Skip to content
OpenAdvisories
Critical RHSA-2025:19107 1 CVE

Red Hat Security Advisory: squid:4 security update

Published Oct 28, 2025 · Updated Jul 12, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream libecap 0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat · RHEL 8 enterprise_linux:8::appstream libecap-debuginfo 0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat · RHEL 8 enterprise_linux:8::appstream libecap-debugsource 0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat · RHEL 8 enterprise_linux:8::appstream libecap-devel 0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat · RHEL 8 enterprise_linux:8::appstream squid 7:4.15-10.module+el8.10.0+23592+d564ec65.9
Red Hat · RHEL 8 enterprise_linux:8::appstream squid-debuginfo 7:4.15-10.module+el8.10.0+23592+d564ec65.9
Red Hat · RHEL 8 enterprise_linux:8::appstream squid-debugsource 7:4.15-10.module+el8.10.0+23592+d564ec65.9

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-62168 Public exploit Scanner template EPSS 62%

    Squid vulnerable to information disclosure via authentication credential leakage in error handling

    Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the c…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2404736
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19107.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-62168
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-62168
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-62168
  • article
    https://github.com/squid-cache/squid/commit/0951a0681011dfca3d78c84fd7f1e19c78a4443f
  • article
    https://github.com/squid-cache/squid/security/advisories/GHSA-c8cc-phh7-xmxr