What package is missing from Amazon Linux 2023? Please describe and include package name.
squid — the 7.x branch (latest stable 7.7, released 24 Aug 2026). AL2023
currently ships squid 6.13-1 (patched as 6.13-1.amzn2023.0.3), which is from the
Squid 6.x branch. Squid 6.x reached upstream end-of-life on 10 July 2025, and
7.x is the only branch still under active upstream security support.
Is this an update to existing package or new package request?
Update to an existing package (squid 6.13-1 → 7.x).
Is this package available in Amazon Linux 2? If it is available via external sources such as EPEL, please specify.
Squid is available on AL2, but only older branches. Our constraints do not
allow source builds or third-party repositories (including EPEL), so there is
currently no supported path to Squid 7.x on AL2023 via the standard package
manager.
Any additional information you'd like to include. (use-cases, etc)
Use case: we consume squid through the standard AL2023 package manager as part
of an EC2 Image Builder pipeline.
Why 7.x matters:
- Squid 6.x is upstream end-of-life (10 July 2025); 7.x is the only actively
supported branch upstream.
- Recent fixes have been backported to 6.13 rather than moving to 7.x — e.g.
ALAS2023-2025-1238 addressed CVE-2025-62168 (fixed upstream in Squid 7.2) via
a patched 6.13-1.amzn2023.0.3 build. We appreciate that AWS is actively
patching 6.13, which mitigates immediate risk, but running an upstream-EOL
branch is not sustainable long term.
- As of AL2023 release 2023.12 (2023.12.20260817), no Squid 7.x version is in
the repositories, and there is no published roadmap or timeline for it.
Prior Squid requests have been tracked and addressed through this repo, which is
why we're raising 7.x here:
There is currently no open issue tracking Squid 7.x.
What package is missing from Amazon Linux 2023? Please describe and include package name.
squid — the 7.x branch (latest stable 7.7, released 24 Aug 2026). AL2023
currently ships squid 6.13-1 (patched as 6.13-1.amzn2023.0.3), which is from the
Squid 6.x branch. Squid 6.x reached upstream end-of-life on 10 July 2025, and
7.x is the only branch still under active upstream security support.
Is this an update to existing package or new package request?
Update to an existing package (squid 6.13-1 → 7.x).
Is this package available in Amazon Linux 2? If it is available via external sources such as EPEL, please specify.
Squid is available on AL2, but only older branches. Our constraints do not
allow source builds or third-party repositories (including EPEL), so there is
currently no supported path to Squid 7.x on AL2023 via the standard package
manager.
Any additional information you'd like to include. (use-cases, etc)
Use case: we consume squid through the standard AL2023 package manager as part
of an EC2 Image Builder pipeline.
Why 7.x matters:
supported branch upstream.
ALAS2023-2025-1238 addressed CVE-2025-62168 (fixed upstream in Squid 7.2) via
a patched 6.13-1.amzn2023.0.3 build. We appreciate that AWS is actively
patching 6.13, which mitigates immediate risk, but running an upstream-EOL
branch is not sustainable long term.
the repositories, and there is no published roadmap or timeline for it.
Prior Squid requests have been tracked and addressed through this repo, which is
why we're raising 7.x here:
There is currently no open issue tracking Squid 7.x.