Skip to content
OpenAdvisories
Critical RHSA-2025:19118 1 CVE

Red Hat Security Advisory: squid security update

Published Oct 28, 2025 · Updated Jul 12, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream squid 7:5.2-1.el9_0.9
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream squid-debuginfo 7:5.2-1.el9_0.9
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream squid-debugsource 7:5.2-1.el9_0.9

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-62168 Public exploit Scanner template EPSS 62%

    Squid vulnerable to information disclosure via authentication credential leakage in error handling

    Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the c…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2404736
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19118.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-62168
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-62168
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-62168
  • article
    https://github.com/squid-cache/squid/commit/0951a0681011dfca3d78c84fd7f1e19c78a4443f
  • article
    https://github.com/squid-cache/squid/security/advisories/GHSA-c8cc-phh7-xmxr