[CLSA-2026:1794009672] squid: Fix of CVE-2026-61642
Type:
security
Severity:
Important
Release date:
2026-11-07 00:01:23 UTC
Description:
- CVE-2026-61642: reject Transfer-Encoding: identity to prevent request smuggling
CVEs fixed:
Updated packages:
  • squid-3.5.20-17.0.11.el7_9.99.tuxcare.els2.aarch64.rpm
    sha:4dc16269fa9dfc9606966d935aa0ea6f17e067a7b15fa148e2bf620bd285d684
  • squid-3.5.20-17.0.11.el7_9.99.tuxcare.els2.i686.rpm
    sha:61552f175ce76814a64e4d842e3b53ccc68bc3cea25442723e4879d71e7ade0b
  • squid-3.5.20-17.0.11.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:8f86032f80d97d2d1805ca177431fad0fdb4054d1a915319426d4ef9485a63ea
  • squid-migration-script-3.5.20-17.0.11.el7_9.99.tuxcare.els2.aarch64.rpm
    sha:723955db27bdcb5cda77f4b71a1cfe9936eb63aed0ac37f2b721784856705f23
  • squid-migration-script-3.5.20-17.0.11.el7_9.99.tuxcare.els2.i686.rpm
    sha:456b14bde17f138de2b9ea8b40f445745d6aaa6fd0c982ace9efa63b126764a7
  • squid-migration-script-3.5.20-17.0.11.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:911d3d30d731831ef9bb5afcb51b632234a3425cf96fa4dd35005b0c22e75aef
  • squid-sysvinit-3.5.20-17.0.11.el7_9.99.tuxcare.els2.aarch64.rpm
    sha:b56e2bcc142ca978cf11c52bdc9504a7f770989d2bae227041f2c89a068ae1e7
  • squid-sysvinit-3.5.20-17.0.11.el7_9.99.tuxcare.els2.i686.rpm
    sha:518de2e250fe31ef100536a0102ed85a39afbba5e3b52d531df6e92b5037a2c6
  • squid-sysvinit-3.5.20-17.0.11.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:eb8bacb06d3fd32dae3d0023886433854334218eced979e50cd51ea86025cd24
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.