SUSE-SU-2026:4909-1

    Dashboard / Vulnerabilities / SUSE-SU-2026:4909-1

    SUSE-SU-2026:4909-1

    Published: 26 Oct 2026Last Modified: 26 Oct 2026

    Summary: Security update for squid

    Details: This update for squid fixes the following issues: - CVE-2023-5824: Multiple issues in HTTP response caching (bsc#1216496). - CVE-2023-49288: Use-After-Free in the HTTP Collapsed Forwarding Feature (bsc#1217825). - CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of credentials a trusted client uses to authenticate (bsc#1252281). - CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453). - CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454). - CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452). - CVE-2026-47729: out-of-bounds read attack against the ftp gateway due to a improper validation of syntactic correctness of input (bsc#1268272). - CVE-2026-50012: Improper Input Validation bug (bsc#1268320).

    References: https://www.suse.com/support/update/announcement/2026/suse-su-20264909-1/, https://bugzilla.suse.com/1216496, https://bugzilla.suse.com/1217825, https://bugzilla.suse.com/1223329, https://bugzilla.suse.com/1228150, https://bugzilla.suse.com/1252281, https://bugzilla.suse.com/1260452, https://bugzilla.suse.com/1260453, https://bugzilla.suse.com/1260454, https://bugzilla.suse.com/1268272, https://bugzilla.suse.com/1268320, https://www.suse.com/security/cve/CVE-2023-49288, https://www.suse.com/security/cve/CVE-2023-5824, https://www.suse.com/security/cve/CVE-2025-62168, https://www.suse.com/security/cve/CVE-2026-32748, https://www.suse.com/security/cve/CVE-2026-33515, https://www.suse.com/security/cve/CVE-2026-33526, https://www.suse.com/security/cve/CVE-2026-47729, https://www.suse.com/security/cve/CVE-2026-50012

    Affected packages

    Package

    Name: squid

    Purl: pkg:rpm/suse/squid&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -5.7-150400.3.41.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2026:4909-1 | CVE-DB