{"id":"CLSA-2025-1761575970","summary":"Fix of 6 CVEs","details":"   * SECURITY UPDATE: potential Denial of Service via TLS connection\n     - debian/patches/CVE-2020-14058.patch: Fix sending of unknown validation\n       errors to cert validator\n     - CVE-2020-14058\n   * SECURITY UPDATE: improper Validation of Specified Index leads to Denial of\n     Service via TLS Handshake vulnerability\n     - debian/patches/CVE-2023-46724.patch: Fix validation of certificates with\n       CN=* due to Buffer UnderRead in SSL CN Parsing issue (#1523)\n     - CVE-2023-46724\n   * SECURITY UPDATE: denial of Service vulnerability in HTTP Chunked decoder due\n     to uncontrolled recursion bug\n     - debian/patches/CVE-2024-25111.patch: Fix infinite recursion when parsing\n       HTTP chunks, prevent progress in call chain by stopping HttpStateData\n       recursion\n     - CVE-2024-25111\n   * SECURITY UPDATE: denial of Service vulnerability in the NTLM authentication\n     credentials parser due to incorrect input validation\n     - debian/patches/CVE-2020-8517.patch: Fix incorrect input validation\n       allowing writing outside of buffer and leading to denial of service\n     - CVE-2020-8517\n   * SECURITY UPDATE: denial of Service vulnerability against HTTP header parsing\n     due to a Collapse of Data into Unsafe Value\n     - debian/patches/CVE-2024-25617.patch: Improve handling of expanding HTTP\n       header values to prevent DoS\n     - CVE-2024-25617\n   * SECURITY UPDATE: denial of Service vulnerability by a trusted server\n     - debian/rules: Disable ESI due to unfixed multiple\n       issues in ESI causing DoS by a trusted server\n     - debian/control: Remove dependencies used by ESI\n     - CVE-2024-45802","modified":"2026-06-04T10:04:09.440200070Z","published":"2025-10-27T14:39:39Z","upstream":["CVE-2020-14058","CVE-2020-8517","CVE-2023-46724","CVE-2024-25111","CVE-2024-25617","CVE-2024-45802"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761575970.html"}],"affected":[{"package":{"name":"squid","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/squid?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761575970.json"}},{"package":{"name":"squid-cgi","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/squid-cgi?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761575970.json"}},{"package":{"name":"squid-common","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/squid-common?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761575970.json"}},{"package":{"name":"squid-purge","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/squid-purge?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761575970.json"}},{"package":{"name":"squid3","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/squid3?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761575970.json"}},{"package":{"name":"squidclient","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/squidclient?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-1+deb10u10+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761575970.json"}}],"schema_version":"1.7.5"}