<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 16:30:19 +0000</lastBuildDate>
    <item>
      <title>ALSA-2020:4743 — Moderate: squid:4 security, bug fix, and enhancement update</title>
      <link>https://cve.radiocsirt.org/vuln/alsa-2020:4743</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:8: libecap, AlmaLinux:8: libecap-devel&lt;/p&gt;
&lt;p&gt;Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.&lt;/p&gt;
&lt;p&gt;The following packages have been upgraded to a later upstream version: squid (4.11). (BZ#1829467)&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* squid: Improper input validation in request allows for proxy manipulation (CVE-2019-12520)&lt;/p&gt;
&lt;p&gt;* squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash (CVE-2019-12521)&lt;/p&gt;
&lt;p&gt;* squid: Improper input validation in URI processor (CVE-2019-12523)&lt;/p&gt;
&lt;p&gt;* squid: Improper access restriction in url_regex may lead to security bypass (CVE-2019-12524)&lt;/p&gt;
&lt;p&gt;* squid: Heap overflow issue in URN processing (CVE-2019-12526)&lt;/p&gt;
&lt;p&gt;* squid: Information Disclosure issue in FTP Gateway (CVE-2019-12528)&lt;/p&gt;
&lt;p&gt;* squid: Out of bounds read in Proxy-Authorization header causes DoS (CVE-2019-12529)&lt;/p&gt;
&lt;p&gt;* squid: Denial of service in cachemgr.cgi (CVE-2019-12854)&lt;/p&gt;
&lt;p&gt;* squid: Buffer overflow in URI processor (CVE-2019-18676)&lt;/p&gt;
&lt;p&gt;* squid: Cross-Site Request Forgery issue in HTTP Request processing (CVE-2019-18677)&lt;/p&gt;
&lt;p&gt;* squid: HTTP Request Splitting issue in HTTP message processing (CVE-2019-18678)&lt;/p&gt;
&lt;p&gt;* squid: Information Disclosure issue in HTTP Digest Authentication (CVE-2019-18679)&lt;/p&gt;
&lt;p&gt;* squid: Mishandled HTML in the host parameter to cachemgr.cgi results in insecure behaviour (CVE-2019-18860)&lt;/p&gt;
&lt;p&gt;* squid: Improper input validation issues in HTTP Request processing (CVE-2020-8449)&lt;/p&gt;
&lt;p&gt;* squid: Buffer overflow in reverse-proxy configurations (CVE-2020-8450)&lt;/p&gt;
&lt;p&gt;* squid: DoS in TLS handshake (…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:8: libecap, AlmaLinux:8: libecap-devel&lt;/p&gt;
&lt;p&gt;Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects.&lt;/p&gt;
&lt;p&gt;The following packages have been upgraded to a later upstream version: squid (4.11). (BZ#1829467)&lt;/p&gt;
&lt;p&gt;Security Fix(es):&lt;/p&gt;
&lt;p&gt;* squid: Improper input validation in request allows for proxy manipulation (CVE-2019-12520)&lt;/p&gt;
&lt;p&gt;* squid: Off-by-one error in addStackElement allows for heap buffer overflow and crash (CVE-2019-12521)&lt;/p&gt;
&lt;p&gt;* squid: Improper input validation in URI processor (CVE-2019-12523)&lt;/p&gt;
&lt;p&gt;* squid: Improper access restriction in url_regex may lead to security bypass (CVE-2019-12524)&lt;/p&gt;
&lt;p&gt;* squid: Heap overflow issue in URN processing (CVE-2019-12526)&lt;/p&gt;
&lt;p&gt;* squid: Information Disclosure issue in FTP Gateway (CVE-2019-12528)&lt;/p&gt;
&lt;p&gt;* squid: Out of bounds read in Proxy-Authorization header causes DoS (CVE-2019-12529)&lt;/p&gt;
&lt;p&gt;* squid: Denial of service in cachemgr.cgi (CVE-2019-12854)&lt;/p&gt;
&lt;p&gt;* squid: Buffer overflow in URI processor (CVE-2019-18676)&lt;/p&gt;
&lt;p&gt;* squid: Cross-Site Request Forgery issue in HTTP Request processing (CVE-2019-18677)&lt;/p&gt;
&lt;p&gt;* squid: HTTP Request Splitting issue in HTTP message processing (CVE-2019-18678)&lt;/p&gt;
&lt;p&gt;* squid: Information Disclosure issue in HTTP Digest Authentication (CVE-2019-18679)&lt;/p&gt;
&lt;p&gt;* squid: Mishandled HTML in the host parameter to cachemgr.cgi results in insecure behaviour (CVE-2019-18860)&lt;/p&gt;
&lt;p&gt;* squid: Improper input validation issues in HTTP Request processing (CVE-2020-8449)&lt;/p&gt;
&lt;p&gt;* squid: Buffer overflow in reverse-proxy configurations (CVE-2020-8450)&lt;/p&gt;
&lt;p&gt;* squid: DoS in TLS handshake (…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/alsa-2020:4743</guid>
    </item>
    <item>
      <title>bdu:2021-01750</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2021-01750</link>
      <description>bdu:2021-01750</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2021-01750</guid>
    </item>
    <item>
      <title>cnvd-2020-23192</title>
      <link>https://cve.radiocsirt.org/vuln/cnvd-2020-23192</link>
      <description>cnvd-2020-23192</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cnvd-2020-23192</guid>
    </item>
    <item>
      <title>EUVD-2026-260177</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-260177</link>
      <description>EUVD-2026-260177</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-260177</guid>
    </item>
    <item>
      <title>fkie_cve-2019-18860</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2019-18860</link>
      <description>&lt;p&gt;Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.cgi.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.cgi.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2019-18860</guid>
    </item>
    <item>
      <title>GHSA-f3c4-4h69-w2fp</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-f3c4-4h69-w2fp</link>
      <description>&lt;p&gt;Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.cgi.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.cgi.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-f3c4-4h69-w2fp</guid>
    </item>
    <item>
      <title>gsd-2019-18860</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2019-18860</link>
      <description>gsd-2019-18860</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2019-18860</guid>
    </item>
    <item>
      <title>openSUSE-SU-2020:0623-1 — Security update for squid</title>
      <link>https://cve.radiocsirt.org/vuln/opensuse-su-2020:0623-1</link>
      <description>&lt;p&gt;Security update for squid&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Security update for squid&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/opensuse-su-2020:0623-1</guid>
    </item>
    <item>
      <title>SUSE-SU-2020:1134-1 — Security update for squid</title>
      <link>https://cve.radiocsirt.org/vuln/suse-su-2020:1134-1</link>
      <description>&lt;p&gt;Security update for squid&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Security update for squid&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/suse-su-2020:1134-1</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2019-18860</title>
      <link>https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-18860</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:16.04:LTS: squid3, Ubuntu:18.04:LTS: squid3&lt;/p&gt;
&lt;p&gt;Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.cgi.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:16.04:LTS: squid3, Ubuntu:18.04:LTS: squid3&lt;/p&gt;
&lt;p&gt;Squid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname) parameter to cachemgr.cgi.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-18860</guid>
    </item>
    <item>
      <title>WID-SEC-W-2023-2759 — Squid: Schwachstelle ermöglicht Manipulation von Dateien</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2759</link>
      <description>&lt;p&gt;Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Squid ausnutzen, um Dateien zu manipulieren.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Squid ausnutzen, um Dateien zu manipulieren.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2759</guid>
    </item>
  </channel>
</rss>
