{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2023-49288: fix use-after-free in StoreEntry::startWriting() reachable\n via oversized replies with collapsed_forwarding enabled\n- CVE-2025-59362: fix mishandling of ASN.1 encoding of long SNMP OIDs in\n lib/snmplib/asn1.c (asn_build_objid)\n- CVE-2026-33515: fix validation of packet sizes and URLs in ICP\n- CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory\n listing parser that could disclose memory from unrelated transactions\n- CVE-2026-50012: fix heap buffer overflow in cache digest reply handling\n when the on-the-wire payload exceeds the advertised mask size", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791296651", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791296651" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.8esu/advisories/2026/clsa-2026_1791296651.json" } ], "tracking": { "current_release_date": "2026-10-06T14:25:12Z", "generator": { "date": "2026-10-06T14:25:12Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1791296651", "initial_release_date": "2026-10-06T14:25:12Z", "revision_history": [ { "date": "2026-10-06T14:25:12Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "squid: Fix of 5 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.8", "product": { "name": "AlmaLinux 9.8", "product_id": "AlmaLinux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Rocky Linux 9.8", "product": { "name": "Rocky Linux 9.8", "product_id": "Rocky Linux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:resf:rocky_linux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Rocky Linux" } ], "category": "vendor", "name": "Rocky Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "product": { "name": "squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "product_id": "squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/squid@5.5-26.el9_8.tuxcare.els1?arch=aarch64&epoch=7" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "squid-7:5.5-26.el9_8.tuxcare.els1.x86_64", "product": { "name": "squid-7:5.5-26.el9_8.tuxcare.els1.x86_64", "product_id": "squid-7:5.5-26.el9_8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/squid@5.5-26.el9_8.tuxcare.els1?arch=x86_64&epoch=7" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "squid-7:5.5-26.el9_8.tuxcare.els1.i686", "product": { "name": "squid-7:5.5-26.el9_8.tuxcare.els1.i686", "product_id": "squid-7:5.5-26.el9_8.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/squid@5.5-26.el9_8.tuxcare.els1?arch=i686&epoch=7" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "squid-7:5.5-26.el9_8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64" }, "product_reference": "squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "squid-7:5.5-26.el9_8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64" }, "product_reference": "squid-7:5.5-26.el9_8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "squid-7:5.5-26.el9_8.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686" }, "product_reference": "squid-7:5.5-26.el9_8.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "squid-7:5.5-26.el9_8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64" }, "product_reference": "squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "squid-7:5.5-26.el9_8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64" }, "product_reference": "squid-7:5.5-26.el9_8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "squid-7:5.5-26.el9_8.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686" }, "product_reference": "squid-7:5.5-26.el9_8.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-47729", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-47729" }, { "category": "external", "summary": "https://github.com/squid-cache/squid/commit/865a131c7d557e68c965043d98c2eccae26deef8", "url": "https://github.com/squid-cache/squid/commit/865a131c7d557e68c965043d98c2eccae26deef8" }, { "category": "external", "summary": "https://github.com/squid-cache/squid/pull/2408", "url": "https://github.com/squid-cache/squid/pull/2408" }, { "category": "external", "summary": "https://github.com/squid-cache/squid/pull/2409", "url": "https://github.com/squid-cache/squid/pull/2409" }, { "category": "external", "summary": "https://github.com/squid-cache/squid/releases/tag/SQUID_7_6", "url": "https://github.com/squid-cache/squid/releases/tag/SQUID_7_6" }, { "category": "external", "summary": "https://github.com/squid-cache/squid/security/advisories/GHSA-8c37-pxjq-qwrg", "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-8c37-pxjq-qwrg" } ], "release_date": "2026-07-16T17:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-06T14:24:13.120393Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791296651", "product_ids": [ "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791296651" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-50012", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "description", "text": "Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is vulnerable to a heap-based buffer overflow: a cache digest's on-the-wire size may be larger than the mask_size declared within the digest, so a trusted peer sending a maliciously crafted reply to a cache_digest request message can trigger the overflow. This attack is limited to Squid instances compiled with the --enable-cache-digests option and configured with cache_peer entries. This issue is fixed in version 7.6.