CLSA-2026-1784725992

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1784725992.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1784725992
Upstream
CVE (2)
Published
2026-07-22T13:13:39Z
Modified
2026-10-26T09:31:46Z
Summary
squid34: Fix of 2 CVEs
Details
  • CVE-2026-47729: fix out-of-bounds read in FTP directory listing parsing when a TypeA/TypeB date is not followed by a filename
  • CVE-2026-50012: harden peerDigestSwapInMask against a cache digest reply whose on-the-wire size exceeds the declared mask_size (heap buffer overflow)
References

Affected packages

TuxCare:OracleLinux:6 / squid34

Package

Name
squid34
Purl
pkg:rpm/tuxcare/squid34?distro=oraclelinux-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7:3.4.14-16.el6.tuxcare.els14

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1784725992.json"