MGASA-2026-0094

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2026-0094.html
Import Source
https://advisories.mageia.org/MGASA-2026-0094.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2026-0094
Upstream
Published
2026-04-12T05:23:15Z
Modified
2026-04-16T00:10:07.838052019Z
Summary
Updated squid packages fix security vulnerabilities
Details

Squid mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c. (CVE-2025-59362) Squid vulnerable to information disclosure via authentication credential leakage in error handling. (CVE-2025-62168) Squid vulnerable to Denial of Service in ICP Request handling. (CVE-2026-33526) Squid has Denial of Service in ICP Response handling. (CVE-2026-32748) Squid has issues in ICP message handling. (CVE-2026-33515)

References
Credits

Affected packages

Mageia:9 / squid

Package

Name
squid
Purl
pkg:rpm/mageia/squid?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.9-1.5.mga9

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0094.json"