Skip to content
OpenAdvisories
Critical RHSA-2025:19167 1 CVE

Red Hat Security Advisory: squid security update

Published Oct 29, 2025 · Updated Jul 12, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · RHEL 7 ELS rhel_els:7 squid 7:3.5.20-17.el7_9.15

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-62168 Public exploit Scanner template EPSS 62%

    Squid vulnerable to information disclosure via authentication credential leakage in error handling

    Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the c…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2404736
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19167.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-62168
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-62168
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-62168
  • article
    https://github.com/squid-cache/squid/commit/0951a0681011dfca3d78c84fd7f1e19c78a4443f
  • article
    https://github.com/squid-cache/squid/security/advisories/GHSA-c8cc-phh7-xmxr