{"id":"CLSA-2026-1779462193","summary":"Fix CVE(s): CVE-2026-33515","details":"   * SECURITY UPDATE: out-of-bounds read when handling malformed ICP traffic\n     - debian/patches/CVE-2026-33515.patch: validate ICP packet sizes and\n       URLs in icpGetUrl(); reject non-NUL-terminated URLs, URLs with\n       embedded NULs or trailing garbage; guard icpHandleUdp() against a\n       nil icpOutgoingConn pointer\n     - CVE-2026-33515","modified":"2026-06-04T09:46:12.840924093Z","published":"2026-05-22T15:03:17Z","upstream":["CVE-2026-33515"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1779462193.html"}],"affected":[{"package":{"name":"squid","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/squid?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1779462193.json"}},{"package":{"name":"squid-cgi","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/squid-cgi?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1779462193.json"}},{"package":{"name":"squid-common","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/squid-common?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1779462193.json"}},{"package":{"name":"squid-purge","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/squid-purge?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1779462193.json"}},{"package":{"name":"squidclient","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/squidclient?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10-1ubuntu1.13+tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1779462193.json"}}],"schema_version":"1.7.5"}