[squid-users] [squid-announce] [ADVISORY] SQUID-2026:9 FTP command injection in FTP gateway

[Francesco Chemolli]

On Thu, Sep 17, 2026 at 9:21 AM Matus UHLAR - fantomas
<uhlar at fantomas.sk> wrote:
>
> Hello,
>
> On 12.09.26 14:55, Amos Jeffries wrote:
> > Advisory ID:       | SQUID-2026:9
[...]

> Has anyone tried to backport these fixes to 6 (possibly 6.13 in debian)?

Hi Matus,
   the patch in the advisory applies more or less cleanly; I tried
compiling that file on v6 and it builds, except for an unrelated build
error in include/splay.h.
In other words, it should be an easy addition to Debian's source package.
--
    Francesco