Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Squid Server Exposes User Credentials and Crashes
published 6 months ago
Summary
An update is available to fix security issues in Squid, a popular web proxy server software. If left unpatched, these issues could allow attackers to steal sensitive user credentials or crash the server, disrupting access to your website or network. We recommend updating your Squid installation as soon as possible to ensure the security and stability of your system.
What to do
- Update mageia squid to version 5.9-1.5.mga9.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Mageia:9 | mageia | squid |
< 5.9-1.5.mga9 Fix: upgrade to 5.9-1.5.mga9
|
Original advisory text
Updated squid packages fix security vulnerabilities
Squid mishandles ASN.1 encoding of long SNMP OIDs. This occurs in
asn_build_objid in lib/snmplib/asn1.c. (CVE-2025-59362)
Squid vulnerable to information disclosure via authentication credential
leakage in error handling. (CVE-2025-62168)
Squid vulnerable to Denial of Service in ICP Request handling.
(CVE-2026-33526)
Squid has Denial of Service in ICP Response handling. (CVE-2026-32748)
Squid has issues in ICP message handling. (CVE-2026-33515)
asn_build_objid in lib/snmplib/asn1.c. (CVE-2025-59362)
Squid vulnerable to information disclosure via authentication credential
leakage in error handling. (CVE-2025-62168)
Squid vulnerable to Denial of Service in ICP Request handling.
(CVE-2026-33526)
Squid has Denial of Service in ICP Response handling. (CVE-2026-32748)
Squid has issues in ICP message handling. (CVE-2026-33515)
References
- https://advisories.mageia.org/MGASA-2026-0094.html Vendor Advisory
- https://bugs.mageia.org/show_bug.cgi?id=35271 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2026/03/25/2 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2026/03/25/3 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2026/03/25/4 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8157-1 Third Party Advisory
Timeline
Published12 Apr 2026
Updated12 Apr 2026
First seen12 Apr 2026
Sources
MGASA-2026-0094 · OSV
Track software like this
Free during beta