⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Details of issue NIXPKGS-2025-0018

affected

created 26 Sep 2025

NIXPKGS-2025-0018

A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. However, Squid may grow a cached HTTP response header beyond the configured maximum size, causing a stall or crash of the worker process when a large header is retrieved from the disk cache, resulting in a denial of service.

Vulnerabilities

CVE-2023-5824

Related packages

pkgs.squid

Caching proxy for the Web supporting HTTP, HTTPS, FTP, and more

nixos-25.05 7.0.1
- nixpkgs-25.05-darwin 7.0.1
- nixos-25.05-small 7.0.1
nixos-unstable 6.10
- nixos-unstable-small 7.0.1
- nixpkgs-unstable 7.0.1

pkgs.prometheus-squid-exporter

Squid Prometheus exporter

nixos-25.05 1.13.0
- nixpkgs-25.05-darwin 1.13.0
- nixos-25.05-small 1.13.0
nixos-unstable 1.13.0
- nixos-unstable-small 1.13.0
- nixpkgs-unstable 1.13.0

pkgs.python311Packages.flyingsquid

More interactive weak supervision with FlyingSquid

nixos-unstable 0.0.0a0
- nixos-unstable-small 0.0.0a0
- nixpkgs-unstable 0.0.0a0

pkgs.python312Packages.flyingsquid

More interactive weak supervision with FlyingSquid

nixos-25.05 0.0.0a0
- nixpkgs-25.05-darwin 0.0.0a0
- nixos-25.05-small 0.0.0a0
nixos-unstable 0.0.0a0
- nixos-unstable-small 0.0.0a0
- nixpkgs-unstable 0.0.0a0

pkgs.python313Packages.flyingsquid

More interactive weak supervision with FlyingSquid

nixos-25.05 0.0.0a0
- nixpkgs-25.05-darwin 0.0.0a0
- nixos-25.05-small 0.0.0a0
nixos-unstable 0.0.0a0
- nixos-unstable-small 0.0.0a0
- nixpkgs-unstable 0.0.0a0

pkgs.python312Packages.flyingsquid.x86_64-linux

More interactive weak supervision with FlyingSquid

nixos-unstable 0.0.0a0

pkgs.python312Packages.flyingsquid.aarch64-linux

More interactive weak supervision with FlyingSquid

nixos-unstable 0.0.0a0

pkgs.python312Packages.flyingsquid.x86_64-darwin

More interactive weak supervision with FlyingSquid

nixos-unstable 0.0.0a0

pkgs.python312Packages.flyingsquid.aarch64-darwin

More interactive weak supervision with FlyingSquid

nixos-unstable 0.0.0a0