SUSE-SU-2026:4909-1
SUSE-SU-2026:4909-1 · Security update for squid
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for squid fixes the following issues: - CVE-2023-5824: Multiple issues in HTTP response caching (bsc#1216496). - CVE-2023-49288: Use-After-Free in the HTTP Collapsed Forwarding Feature (bsc#1217825). - CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of credentials a trusted client uses to authenticate (bsc#1252281). - CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453). - CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454). - CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452). - CVE-2026-47729: out-of-bounds read attack against the ftp gateway due to a improper validation of syntactic correctness of input (bsc#1268272). - CVE-2026-50012: Improper Input Validation bug (bsc#1268320).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
squid SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
- Affected ranges
- ECOSYSTEM: < 5.7-150400.3.41.1
Update to 5.7-150400.3.41.1
squid SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
- Affected ranges
- ECOSYSTEM: < 5.7-150400.3.41.1
Update to 5.7-150400.3.41.1
squid SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
- Affected ranges
- ECOSYSTEM: < 5.7-150400.3.41.1
Update to 5.7-150400.3.41.1
squid SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
- Affected ranges
- ECOSYSTEM: < 5.7-150400.3.41.1
Update to 5.7-150400.3.41.1
squid SUSE:Linux Enterprise Server 15 SP4-LTSS
- Affected ranges
- ECOSYSTEM: < 5.7-150400.3.41.1
Update to 5.7-150400.3.41.1
squid SUSE:Linux Enterprise Server 15 SP5-LTSS
- Affected ranges
- ECOSYSTEM: < 5.7-150400.3.41.1
Update to 5.7-150400.3.41.1
squid SUSE:Linux Enterprise Server for SAP Applications 15 SP4
- Affected ranges
- ECOSYSTEM: < 5.7-150400.3.41.1
Update to 5.7-150400.3.41.1
squid SUSE:Linux Enterprise Server for SAP Applications 15 SP5
- Affected ranges
- ECOSYSTEM: < 5.7-150400.3.41.1
Update to 5.7-150400.3.41.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-20264909-1/
- https://bugzilla.suse.com/1216496
- https://bugzilla.suse.com/1217825
- https://bugzilla.suse.com/1223329
- https://bugzilla.suse.com/1228150
- https://bugzilla.suse.com/1252281
- https://bugzilla.suse.com/1260452
- https://bugzilla.suse.com/1260453
- https://bugzilla.suse.com/1260454
- https://bugzilla.suse.com/1268272
- https://bugzilla.suse.com/1268320
- https://www.suse.com/security/cve/CVE-2023-49288
- https://www.suse.com/security/cve/CVE-2023-5824
- https://www.suse.com/security/cve/CVE-2025-62168
- https://www.suse.com/security/cve/CVE-2026-32748
- https://www.suse.com/security/cve/CVE-2026-33515
- https://www.suse.com/security/cve/CVE-2026-33526
- https://www.suse.com/security/cve/CVE-2026-47729
- https://www.suse.com/security/cve/CVE-2026-50012
- https://osv.dev/vulnerability/SUSE-SU-2026:4909-1