Skip to content
OpenAdvisories
High ELSA-2025-21002 1 CVE

Important: squid security update (Oracle Linux 10)

Published Dec 2, 2025 · Updated Dec 2, 2025

Ecosystem: Oracle Linux

Summary

[7:6.10-6.1]
- Resolves: RHEL-122480 - CVE-2025-62168 squid: Squid vulnerable to information
disclosure via authentication credential leakage in error handling

[7:6.10-6]
- Resolves: RHEL-86817 - "TCP connection to XX.XX.XX.XX/XXXX failed" message is
output frequently on RHEL10

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 10 squid 7:6.10-6.el10_1.1

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-62168 Public exploit Scanner template EPSS 62%

    Squid vulnerable to information disclosure via authentication credential leakage in error handling

    Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the c…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux Alpine