE-2026-32748
- https://www.suse.com/security/cve/CVE-2026-33515
- https://www.suse.com/security/cve/CVE-2026-33526
- https://www.suse.com/security/cve/CVE-2026-47729
- https://www.suse.com/security/cve/CVE-2026-50012