Critical Security Update for Squid and libecap Packages: CVE-2026-32748 and CVE-2026-33526
Summary
RHSA-2026:20564: Red Hat Security Advisory: squid:4 security update. Affects libecap versions < 0:1.0.1-2.module+el8.1.0+4044+36416a77. Fixed in 0:1.0.1-2.module+el8.1.0+4044+36416a77. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Squid is a widely used caching proxy for the web, supporting HTTP, HTTPS, and FTP protocols. It enhances web performance by caching frequently requested content and reducing bandwidth usage. libecap is a library that provides an API for developing content adaptation modules for Squid. The recent vulnerabilities identified in these packages could potentially compromise the security and integrity of systems utilizing them.
Vulnerability Detail
The vulnerabilities CVE-2026-32748 and CVE-2026-33526 affect the Squid and libecap packages, allowing attackers to exploit weaknesses in the software. These vulnerabilities can lead to unauthorized access, data leakage, or denial of service, significantly impacting the security posture of affected systems. The vulnerabilities arise from improper handling of certain requests, which can be manipulated by an attacker to execute malicious actions.
How To Fix
Minimum fixed version
0:1.0.1-2.module+el8.1.0+4044+36416a77
This is the first release that contains the fix.
sudo dnf update libecapTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not feasible, consider implementing network-level security measures such as firewalls to restrict access to the affected services until the packages can be updated.
Conclusion
The vulnerabilities in Squid and libecap pose significant risks to system security. It is crucial to apply the necessary updates to mitigate these risks and ensure the integrity of your systems. Regular monitoring and vulnerability management practices are essential to maintain security.
See every vulnerability recorded for libecap →
FAQ
These are identifiers for specific vulnerabilities found in the Squid and libecap packages that could allow attackers to exploit weaknesses in the software.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
The CVSS score for this vulnerability is 7.5, indicating a high severity level.
Implement network-level security measures, such as firewalls, to restrict access to the affected services until you can apply the updates.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:20564.json.
Related vulnerabilities
Recent vulnerabilities recorded for libecap.
