UbuntuUpdates.org

Package "squid"

Name: squid

Description:

Full featured Web Proxy cache (HTTP proxy GnuTLS flavour)
Latest version: 6.14-0ubuntu0.24.04.2
Release: noble (24.04)
Level: updates
Repository: main
Homepage: http://www.squid-cache.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "squid"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "squid" in Noble

Repository Area Version
base universe 6.6-1ubuntu5
base main 6.6-1ubuntu5
security main 6.14-0ubuntu0.24.04.2
security universe 6.14-0ubuntu0.24.04.2
updates universe 6.14-0ubuntu0.24.04.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 6.14-0ubuntu0.24.04.2 2026-04-09 05:09:52 UTC

  squid (6.14-0ubuntu0.24.04.2) noble-security; urgency=medium

  * SECURITY UPDATE: use-after-free via ICP protocol
    - debian/patches/CVE-2026-32748.patch: fix HttpRequest lifetime for ICP
      v3 queries in src/ICP.h, src/icp_v2.cc, src/icp_v3.cc,
      src/tests/stub_icp.cc.
    - CVE-2026-32748
  * SECURITY UPDATE: out-of-bounds read via ICP protocol
    - debian/patches/CVE-2026-33515.patch: fix validation of packet sizes
      and URLs in src/ICP.h, src/icp_v2.cc, src/icp_v3.cc,
      src/tests/stub_icp.cc.
    - CVE-2026-33515
  * SECURITY UPDATE: use-after-free via ICP protocol
    - debian/patches/CVE-2026-33526.patch: do not escape malformed URI
      twice when sending ICP errors in src/icp_v2.cc.
    - CVE-2026-33526

 -- Marc Deslauriers <email address hidden> Thu, 02 Apr 2026 14:16:27 -0400
Source diff to previous version
CVE-2026-32748 Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bug
CVE-2026-33515 Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling
CVE-2026-33526 Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vulnerable to Denial of Service when handling ICP tr

Version: 6.14-0ubuntu0.24.04.1 2026-03-24 02:08:05 UTC

  squid (6.14-0ubuntu0.24.04.1) noble; urgency=medium

  * New upstream release 6.14 (LP: #2127669)
    - Do not get stuck in RESPMOD after pausing peer read(2)
    - Fix "make check" linking on Solaris
    - Fix SNMP cacheNumObjCount -- number of cached objects
    - Do not duplicate received Surrogate-Capability in sent requests
    - Fix Mem::Segment::open() stub to fix build without shm_open()
    - CI and documentation updates

 -- Renan Rodrigo <email address hidden> Tue, 03 Mar 2026 11:59:34 -0300
Source diff to previous version
2127669 Backport of squid for noble and questing

Version: 6.13-0ubuntu0.24.04.3 2025-10-29 14:07:17 UTC

  squid (6.13-0ubuntu0.24.04.3) noble-security; urgency=medium

  * SECURITY UPDATE: HTTP Authentication credential leak
    - debian/patches/CVE-2025-62168.patch: Add maskSensitiveInfo parameter to
      pack and pass it to packInto in src/HttpRequest.cc. Add maskSensitiveInfo
      to pack in src/HttpRequest.h. Adapt code with new parameter in
      src/client_side_reply.cc, and src/errorpage.cc. Remove request_hdr NULL
      assign in src/errorpage.h.
    - CVE-2025-62168

 -- Hlib Korzhynskyy <email address hidden> Thu, 23 Oct 2025 10:35:09 -0230
Source diff to previous version
CVE-2025-62168 Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows in

Version: 6.13-0ubuntu0.24.04.2 2025-10-06 19:07:43 UTC

  squid (6.13-0ubuntu0.24.04.2) noble-security; urgency=medium

  * SECURITY UPDATE: ASN.1 encoding mishandling
    - debian/patches/CVE-2025-59362.patch: fix ASN.1 encoding of long SNMP
      OIDs in lib/snmplib/asn1.c.
    - CVE-2025-59362

 -- Marc Deslauriers <email address hidden> Fri, 03 Oct 2025 09:35:08 -0400
Source diff to previous version
CVE-2025-59362 Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.

Version: 6.13-0ubuntu0.24.04.1 2025-07-16 23:07:23 UTC

  squid (6.13-0ubuntu0.24.04.1) noble; urgency=medium

  * New upstream version 6.13 (LP: #2085197)
    - Fix getting stuck when RESPMOD is slower than read(2)
    - Fix large uploads fill request buffer and die
    - Fix GCC v14 build [-Wmaybe-uninitialized]
    - Fix GCC v14 [-Wanalyzer-null-dereference] warnings in Kerberos
    - Fix nil request dereference in ACLExtUser and SourceDomainCheck ACLs
    - Fix systemd startup sequence to require active Local Filesystem
    - Fix validation of Digest auth header parameters
    - Improve robustness of DNS code on reconfigure
    - Prevent slow memory leak in TCP DNS queries
    - Improve errors emitted when invalid ACLs are parsed
    - ext_time_quota_acl: remove -l option

 -- Bryce Harrington <email address hidden> Tue, 29 Apr 2025 16:08:59 -0700
2085197 Backport MRE of squid 6.13 to noble


About   -   Send Feedback to @ubuntu_updates