[CLSA-2026:1792806098] Fix CVE(s): CVE-2026-61642
Type:
security
Severity:
Important
Release date:
2026-10-24 01:41:49 UTC
Description:
* SECURITY UPDATE: request smuggling via Transfer-Encoding: identity - debian/patches/CVE-2026-61642.patch: reject Transfer-Encoding: identity - CVE-2026-61642
CVEs fixed:
Updated packages:
  • squid_4.13-10+deb11u7+tuxcare.els3_amd64.deb
    sha:6fd66c0acad24dd70e145bf3f439c826b7f7ea32
  • squid-cgi_4.13-10+deb11u7+tuxcare.els3_amd64.deb
    sha:35d911dc08d1948ee7d58871f90c4152361617d8
  • squid-common_4.13-10+deb11u7+tuxcare.els3_all.deb
    sha:253c3d82ce9a6a86491cf33fed828e5ae0d3f8e0
  • squid-openssl_4.13-10+deb11u7+tuxcare.els3_amd64.deb
    sha:422ef470bc6b349cc47bbb8e4ec9ffa82a608d85
  • squid-purge_4.13-10+deb11u7+tuxcare.els3_amd64.deb
    sha:7b5329e1a82d8bf106496c0cfe0bf60589a9ef6a
  • squidclient_4.13-10+deb11u7+tuxcare.els3_amd64.deb
    sha:8633a000172660c748ac815ab197a1ceef7f0213
  • squid_4.13-10+deb11u7+tuxcare.els3_arm64.deb
    sha:c137effa470442adfb0be0be01583f5e00f08c93
  • squid-cgi_4.13-10+deb11u7+tuxcare.els3_arm64.deb
    sha:a0543f2b637a70fc44fa6f6916e3cd7269180624
  • squid-openssl_4.13-10+deb11u7+tuxcare.els3_arm64.deb
    sha:c8229eb5b92be821baa0789c4113dcaad3267f2a
  • squid-purge_4.13-10+deb11u7+tuxcare.els3_arm64.deb
    sha:23a442349a2bf0e30148fed772293d474f9eb9e0
  • squidclient_4.13-10+deb11u7+tuxcare.els3_arm64.deb
    sha:c20d2114e1edb1644fbfa3eeac3233a944747b73
  • squid_4.13-10+deb11u7+tuxcare.els3_armel.deb
    sha:2bde40609a87c2faa423b9080f01dd7124dc76d4
  • squid-cgi_4.13-10+deb11u7+tuxcare.els3_armel.deb
    sha:fba35027a4b634363fac6b9b39805a692109b092
  • squid-openssl_4.13-10+deb11u7+tuxcare.els3_armel.deb
    sha:809dabde81445499b79ecb337bf05a0a0585d477
  • squid-purge_4.13-10+deb11u7+tuxcare.els3_armel.deb
    sha:cd774d26fe6b4df1a4fc6bceab34ac935cb310d4
  • squidclient_4.13-10+deb11u7+tuxcare.els3_armel.deb
    sha:042120ac4c0f2620a2d08bca77271ce7735f1b91
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.