[CLSA-2026:1784725992] squid34: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-26 13:50:43 UTC
Description:
- CVE-2026-47729: fix out-of-bounds read in FTP directory listing parsing when a TypeA/TypeB date is not followed by a filename - CVE-2026-50012: harden peerDigestSwapInMask against a cache digest reply whose on-the-wire size exceeds the declared mask_size (heap buffer overflow)
Updated packages:
  • squid34-3.4.14-16.el6.tuxcare.els14.i686.rpm
    sha:06a6c8cf53c63a5d7540d264918fba7becb7900e6aa4cfaa6b4389eb8cdc8013
  • squid34-3.4.14-16.el6.tuxcare.els14.x86_64.rpm
    sha:5b17ec293a99412f2fff8f75b24342abe8305a4425fd0f99e75e4b707c291233
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.