ELSA-2026-6301 - squid security update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-03-31 |
Description
[7:5.5-22.4]
- Resolves: RHEL-160692 - squid: Squid: Denial of Service via
crafted ICP traffic (CVE-2026-32748)
[7:5.5-22.3]
- Resolves: RHEL-160693 - squid: Squid: Denial of Service via
heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526)
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
|
| Oracle Linux 9 (aarch64) | squid-5.5-22.el9_7.4.src.rpm | ef463ce319a85e819a1fd4a2830e0a61f97bccb8091f6fda1f173ec02b21a1d4 | - | ol9_aarch64_appstream |
| squid-5.5-22.el9_7.4.aarch64.rpm | 43a38c515148356f12a4db47f1fa4f286f8af4a4dd1de957a1799349b2be5f83 | - | ol9_aarch64_appstream |
|
| Oracle Linux 9 (x86_64) | squid-5.5-22.el9_7.4.src.rpm | ef463ce319a85e819a1fd4a2830e0a61f97bccb8091f6fda1f173ec02b21a1d4 | - | ol9_x86_64_appstream |
| squid-5.5-22.el9_7.4.x86_64.rpm | e8d20282d3ffcc3fddbf06d54c47c90c08bae349955263e6b2de16d9f707ecee | - | ol9_x86_64_appstream |
This page is generated automatically and has not been checked for errors or omissions. For clarification
or corrections please contact the Oracle Linux ULN team