[CLSA-2026:1794008920] squid: Fix of CVE-2026-61642
Type:
security
Severity:
Important
Release date:
2026-11-06 23:48:50 UTC
Description:
- CVE-2026-61642: reject Transfer-Encoding: identity to prevent request smuggling
CVEs fixed:
Updated packages:
  • squid-3.5.20-17.0.11.el7_9.99.tuxcare.els2.i686.rpm
    sha:3071ac959cb1a05e328a06afd05f934f023f71293e0b8aae3cd223f88a9ab80c
  • squid-3.5.20-17.0.11.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:f88209b641d3ecaffea00a2c40516d615f40580df36de39bef83e57828d46981
  • squid-migration-script-3.5.20-17.0.11.el7_9.99.tuxcare.els2.i686.rpm
    sha:897f5325071d43b116aeb67d8a6ef87c05cabc90423546df9f6ab0a2d383d91e
  • squid-migration-script-3.5.20-17.0.11.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:1541535050ad6824c750fbd0332bc3d74978bb5527c2e39f500252553081809f
  • squid-sysvinit-3.5.20-17.0.11.el7_9.99.tuxcare.els2.i686.rpm
    sha:29092c8b69fa2b84195deb0c91035612424249d50f05cafdd8d4846b3e903bb4
  • squid-sysvinit-3.5.20-17.0.11.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:42e9a513eec168cbaeb4065b5c7fa4a192311597a8ef5283f4969354efe5f797
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.