Security Information / 2022 / Security Information -- DSA-5258-1 squid

Debian Security Advisory

DSA-5258-1 squid -- security update

Date Reported:

19 Oct 2022

Affected Packages:

squid

Vulnerable:

Yes

Security database references:

In the Debian bugtracking system: Bug 1020586, Bug 1020587.
In Mitre's CVE dictionary: CVE-2022-41317, CVE-2022-41318.

More information:

Several vulnerabilities were discovered in Squid, a fully featured web proxy cache, which could result in exposure of sensitive information in the cache manager (CVE-2022-41317), or denial of service or information disclosure if Squid is configured to negotiate authentication with the SSPI and SMB authentication helpers (CVE-2022-41318).

For the stable distribution (bullseye), these problems have been fixed in version 4.13-10+deb11u2.

We recommend that you upgrade your squid packages.

For the detailed security status of squid please refer to its security tracker page at: https://security-tracker.debian.org/tracker/squid