This update for squid fixes the following issues:
- CVE-2023-5824: Multiple issues in HTTP response caching (bsc#1216496).
- CVE-2023-49288: Use-After-Free in the HTTP Collapsed Forwarding Feature (bsc#1217825).
- CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of
credentials a trusted client uses to authenticate (bsc#1252281).
- CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453).
- CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454).
- CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452).
- CVE-2026-47729: out-of-bounds
This update for squid fixes the following issues:
- CVE-2024-25617: Fixes denial of service in HTTP header parser (bsc#1219960)
- CVE-2024-25111: Fixes Chunked Encoding Stack Overflow (bsc#1216715)
This update for squid fixes the following issues:
- CVE-2023-50269: fixed X-Forwarded-For Stack Overflow. (bsc#1217654)
- CVE-2024-23638: fixed Denial of Service attack against Cache Manager error responses. (bsc#1219131)