Ubuntu Squid Important DoS Buffer Overflow Vulnerabilities USN-8435-1

ubuntu

June 16, 2026

Several security issues were fixed in Squid.

Summary

Several security issues were fixed in Squid.

Software Description:

- squid: Web proxy cache server

Details:

It was discovered that Squid incorrectly handled FTP gateway processing

under certain circumstances, which could result in an out-of-bounds read. A

remote attacker could use this issue to cause Squid to crash, resulting in

a denial of service, or possibly obtain sensitive information.

(CVE-2026-47729)

It was discovered that Squid incorrectly handled cache digest processing

under certain circumstances, which could result in a heap-based buffer

overflow. A remote attacker could use this issue to cause Squid to crash,

resulting in a denial of service, or possibly execute arbitrary code.

(CVE-2026-50012)

Topics Covered

security advisory denial of service buffer overflow Ubuntu important squid

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  squid                           7.2-2ubuntu2.2

Ubuntu 25.10
  squid                           6.14-0ubuntu0.25.10.4

Ubuntu 24.04 LTS
  squid                           6.14-0ubuntu0.24.04.4

Ubuntu 22.04 LTS
  squid                           5.9-0ubuntu0.22.04.7

In general, a standard system update will make all the necessary changes.