Debian Security Advisory
DSA-5258-1 squid -- security update
- Date Reported:
- 19 Oct 2022
- Affected Packages:
- Security database references:
- In the Debian bugtracking system: Bug 1020586, Bug 1020587.
In Mitre's CVE dictionary: CVE-2022-41317, CVE-2022-41318.
- More information:
Several vulnerabilities were discovered in Squid, a fully featured web proxy cache, which could result in exposure of sensitive information in the cache manager (CVE-2022-41317), or denial of service or information disclosure if Squid is configured to negotiate authentication with the SSPI and SMB authentication helpers (CVE-2022-41318).
For the stable distribution (bullseye), these problems have been fixed in version 4.13-10+deb11u2.
We recommend that you upgrade your squid packages.
For the detailed security status of squid please refer to its security tracker page at: https://security-tracker.debian.org/tracker/squid