CLSA-2026-1790775234

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790775234.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1790775234
Upstream
Published
2026-09-30T13:34:02Z
Modified
2026-10-26T09:31:56Z
Summary
squid: Fix of CVE-2025-62168
Details
  • Bump release to sort above Oracle Linux 7 squid-3.5.20-17.0.11.el7_9.13
  • CVE-2025-62168: complete fix: also redact credentials in the %W mailto body, from Oracle 17.0.9
  • Deny URN requests in the default squid.conf (upstream workaround), from Oracle 17.0.7
References

Affected packages

TuxCare:OracleLinux:7 / squid

Package

Name
squid
Purl
pkg:rpm/tuxcare/squid?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7:3.5.20-17.0.11.el7_9.99.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790775234.json"

TuxCare:OracleLinux:7 / squid-migration-script

Package

Name
squid-migration-script
Purl
pkg:rpm/tuxcare/squid-migration-script?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7:3.5.20-17.0.11.el7_9.99.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790775234.json"

TuxCare:OracleLinux:7 / squid-sysvinit

Package

Name
squid-sysvinit
Purl
pkg:rpm/tuxcare/squid-sysvinit?distro=oraclelinux-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7:3.5.20-17.0.11.el7_9.99.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790775234.json"