Alerts This Week
Warning Icon 1 652
Alerts This Week
Warning Icon 1 652

Fedora 44 Squid Security Advisory 2026-c0590bd498 CVE-2026-33526 DoS Issues

fedora
Calendar Grey May 6, 2026
Dist Fedora Esm H88
Security update for Fedora 44 Squid 7.5 includes fixes for critical Denial of Service vulnerabilities. Update recommended.
new version 7.5 security update

Summary

Squid is a high-performance proxy caching server for Web clients,

supporting FTP and HTTP data objects. Unlike traditional

caching software, Squid handles all requests in a single,

non-blocking, I/O-driven process. Squid keeps meta data and especially

hot objects cached in RAM, caches DNS lookups, supports non-blocking

DNS lookups, and implements negative caching of failed requests.

Squid consists of a main server program squid, a Domain Name System

lookup program (dnsserver), a program for retrieving FTP data

(ftpget), and some management and client tools.

Update Information:

new version 7.5 security update

Change Log

* Mon Apr 27 2026 Lubo\u0161 Uhliarik - 7:7.5-1 - new version 7.5 - Add tmpfiles.d rules for /var directories (bootc compatibility)

References


[ 1 ] Bug #2431445 - squid-7.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2431445 [ 2 ] Bug #2451599 - CVE-2026-33526 squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2451599 [ 3 ] Bug #2451601 - CVE-2026-32748 squid: Squid: Denial of Service via crafted ICP traffic [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2451601

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-c0590bd498' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: squid
Product: Fedora 44
Version: 7.5
Release: 1.fc44
Summary: The Squid proxy caching server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here