This bug was fixed in the package squid - 7.7-0ubuntu0.26.04.1
---------------
squid (7.7-0ubuntu0.26.04.1) resolute; urgency=medium
* New upstream release 7.7: (LP: #2153490)
- Protect several base64 encoding buffers
- Honor directive parameters after a quoted filename reference
- FTP: Reject commands with parameters containing CR
- FTP: Do not send commands with embedded CRs or LFs
- For changes in releases 7.3-7.6, check:
+ https://github.com/squid-cache/squid/releases/tag/SQUID_7_3
+ https://github.com/squid-cache/squid/releases/tag/SQUID_7_4
+ https://github.com/squid-cache/squid/releases/tag/SQUID_7_5
+ https://github.com/squid-cache/squid/releases/tag/SQUID_7_6
* Refresh patches:
- d/p/90-cf.data.ubuntu.patch
- d/p/99-ubuntu-ssl-cert-snakeoil.patch
* Dropped changes:
- d/p/0008-upstream-ab5cf0c36b538627c82b3989d6c87d1668c7e081.patch
[ Included in upstream version 7.3 ]
- d/p/CVE-2026-33526.patch
[ Included in upstream version 7.5 ]
- d/p/CVE-2026-33515.patch
[ Included in upstream version 7.5 ]
- d/p/CVE-2026-32748.patch
[ Included in upstream version 7.5 ]
- d/p/CVE-2026-47729.patch
[ Included in upstream version 7.6 ]
- d/p/CVE-2026-50012-[1,2].patch
[ Included in upstream version 7.6 ]
* New changes:
- d/t/test-squid.py: wait for the daemon to listen instead of sleeping
-- Renan Rodrigo <[email protected]> Thu, 24 Sep 2026 11:07:39 -0300
** Changed in: squid (Ubuntu Resolute)
Status: Fix Committed => Fix Released
** CVE added: https://cve.org/CVERecord?id=CVE-2026-32748
** CVE added: https://cve.org/CVERecord?id=CVE-2026-33515
** CVE added: https://cve.org/CVERecord?id=CVE-2026-33526
** CVE added: https://cve.org/CVERecord?id=CVE-2026-47729
** CVE added: https://cve.org/CVERecord?id=CVE-2026-50012
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2153490
Title:
Backport squid for stonking cycle
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/squid/+bug/2153490/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
