Debian Security Advisory

DSA-5258-1 squid -- security update

Date Reported:
19 Oct 2022
Affected Packages:
Security database references:
In the Debian bugtracking system: Bug 1020586, Bug 1020587.
In Mitre's CVE dictionary: CVE-2022-41317, CVE-2022-41318.
More information:

Several vulnerabilities were discovered in Squid, a fully featured web proxy cache, which could result in exposure of sensitive information in the cache manager (CVE-2022-41317), or denial of service or information disclosure if Squid is configured to negotiate authentication with the SSPI and SMB authentication helpers (CVE-2022-41318).

For the stable distribution (bullseye), these problems have been fixed in version 4.13-10+deb11u2.

We recommend that you upgrade your squid packages.

For the detailed security status of squid please refer to its security tracker page at: