[CLSA-2026:1791218879] squid: Fix of 2 CVEs
Type:
security
Severity:
None
Release date:
2026-10-05 16:48:07 UTC
Description:
- rebase to 3.5.20-17.amzn2.7.28; CVE-2026-61642 fixed by vendor - carry CVE-2026-47729: out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions
Updated packages:
  • squid-3.5.20-17.amzn2.7.28.tuxcare.els1.aarch64.rpm
    sha:2383b95cf707262f00e5423dad027bad8565d9aaa9912f9a0ab307ccd0c6cd2c
  • squid-3.5.20-17.amzn2.7.28.tuxcare.els1.i686.rpm
    sha:0ca5ba0eac01e52cc0074f8d48132384bf9b805b50f1115e1e42aab4b97f8dd7
  • squid-3.5.20-17.amzn2.7.28.tuxcare.els1.x86_64.rpm
    sha:f4da84da9e3b150aece4bfc4d031b53ba1b462f6d5edd55a8d5964b6b06bd5cb
  • squid-migration-script-3.5.20-17.amzn2.7.28.tuxcare.els1.aarch64.rpm
    sha:22d031656ea933f19a975acbafdd6f44496ceeacf8d3a62389636fc9aa3ae89e
  • squid-migration-script-3.5.20-17.amzn2.7.28.tuxcare.els1.i686.rpm
    sha:8b23919a29ca23ad2f4a88c75cd16540ecb138f5f4da008f845abb1170f4fb88
  • squid-migration-script-3.5.20-17.amzn2.7.28.tuxcare.els1.x86_64.rpm
    sha:caaf1ac0920b07fd3168653d2a6fe9df27e149464c61e4c684276805ba9b1b8e
  • squid-sysvinit-3.5.20-17.amzn2.7.28.tuxcare.els1.aarch64.rpm
    sha:0881e8f2ae137c3d96c87b5afc68f78081e2744cdea558d8be1ec2bfa2bfbbb0
  • squid-sysvinit-3.5.20-17.amzn2.7.28.tuxcare.els1.i686.rpm
    sha:7aac30568a218e152299c25cb5dd8bbcaaba6f7899889627b73092b584be18c3
  • squid-sysvinit-3.5.20-17.amzn2.7.28.tuxcare.els1.x86_64.rpm
    sha:86b9851e83961566e24987b584256a68b56d4f3ef1ec9e39e876ec6ff42020ac
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.