Skip to content
OpenAdvisories
Critical DLA-4369-1 2 CVEs

squid - security update

Published Nov 11, 2025 · Updated Nov 11, 2025

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 squid 4.13-10+deb11u6

Vulnerabilities 2

  • Critical 10.0
    CVE-2025-62168 Public exploit Scanner template EPSS 62%

    Squid vulnerable to information disclosure via authentication credential leakage in error handling

    Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the c…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux Alpine
  • Medium 4.0
    CVE-2025-59362

    Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.

    squid squid3 squid squid Debian Ubuntu Azure Linux Alpine