Skip to content
OpenAdvisories
High ELSA-2025-20935 1 CVE

Important: squid security update (Oracle Linux 9)

Published Nov 25, 2025 · Updated Nov 25, 2025

Ecosystem: Oracle Linux

Summary

[7:5.5-22.1]
- Resolves: RHEL-122492 - squid: Squid vulnerable to information disclosure via
authentication credential leakage in error handling (CVE-2025-62168)

[7:5.5-22]
- Resolves: RHEL-77084 - squid crashes with noteDestinationsEnd check failed

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 squid 7:5.5-22.el9_7.1

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-62168 Public exploit Scanner template EPSS 62%

    Squid vulnerable to information disclosure via authentication credential leakage in error handling

    Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the c…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux Alpine