Critical Security Update for Squid and libecap Packages: CVE-2026-32748 and CVE-2026-33526
Summary
RHSA-2026:20580: Red Hat Security Advisory: squid:4 security update. Affects libecap versions < 0:1.0.1-2.module+el8.1.0+4044+36416a77. Fixed in 0:1.0.1-2.module+el8.1.0+4044+36416a77. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Squid is a widely used caching proxy for the web, supporting HTTP, HTTPS, FTP, and more. It is designed to improve web performance by caching frequently requested content. libecap is a library that provides a framework for extending the functionality of Squid. The recent vulnerabilities identified in these packages could lead to significant security risks if not addressed promptly.
Vulnerability Detail
The vulnerabilities CVE-2026-32748 and CVE-2026-33526 affect the Squid and libecap packages, allowing potential attackers to exploit weaknesses in the software. These vulnerabilities can lead to unauthorized access, data leakage, or denial of service. The issues stem from improper handling of certain requests, which could be leveraged by malicious actors to compromise system integrity.
How To Fix
Minimum fixed version
0:1.0.1-2.module+el8.1.0+4044+36416a77
This is the first release that contains the fix.
sudo dnf update libecapTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not feasible, consider implementing access controls to limit exposure to the vulnerabilities. Additionally, monitor your system for any unusual activity that may indicate an attempted exploit.
Conclusion
The vulnerabilities in Squid and libecap pose significant risks to system security. It is crucial to apply the necessary updates to mitigate these risks effectively. Regular monitoring and prompt action are essential for maintaining a secure environment.
See every vulnerability recorded for libecap →
FAQ
These are identifiers for specific vulnerabilities found in the Squid and libecap packages that could allow unauthorized access or denial of service.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
The CVSS score for these vulnerabilities is 7.5, indicating a high severity level.
Implement access controls and monitor your system for unusual activities as a temporary measure until you can apply the updates.
Detailed information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:20580.json.
Related vulnerabilities
Recent vulnerabilities recorded for libecap.
