Several vulnerabilities were discovered in Squid, a fully featured web
proxy cache, which could result in exposure of sensitive information in
the cache manager (CVE-2022-41317), or denial of service or information disclosure if Squid is configured to negotiate authentication with the
SSPI and SMB authentication helpers (CVE-2022-41318).
For the stable distribution (bullseye), these problems have been fixed in version 4.13-10+deb11u2.
We recommend that you upgrade your squid packages.