Alerts This Week
Warning Icon 1 500
Alerts This Week
Warning Icon 1 500

Ubuntu Squid Important DoS Buffer Overflow Vulnerabilities USN-8435-1

ubuntu
Calendar Grey June 16, 2026
Dist Ubuntu Esm H88
Several issues in Squid lead to potential denial of service and code execution in Ubuntu 22.04, 24.04, 25.10, and 26.04.
Several security issues were fixed in Squid.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in Squid. Software Description: - squid: Web proxy cache server Details: It was discovered that Squid incorrectly handled FTP gateway processing under certain circumstances, which could result in an out-of-bounds read. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2026-47729) It was discovered that Squid incorrectly handled cache digest processing under certain circumstances, which could result in a heap-based buffer overflow. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-50012)

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS squid 7.2-2ubuntu2.2 Ubuntu 25.10 squid 6.14-0ubuntu0.25.10.4 Ubuntu 24.04 LTS squid 6.14-0ubuntu0.24.04.4 Ubuntu 22.04 LTS squid 5.9-0ubuntu0.22.04.7 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8435-1

CVE-2026-47729, CVE-2026-50012

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8435-1

Package Information

https://launchpad.net/ubuntu/+source/squid/7.2-2ubuntu2.2 https://launchpad.net/ubuntu/+source/squid/6.14-0ubuntu0.25.10.4 https://launchpad.net/ubuntu/+source/squid/6.14-0ubuntu0.24.04.4 https://launchpad.net/ubuntu/+source/squid/5.9-0ubuntu0.22.04.7

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here