[CLSA-2026:1787042235] squid34: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-28 22:07:34 UTC
Description:
- CVE-2026-47729: fix out-of-bounds read in FTP directory listing parsing when a TypeA/TypeB date is not followed by a filename - CVE-2026-50012: harden peerDigestSwapInMask against a cache digest reply whose on-the-wire size exceeds the declared mask_size (heap buffer overflow)
Updated packages:
  • squid34-3.4.14-16.el6.tuxcare.els14.i686.rpm
    sha:5e8faae79d9bdf045eb4343d94ae3ca0d8a9ff72500c0ded4a2a3faafd3779c3
  • squid34-3.4.14-16.el6.tuxcare.els14.x86_64.rpm
    sha:5c1f393555f5e2abeff749aa34356fb71a17c6d952a09e4f8bff92cfd6febef5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.