UbuntuUpdates.org

Package "squid-openssl"

Name: squid-openssl

Description:

Full featured Web Proxy cache (HTTP proxy OpenSSL flavour)
Latest version: 7.7-0ubuntu0.26.04.2
Release: resolute (26.04)
Level: updates
Repository: universe
Head package: squid
Homepage: http://www.squid-cache.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "squid-openssl"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "squid-openssl" in Resolute

Repository Area Version
base universe 7.2-2ubuntu2
security universe 7.7-0ubuntu0.26.04.2

Changelog

Version: 7.7-0ubuntu0.26.04.2 2026-11-05 09:08:24 UTC

squid (7.7-0ubuntu0.26.04.2) resolute-security; urgency=medium

  * No-change rebuild in the -security pocket.
    - CVE-2026-61642

 -- Marc Deslauriers Thu, 22 Oct 2026 14:15:11 -0400
Source diff to previous version
CVE-2026-61642 Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow bug, Squid is vulnerable to a

Version: 7.7-0ubuntu0.26.04.1 2026-10-22 08:14:08 UTC

squid (7.7-0ubuntu0.26.04.1) resolute; urgency=medium

  * New upstream release 7.7: (LP: #2153490)
    - Protect several base64 encoding buffers
    - Honor directive parameters after a quoted filename reference
    - FTP: Reject commands with parameters containing CR
    - FTP: Do not send commands with embedded CRs or LFs
    - For changes in releases 7.3-7.6, check:
      + https://github.com/squid-cache/squid/releases/tag/SQUID_7_3
      + https://github.com/squid-cache/squid/releases/tag/SQUID_7_4
      + https://github.com/squid-cache/squid/releases/tag/SQUID_7_5
      + https://github.com/squid-cache/squid/releases/tag/SQUID_7_6
  * Refresh patches:
    - d/p/90-cf.data.ubuntu.patch
    - d/p/99-ubuntu-ssl-cert-snakeoil.patch
  * Dropped changes:
    - d/p/0008-upstream-ab5cf0c36b538627c82b3989d6c87d1668c7e081.patch
      [ Included in upstream version 7.3 ]
    - d/p/CVE-2026-33526.patch
      [ Included in upstream version 7.5 ]
    - d/p/CVE-2026-33515.patch
      [ Included in upstream version 7.5 ]
    - d/p/CVE-2026-32748.patch
      [ Included in upstream version 7.5 ]
    - d/p/CVE-2026-47729.patch
      [ Included in upstream version 7.6 ]
    - d/p/CVE-2026-50012-[1,2].patch
      [ Included in upstream version 7.6 ]
  * New changes:
    - d/t/test-squid.py: wait for the daemon to listen instead of sleeping

 -- Renan Rodrigo Thu, 24 Sep 2026 11:07:39 -0300
Source diff to previous version
2153490 Backport squid for stonking cycle
CVE-2026-33526 Squid is a caching proxy for the Web. Prior to version 7.5, due to heap Use-After-Free, Squid is vulnerable to Denial of Service when handling ICP tr
CVE-2026-33515 Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling
CVE-2026-32748 Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bug
CVE-2026-47729 Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/F
CVE-2026-50012 Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in s

Version: 7.2-2ubuntu2.2 2026-06-16 20:07:46 UTC

  squid (7.2-2ubuntu2.2) resolute-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds Read attack against the FTP gateway
    - debian/patches/CVE-2026-47729.patch: Improve parsing of certain FTP
      directory listing formats in src/clients/FtpGateway.cc.
    - CVE-2026-47729
  * SECURITY UPDATE: Heap-based Buffer Overflow attack against cache digests
    - debian/patches/CVE-2026-50012-1.patch: Harden peerDigestSwapInMask
      against invalid cache digest reply in src/peer_digest.cc.
    - debian/patches/CVE-2026-50012-2.patch: Fix -Wsign-compare on arm32 in
      src/peer_digest.cc.
    - CVE-2026-50012

 -- Marc Deslauriers <email address hidden> Sat, 13 Jun 2026 10:29:00 -0400


About   -   Send Feedback to @ubuntu_updates