Skip to content
OpenAdvisories
Critical RHSA-2025:21090 1 CVE

Red Hat Security Advisory: squid:4 security update

Published Nov 12, 2025 · Updated Jul 12, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libecap 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libecap-debuginfo 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libecap-debugsource 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream libecap-devel 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream squid 7:4.11-4.module+el8.4.0+23593+1fc48abe.10
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream squid-debuginfo 7:4.11-4.module+el8.4.0+23593+1fc48abe.10
Red Hat · RHEL 8.4 AUS rhel_aus:8.4::appstream squid-debugsource 7:4.11-4.module+el8.4.0+23593+1fc48abe.10
Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream libecap 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream libecap-debuginfo 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream libecap-debugsource 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream libecap-devel 0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream squid 7:4.11-4.module+el8.4.0+23593+1fc48abe.10
Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream squid-debuginfo 7:4.11-4.module+el8.4.0+23593+1fc48abe.10
Red Hat · RHEL 8.4 EUS Long Life rhel_eus_long_life:8.4::appstream squid-debugsource 7:4.11-4.module+el8.4.0+23593+1fc48abe.10

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-62168 Public exploit Scanner template EPSS 62%

    Squid vulnerable to information disclosure via authentication credential leakage in error handling

    Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the c…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2404736
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21090.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-62168
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-62168
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-62168
  • article
    https://github.com/squid-cache/squid/commit/0951a0681011dfca3d78c84fd7f1e19c78a4443f
  • article
    https://github.com/squid-cache/squid/security/advisories/GHSA-c8cc-phh7-xmxr