CLSA-2026-1787042235

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1787042235.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1787042235
Upstream
CVE (2)
Published
2026-08-18T20:54:56Z
Modified
2026-10-26T09:31:40Z
Summary
squid34: Fix of 2 CVEs
Details
  • CVE-2026-47729: fix out-of-bounds read in FTP directory listing parsing when a TypeA/TypeB date is not followed by a filename
  • CVE-2026-50012: harden peerDigestSwapInMask against a cache digest reply whose on-the-wire size exceeds the declared mask_size (heap buffer overflow)
References

Affected packages

TuxCare:CentOS:6 / squid34

Package

Name
squid34
Purl
pkg:rpm/tuxcare/squid34?distro=centos-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7:3.4.14-16.el6.tuxcare.els14

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1787042235.json"