[CLSA-2026:1792806435] Fix CVE(s): CVE-2026-61642
Type:
security
Severity:
Important
Release date:
2026-10-24 01:47:26 UTC
Description:
* SECURITY UPDATE: request smuggling via Transfer-Encoding: identity - debian/patches/CVE-2026-61642.patch: reject Transfer-Encoding: identity - CVE-2026-61642
CVEs fixed:
Updated packages:
  • squid_4.6-1+deb10u10+tuxcare.els6_amd64.deb
    sha:e204d5c2b21dfd3dbb74f10749fe7286838ef38e
  • squid-cgi_4.6-1+deb10u10+tuxcare.els6_amd64.deb
    sha:07a6765f24fe7e470433708adb58b8c2bb9bcef0
  • squid-common_4.6-1+deb10u10+tuxcare.els6_all.deb
    sha:56d00a9b905165ed2e806717ed94113c3d44d72f
  • squid-purge_4.6-1+deb10u10+tuxcare.els6_amd64.deb
    sha:6c37f29004dd7560dd68013bc3cee26530ee2481
  • squid3_4.6-1+deb10u10+tuxcare.els6_all.deb
    sha:5af2111d6f36fbd7410cf5921ff6dafacc3a51cf
  • squidclient_4.6-1+deb10u10+tuxcare.els6_amd64.deb
    sha:1c993dd950723ff2f92c5621076648ab3a1d2a42
  • squid_4.6-1+deb10u10+tuxcare.els6_arm64.deb
    sha:6859e7406ff2cdd938481bb18d7c107627b01050
  • squid-cgi_4.6-1+deb10u10+tuxcare.els6_arm64.deb
    sha:907c6398444f25dd426062dd500efcb833a9b471
  • squid-purge_4.6-1+deb10u10+tuxcare.els6_arm64.deb
    sha:0b0f475c2603f04fa70803ab38740eb13c3b843c
  • squidclient_4.6-1+deb10u10+tuxcare.els6_arm64.deb
    sha:6be308dd4a6d3cdec220b9f9c9b3452ee641a545
  • squid_4.6-1+deb10u10+tuxcare.els6_armel.deb
    sha:27cc96e676081bb9bf3667923231817c6eb439aa
  • squid-cgi_4.6-1+deb10u10+tuxcare.els6_armel.deb
    sha:302fbd1ceb0835d4b4b757d33b86fe3e9ba3cd96
  • squid-purge_4.6-1+deb10u10+tuxcare.els6_armel.deb
    sha:fa656f1285462469b692d29a1d5c62beb09e0348
  • squidclient_4.6-1+deb10u10+tuxcare.els6_armel.deb
    sha:8e00e925ef2802ec108e97eff9a8daa165b9b552
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.