[CLSA-2026:1794010137] squid: Fix of CVE-2026-61642
Type:
security
Severity:
Important
Release date:
2026-11-07 00:30:11 UTC
Description:
- CVE-2026-61642: reject Transfer-Encoding: identity to prevent request smuggling
CVEs fixed:
Updated packages:
  • squid-3.5.20-17.0.11.el7_9.99.tuxcare.els2.i686.rpm
    sha:250b49f0c2bb3c3021557093804e6643d10721c8a57536307f4506934379a8a9
  • squid-3.5.20-17.0.11.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:80692bcfbe2daf2622d8a6362139cf9f9b72e8e74e448ec003ab73f6ee2c2be7
  • squid-migration-script-3.5.20-17.0.11.el7_9.99.tuxcare.els2.i686.rpm
    sha:e6f880d352a451c80125b3660cf95e6d209574d4f510335577bffb7da8ef9b71
  • squid-migration-script-3.5.20-17.0.11.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:161914d33e84298267cba83483578006a420130b8659eec2639df9e29cd2762c
  • squid-sysvinit-3.5.20-17.0.11.el7_9.99.tuxcare.els2.i686.rpm
    sha:c6a5eb2cf26586fb09be7e8580f3ee4702d4d425d955b5b25b13cdb155fc32a7
  • squid-sysvinit-3.5.20-17.0.11.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:5ade64176b81a9fb37043535dc6485dab78457bafe076a8eae241b4e293b400c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.