UbuntuUpdates.org

Package "squid-openssl"

Name: squid-openssl

Description:

Full featured Web Proxy cache (HTTP proxy OpenSSL flavour)
Latest version: 7.7-0ubuntu0.26.04.1
Release: resolute (26.04)
Level: proposed
Repository: universe
Head package: squid
Homepage: http://www.squid-cache.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "squid-openssl"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "squid-openssl" in Resolute

Repository Area Version
base universe 7.2-2ubuntu2
security universe 7.2-2ubuntu2.2
updates universe 7.2-2ubuntu2.2

Changelog

Version: 7.7-0ubuntu0.26.04.1 2026-10-08 12:07:21 UTC

squid (7.7-0ubuntu0.26.04.1) resolute; urgency=medium

  * New upstream release 7.7: (LP: #2153490)
    - Protect several base64 encoding buffers
    - Honor directive parameters after a quoted filename reference
    - FTP: Reject commands with parameters containing CR
    - FTP: Do not send commands with embedded CRs or LFs
    - For changes in releases 7.3-7.6, check:
      + https://github.com/squid-cache/squid/releases/tag/SQUID_7_3
      + https://github.com/squid-cache/squid/releases/tag/SQUID_7_4
      + https://github.com/squid-cache/squid/releases/tag/SQUID_7_5
      + https://github.com/squid-cache/squid/releases/tag/SQUID_7_6
  * Refresh patches:
    - d/p/90-cf.data.ubuntu.patch
    - d/p/99-ubuntu-ssl-cert-snakeoil.patch
  * Dropped changes:
    - d/p/0008-upstream-ab5cf0c36b538627c82b3989d6c87d1668c7e081.patch
      [ Included in upstream version 7.3 ]
    - d/p/CVE-2026-33526.patch
      [ Included in upstream version 7.5 ]
    - d/p/CVE-2026-33515.patch
      [ Included in upstream version 7.5 ]
    - d/p/CVE-2026-32748.patch
      [ Included in upstream version 7.5 ]
    - d/p/CVE-2026-47729.patch
      [ Included in upstream version 7.6 ]
    - d/p/CVE-2026-50012-[1,2].patch
      [ Included in upstream version 7.6 ]
  * New changes:
    - d/t/test-squid.py: wait for the daemon to listen instead of sleeping

 -- Renan Rodrigo Thu, 24 Sep 2026 11:07:39 -0300
2153490 Backport squid for stonking cycle
CVE-2026-33526 Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vulnerable to Denial of Service when handling ICP tr
CVE-2026-33515 Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling
CVE-2026-32748 Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bug
CVE-2026-47729 Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/F
CVE-2026-50012 Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in s


About   -   Send Feedback to @ubuntu_updates