[CLSA-2026:1793918953] squid: Fix of CVE-2026-61642
Type:
security
Severity:
Important
Release date:
2026-11-05 22:49:24 UTC
Description:
- CVE-2026-61642: Squid accepted bare Transfer-Encoding: identity and stripped the header, enabling HTTP request smuggling/desync with other agents
CVEs fixed:
Updated packages:
  • squid-4.15-10.module_el8+2745+91070ee7.tuxcare.els7.i686.rpm
    sha:51978f31d0c7f13ad20134629c92be5f1cbe465301b61e8147b421b3b8f367ed
  • squid-4.15-10.module_el8+2745+91070ee7.tuxcare.els7.x86_64.rpm
    sha:cb3aecf91059ceb71c4e991dd1e3dd35ccdb3b015d325a335f82c57127306d09
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.