CLSA-2026-1790852342

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1790852342.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1790852342
Upstream
Published
2026-10-22T04:53:08Z
Modified
2026-10-26T09:31:59Z
Summary
squid: Fix of 4 CVEs
Details
  • Bump release to sort above Oracle Linux 7 squid-3.5.20-17.0.11.el7_9.13
  • CVE-2025-62168: complete fix: also redact credentials in the %W mailto body, from Oracle 17.0.9
  • Deny URN requests in the default squid.conf (upstream workaround), from Oracle 17.0.7
References

Affected packages

TuxCare:RHEL:7 / squid

Package

Name
squid
Purl
pkg:rpm/tuxcare/squid?distro=rhel-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7:3.5.20-17.0.11.el7_9.99.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1790852342.json"

TuxCare:RHEL:7 / squid-migration-script

Package

Name
squid-migration-script
Purl
pkg:rpm/tuxcare/squid-migration-script?distro=rhel-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7:3.5.20-17.0.11.el7_9.99.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1790852342.json"

TuxCare:RHEL:7 / squid-sysvinit

Package

Name
squid-sysvinit
Purl
pkg:rpm/tuxcare/squid-sysvinit?distro=rhel-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7:3.5.20-17.0.11.el7_9.99.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1790852342.json"