[CLSA-2026:1794008830] squid: Fix of CVE-2026-61642
Type:
security
Severity:
Important
Release date:
2026-11-06 23:47:21 UTC
Description:
- CVE-2026-61642: reject Transfer-Encoding: identity to prevent request smuggling
CVEs fixed:
Updated packages:
  • squid-3.5.20-17.0.11.el7_9.99.tuxcare.els2.i686.rpm
    sha:22b2b6b80bc88af59c98e6388c4f91c9d6968a91c3208a5b93ac874e8c81c416
  • squid-3.5.20-17.0.11.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:6d169f1bc8688c49b098172c0f3ee2048cbe6041e77294d16c41d17deb31ab09
  • squid-migration-script-3.5.20-17.0.11.el7_9.99.tuxcare.els2.i686.rpm
    sha:33453a7b662dd70b8d251a1b89b32001ed16fb76119e6244e6ea163e3e9b1fa1
  • squid-migration-script-3.5.20-17.0.11.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:635a73431ead9487293d78e2834eeac51dc6cac1b1a2bb3e4f6f8ba2e66e1ef1
  • squid-sysvinit-3.5.20-17.0.11.el7_9.99.tuxcare.els2.i686.rpm
    sha:d48e57614c6ae9eaa65c19c21076d05c413e0b0227f2365877533243f39a5934
  • squid-sysvinit-3.5.20-17.0.11.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:ef4736c745170b97023855eb0c5c4f7d7bec3dd41c2d7ab19148573699e12a4b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.