Release date:
2026-09-08 16:24:34 UTC
Description:
* SECURITY UPDATE: Fix HttpRequest use-after-free for ICP v3 queries
- debian/patches/CVE-2026-32748.patch: move the icp_access check inside
icpGetRequest() and return an HttpRequest::Pointer so the request
survives the on-stack ACLFilledChecklist, eliminating the
use-after-free in src/ICP.h, src/icp_v2.cc, src/icp_v3.cc and
src/tests/stub_icp.cc
- CVE-2026-32748
Updated packages:
-
squid_4.13-10+deb11u7+tuxcare.els1_amd64.deb
sha:0a5124f9f6550d30e61049da450d7b78c40ecb50
-
squid-cgi_4.13-10+deb11u7+tuxcare.els1_amd64.deb
sha:38694ddbdce9c270fe07a21bb2f6aac723ac2975
-
squid-common_4.13-10+deb11u7+tuxcare.els1_all.deb
sha:e472738553fc1c3faf7c6f7b84cb67f88d48fc90
-
squid-openssl_4.13-10+deb11u7+tuxcare.els1_amd64.deb
sha:523e9b4b31ff52e6a5767ddf778b2cb1927336e0
-
squid-purge_4.13-10+deb11u7+tuxcare.els1_amd64.deb
sha:d6926bb12e8907c2ab5b4921989945e0c0f9e662
-
squidclient_4.13-10+deb11u7+tuxcare.els1_amd64.deb
sha:d3131f93478a713ab15efb7e029818d7b0876649
-
squid_4.13-10+deb11u7+tuxcare.els1_arm64.deb
sha:e4ee2a693b172ff7e44f15d6acbbc5f4220dc15f
-
squid-cgi_4.13-10+deb11u7+tuxcare.els1_arm64.deb
sha:f4a1e273f25e40e83a6a6d98439b9cfa4642e957
-
squid-openssl_4.13-10+deb11u7+tuxcare.els1_arm64.deb
sha:0b37251cab1e3a49859f5b4efc111d87b6756f1c
-
squid-purge_4.13-10+deb11u7+tuxcare.els1_arm64.deb
sha:43f6a95a3cb8017d17d64efe962f8df21f7e6a5c
-
squidclient_4.13-10+deb11u7+tuxcare.els1_arm64.deb
sha:93660a1d7cb993b54d40fe412330113d6e10b5c6
-
squid_4.13-10+deb11u7+tuxcare.els1_armel.deb
sha:9fe063625fd68b7feb31c0e65fac62ed2065db96
-
squid-cgi_4.13-10+deb11u7+tuxcare.els1_armel.deb
sha:fdd8e046b8ae089166df6601fc856cd6739297e7
-
squid-openssl_4.13-10+deb11u7+tuxcare.els1_armel.deb
sha:296b547b68d939f862e6e3abfc1a47c7a2b50445
-
squid-purge_4.13-10+deb11u7+tuxcare.els1_armel.deb
sha:e8322b6d3c1c2836ff8f4ad7039fc3a588d8308c
-
squidclient_4.13-10+deb11u7+tuxcare.els1_armel.deb
sha:437912073f1b83b8cddfb9ee29ad938de89e0cd9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
