Skip to content
OpenAdvisories
High ELSA-2025-19107 1 CVE

Important: squid:4 security update (Oracle Linux 8)

Published Oct 27, 2025 · Updated Oct 27, 2025

Ecosystem: Oracle Linux

Summary

libecap
squid
[7:4.15-10.9]
- Resolves: RHEL-122484 - squid: Squid vulnerable to information disclosure via
authentication credential leakage in error handling (CVE-2025-62168)

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 8 libecap 0:1.0.1-2.module+el8.9.0+90083+f7556140
Oracle Linux · 8 libecap-devel 0:1.0.1-2.module+el8.9.0+90083+f7556140
Oracle Linux · 8 squid 7:4.15-10.module+el8.10.0+90691+00cd6d19.9

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-62168 Public exploit Scanner template EPSS 62%

    Squid vulnerable to information disclosure via authentication credential leakage in error handling

    Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the c…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux Alpine