{"id":"CLSA-2026-1775688811","summary":"Fix CVE(s): CVE-2026-32748, CVE-2026-33526","details":"   * SECURITY UPDATE: denial of service via use-after-free in ICP\n     - debian/patches/CVE-2026-33526.patch: remove duplicate\n       rfc1738_escape call in icpGetRequest that invalidated the\n       previously escaped URL pointer\n     - CVE-2026-33526\n   * SECURITY UPDATE: denial of service via use-after-free in ICP\n     request handling\n     - debian/patches/CVE-2026-32748.patch: return HttpRequestPointer\n       and move icpAccessAllowed into icpGetRequest to fix HttpRequest\n       lifetime for ICP v3 queries\n     - CVE-2026-32748","modified":"2026-06-04T09:46:06.317856227Z","published":"2026-04-08T22:53:40Z","upstream":["CVE-2026-32748","CVE-2026-33526"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1775688811.html"}],"affected":[{"package":{"name":"squid","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/squid?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1775688811.json"}},{"package":{"name":"squid-cgi","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/squid-cgi?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1775688811.json"}},{"package":{"name":"squid-common","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/squid-common?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1775688811.json"}},{"package":{"name":"squid-purge","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/squid-purge?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1775688811.json"}},{"package":{"name":"squid3","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/squid3?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1775688811.json"}},{"package":{"name":"squidclient","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/squidclient?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-1ubuntu1.14+tuxcare.els11"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1775688811.json"}}],"schema_version":"1.7.5"}