Amazon Linux 2023 Security Advisory: ALAS2023-2026-3454
Advisory Released Date: 2026-11-12
Advisory Updated Date: 2026-11-12
Severity:
Important
Issue Overview:
Due to an Improper Input Validation (CWE-20) bug, Squid is vulnerable to a Stack-based Buffer Overflow (CWE-121) attack against HTTP Authentication. (CVE-2026-104786)
Affected Packages:
squid
Issue Correction:
Run dnf update squid --releasever 2023.12.20261112 or dnf update --advisory ALAS2023-2026-3454 --releasever 2023.12.20261112 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
New Packages:
aarch64:
squid-debuginfo-6.13-1.amzn2023.0.7.aarch64
squid-debugsource-6.13-1.amzn2023.0.7.aarch64
squid-6.13-1.amzn2023.0.7.aarch64
src:
squid-6.13-1.amzn2023.0.7.src
x86_64:
squid-debuginfo-6.13-1.amzn2023.0.7.x86_64
squid-6.13-1.amzn2023.0.7.x86_64
squid-debugsource-6.13-1.amzn2023.0.7.x86_64