Multiple vulnerabilities in the Squid proxy server, including CVE-2026-33526 (CVSS 7.5 HIGH) and CVE-2026-33515 (CVSS 6.5 MEDIUM), can lead to information disclosure or denial of service. The NVD data indicates these affect Squid versions prior to 7.5. The fix is to upgrade to Squid version 7.5.
[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index] [SECURITY] [DSA 6360-1] squid security update To: debian-security-announce@lists.debian.org Subject: [SECURITY] [DSA 6360-1] squid security update From: Moritz Muehlenhoff <jmm@debian.org> Date: Sun, 21 Jun 2026 17:43:38 +0000 Message-id: <[🔎] ajgiyqZZFetmTqLr@seger.debian.org> Reply-to: debian-security-announce-request@lists.debian.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6360-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff June 21, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : squid CVE ID : CVE-2026-33515 CVE-2026-33526 CVE-2026-47729 CVE-2026-50012 Multiple security issues were discovered in the Squid proxy caching server, which could result in information disclosure or denial of service. For the stable distribution (trixie), these problems have been fixed in version 6.13-2+deb13u2. We recommend that you upgrade your squid packages. For the detailed security status of squid please refer to its security tracker page at: https://security-tracker.debian.org/tracker/squid Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmo4IqIACgkQEMKTtsN8 Tjb0Xg//Vwa+gIRD7yupE3T+Jt1ljxZCDRXZyzU3oCbu6TB0Tc+GvPLUODMaaC2j RzKy+Q3GzAJaoRgVgIZJHcCTe8h9X1WWNNcbSh2CcNUrv2CAUukng7D26SIjAJAF iu2mXv97oBsxnLCotPW1/LbezUWNpuDOPq5wydugtcp4x6uqm9Gg5oziKFNLWgUT Kbqz5QzlZBlCGi2NpIi+ATg22NX87s7V+WFL1trqGWfmj+PxhpzmxPkZtvDlQoiv OxeQQBkzUCYJkTmNtZaEr60t5eOJE/AlaG+Y3GroCaXNmJFRy7KySlO9hjCw6vHq xYdpg+OvnfZ8lkEXnMK4LTEukjIQOGoV2NpQo2pb8q3W6Fej/mc6/4kt3NZmbN7L 9D7oCU/3dvRgPvyH0gbbBHmw9tNFh3IGDxDrFGTTTJLyI6JEfBshYa7xXNnNzjPW /gT1Il6aDM6DPjU9W5VYcF4RrYUCbuy779m4BxlUi6raKm8GFfYc2vqskDGrarG9 fG9CDztcEhmKvmMFl/9YthfUSdYEmrjARJRQWRGViokQ2GHHEmzfnhOo7pfIoOaI nCq9OR2BAb1+exIgU3SZU08+6WHL9p96mlOTDnkA2GVlG09jPcG8XSJaw78F/X+N bxVzjQ9t0W7z+bioIfd6FRnwZuvD2bDOI9wqa58a9oJ3Ukj5iW4= =Bdkn -----END PGP SIGNATURE----- Reply to: debian-security-announce@lists.debian.org Moritz Muehlenhoff (on-list) Moritz Muehlenhoff (off-list) Prev by Date: [SECURITY] [DSA 6359-1] gst-plugins-good1.0 security update Previous by thread: [SECURITY] [DSA 6359-1] gst-plugins-good1.0 security update Index(es): Date Thread