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-50012" }, { "category": "external", "summary": "https://github.com/squid-cache/squid/commit/19fcfe922717c8b255270c032dcde4071c003bcd", "url": "https://github.com/squid-cache/squid/commit/19fcfe922717c8b255270c032dcde4071c003bcd" }, { "category": "external", "summary": "https://github.com/squid-cache/squid/pull/2423", "url": "https://github.com/squid-cache/squid/pull/2423" }, { "category": "external", "summary": "https://github.com/squid-cache/squid/releases/tag/SQUID_7_6", "url": "https://github.com/squid-cache/squid/releases/tag/SQUID_7_6" }, { "category": "external", "summary": "https://github.com/squid-cache/squid/security/advisories/GHSA-5vmx-9x64-9284", "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-5vmx-9x64-9284" } ], "release_date": "2026-07-16T17:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-06T14:24:13.120393Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791296651", "product_ids": [ "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791296651" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-59362", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-59362" }, { "category": "external", "summary": "https://github.com/Microsvuln/advisories/blob/main/CVE-2025-59362/CVE-2025-59362.md", "url": "https://github.com/Microsvuln/advisories/blob/main/CVE-2025-59362/CVE-2025-59362.md" }, { "category": "external", "summary": "https://github.com/squid-cache/squid/pull/2149", "url": "https://github.com/squid-cache/squid/pull/2149" } ], "release_date": "2025-09-26T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-06T14:24:13.120393Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791296651", "product_ids": [ "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791296651" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-33515", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid is vulnerable to out of bounds read when handling ICP traffic. This problem allows a remote attacker to receive small amounts of memory potentially containing sensitive information when responding with errors to invalid ICP requests. This attack is limited to Squid deployments that explicitly enable ICP support (i.e. configure non-zero `icp_port`). This problem cannot be mitigated by denying ICP queries using `icp_access` rules. Version 7.5 contains a patch.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-33515" }, { "category": "external", "summary": "https://github.com/squid-cache/squid/commit/8138e909d2058d4401e0ad49b583afaec912b165", "url": "https://github.com/squid-cache/squid/commit/8138e909d2058d4401e0ad49b583afaec912b165" }, { "category": "external", "summary": "https://github.com/squid-cache/squid/pull/2220", "url": "https://github.com/squid-cache/squid/pull/2220" }, { "category": "external", "summary": "https://github.com/squid-cache/squid/pull/2220#discussion_r2727683637", "url": "https://github.com/squid-cache/squid/pull/2220#discussion_r2727683637" }, { "category": "external", "summary": "https://github.com/squid-cache/squid/security/advisories/GHSA-84p4-hcx7-jj7c", "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-84p4-hcx7-jj7c" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/03/25/4", "url": "http://www.openwall.com/lists/oss-security/2026/03/25/4" } ], "release_date": "2026-03-26T01:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-06T14:24:13.120393Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791296651", "product_ids": [ "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791296651" } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-49288", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with \"collapsed_forwarding on\" are vulnerable. Configurations with \"collapsed_forwarding off\" or without a \"collapsed_forwarding\" directive are not vulnerable. This bug is fixed by Squid version 6.0.1. Users are advised to upgrade. Users unable to upgrade should remove all collapsed_forwarding lines from their squid.conf.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-49288" }, { "category": "external", "summary": "https://github.com/squid-cache/squid/security/advisories/GHSA-rj5h-46j6-q2g5", "url": "https://github.com/squid-cache/squid/security/advisories/GHSA-rj5h-46j6-q2g5" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A5QASTMCUSUEW3UOMKHZJB3FTONWSRXS/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A5QASTMCUSUEW3UOMKHZJB3FTONWSRXS/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEV66D3PAAY6K7TWDT3WZBLCPLASFJDC/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEV66D3PAAY6K7TWDT3WZBLCPLASFJDC/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240119-0006/", "url": "https://security.netapp.com/advisory/ntap-20240119-0006/" } ], "release_date": "2023-12-04T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-06T14:24:13.120393Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791296651", "product_ids": [ "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:squid-7:5.5-26.el9_8.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791296651" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }