[CLSA-2026:1789375226] Fix CVE(s): CVE-2025-21311
Type:
security
Severity:
Critical
Release date:
2026-09-14 08:40:35 UTC
Description:
* SECURITY UPDATE: Remove the unmaintained ntlm_smb_lm_auth NTLM helper - debian/patches/CVE-2025-21311.patch: drop src/auth/ntlm/SMB_LM and its build wiring from configure.ac, configure, src/auth/ntlm/Makefile.am, src/auth/ntlm/Makefile.in and src/auth/ntlm/helpers.m4 - debian/rules: drop SMB_LM from --enable-auth-ntlm, so /usr/lib/squid/ntlm_smb_lm_auth is no longer built or shipped and NTLM authentication must use an externally provided helper such as Samba ntlm_auth - CVE-2025-21311
CVEs fixed:
Updated packages:
  • squid_4.13-10+deb11u7+tuxcare.els2_amd64.deb
    sha:ba6898798a97b76a51709c645ff7b68b6c3b0e74
  • squid-cgi_4.13-10+deb11u7+tuxcare.els2_amd64.deb
    sha:2824de5e5cbdf206cab0fe96ab95cb724bad08b7
  • squid-common_4.13-10+deb11u7+tuxcare.els2_all.deb
    sha:a45ba6527c550f5a5e90fe0eb1d271f819eb8ad3
  • squid-openssl_4.13-10+deb11u7+tuxcare.els2_amd64.deb
    sha:529c40fedd4ebb002f6e259b0d0519fd3d8696e6
  • squid-purge_4.13-10+deb11u7+tuxcare.els2_amd64.deb
    sha:10a59a7d05f8df66e1683ae9668f647b6a5d118b
  • squidclient_4.13-10+deb11u7+tuxcare.els2_amd64.deb
    sha:6e4792fe899f64f88ab46462c3dad5f6ffad273f
  • squid_4.13-10+deb11u7+tuxcare.els2_arm64.deb
    sha:f6b6969a1593639957a62159d311a122d5b25c32
  • squid-cgi_4.13-10+deb11u7+tuxcare.els2_arm64.deb
    sha:79939555dbf8f7619deb94a15989355a87d9169c
  • squid-openssl_4.13-10+deb11u7+tuxcare.els2_arm64.deb
    sha:c4a285c7c15bfbe1c7065358f20130218a1a35ca
  • squid-purge_4.13-10+deb11u7+tuxcare.els2_arm64.deb
    sha:8ca4b3ba3541b0430faeb15b877a2df829a052f1
  • squidclient_4.13-10+deb11u7+tuxcare.els2_arm64.deb
    sha:d736466a67948bf697a108795bb41488bc8c37a8
  • squid_4.13-10+deb11u7+tuxcare.els2_armel.deb
    sha:8501423db87bb3dba4bffdbbf49605b103271467
  • squid-cgi_4.13-10+deb11u7+tuxcare.els2_armel.deb
    sha:2578b9b168100e29d08e68bdd281f39fbe7b7bf0
  • squid-openssl_4.13-10+deb11u7+tuxcare.els2_armel.deb
    sha:0ebc9c1c926f93282a69bd46d698359f061a5070
  • squid-purge_4.13-10+deb11u7+tuxcare.els2_armel.deb
    sha:522d772292c563c46881dfc393a34d29b7334980
  • squidclient_4.13-10+deb11u7+tuxcare.els2_armel.deb
    sha:3829492cff0cf081fab1b695506137085daf1e82
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.