Skip to content
OpenAdvisories
High RLSA-2025:19107 1 CVE

Important: squid:4 security update

Published Jan 15, 2026 · Updated Jan 15, 2026

Ecosystem: Rocky Linux

Summary

Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects.

Security Fix(es):

* squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 2

ReleasePackageFixed in
Rocky Linux · 8 libecap 0:1.0.1-2.module+el8.9.0+1437+df5ea8f0
Rocky Linux · 8 squid 7:4.15-10.module+el8.10.0+2080+49064dbd.9

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-62168 Public exploit Scanner template EPSS 62%

    Squid vulnerable to information disclosure via authentication credential leakage in error handling

    Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the c…

    squid-cache squid squid squid3 Debian Ubuntu Azure Linux Alpine

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2404736