RHSA-2026:98643: Important: squid security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.Security Fix(es): squid: squid: Request Smuggling in HTTP Transfer-Encoding (CVE-2026-61642) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/squidto a version that resolves this vulnerability.Fixed in 6.10-15.el10_3.1 - Upgrade
Upgrade
redhat/squid-debuginfoto a version that resolves this vulnerability.Fixed in 6.10-15.el10_3.1 - Upgrade
Upgrade
redhat/squid-debugsourceto a version that resolves this vulnerability.Fixed in 6.10-15.el10_3.1 - Upgrade
Upgrade
redhat/squidto a version that resolves this vulnerability.Fixed in 6.10-15.el10_3.1.aa - Upgrade
Upgrade
redhat/squid-debuginfoto a version that resolves this vulnerability.Fixed in 6.10-15.el10_3.1.aa - Upgrade
Upgrade
redhat/squid-debugsourceto a version that resolves this vulnerability.Fixed in 6.10-15.el10_3.1.aa