A new updated squid package within CloudLinux OS 6 ELS has been rolled out to 100% and is now available for download from our production repository.

Changelog

squid-3.1.23-30.el6.cloudlinux.els

• Fix handling of unknown SSL errors which resulted in denial of service (CVE-2020-14058)
• Fix incorrect validation of Content-Length field leading to Http smuggling and Poisoning attack (CVE-2020-15049)

Update command

yum update squid*