{"id":"CLSA-2026-1775724625","summary":"Fix CVE(s): CVE-2026-32748, CVE-2026-33526","details":"   * SECURITY UPDATE: denial of service via use-after-free in ICP\n     - debian/patches/CVE-2026-33526.patch: remove duplicate\n       rfc1738_escape call in icpGetRequest that invalidated the\n       previously escaped URL pointer\n     - CVE-2026-33526\n   * SECURITY UPDATE: denial of service via use-after-free in ICP\n     request handling\n     - debian/patches/CVE-2026-32748.patch: return HttpRequestPointer\n       and move icpAccessAllowed into icpGetRequest to fix HttpRequest\n       lifetime for ICP v3 queries\n     - CVE-2026-32748","modified":"2026-06-04T09:46:45.270164842Z","published":"2026-04-09T08:50:29Z","upstream":["CVE-2026-32748","CVE-2026-33526"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1775724625.html"}],"affected":[{"package":{"name":"squid","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/squid?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1775724625.json"}},{"package":{"name":"squid-cgi","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/squid-cgi?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1775724625.json"}},{"package":{"name":"squid-common","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/squid-common?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1775724625.json"}},{"package":{"name":"squid-purge","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/squid-purge?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1775724625.json"}},{"package":{"name":"squid3","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/squid3?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1775724625.json"}},{"package":{"name":"squidclient","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/squidclient?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.12-1ubuntu7.17+tuxcare.els13"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1775724625.json"}}],"schema_version":"1.7.5"}