Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-62168

Fixed in a distro release EPSS 63%CVSS 10.0

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.

Published 2025-10-17 · CVE record · OSV

Products: squid-cache squid

Distro releases

ReleasePackageFixed in
AlmaLinux:10squid7:6.10-6.el10_1.1
AlmaLinux:8libecap1.0.1-2.module_el8.6.0+3048+383bc947
AlmaLinux:8libecap1.0.1-2.module_el8.6.0+2741+01592ae8
AlmaLinux:8libecap-devel1.0.1-2.module_el8.6.0+2741+01592ae8
AlmaLinux:8libecap-devel1.0.1-2.module_el8.6.0+3048+383bc947
AlmaLinux:8squid7:4.15-10.module_el8.10.0+4055+645078d8.9
AlmaLinux:9squid7:5.5-22.el9_7.1
Alpine:v3.23squid7.3-r0
Alpine:v3.24squid7.3-r0
Debian:11squid4.13-10+deb11u6
Debian:12squid5.7-2+deb12u4
Debian:13squid6.13-2+deb13u1
Debian:14squid7.2-1
Red Hat:enterprise_linux:10.1squid7:6.10-6.el10_1.1
Red Hat:enterprise_linux:10.1squid-debuginfo7:6.10-6.el10_1.1
Red Hat:enterprise_linux:10.1squid-debugsource7:6.10-6.el10_1.1
Red Hat:enterprise_linux:8libecap0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat:enterprise_linux:8libecap-debuginfo0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat:enterprise_linux:8libecap-debugsource0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat:enterprise_linux:8libecap-devel0:1.0.1-2.module+el8.9.0+19703+a1da7223
Red Hat:enterprise_linux:8squid7:4.15-10.module+el8.10.0+23592+d564ec65.9
Red Hat:enterprise_linux:8squid-debuginfo7:4.15-10.module+el8.10.0+23592+d564ec65.9
Red Hat:enterprise_linux:8squid-debugsource7:4.15-10.module+el8.10.0+23592+d564ec65.9
Red Hat:enterprise_linux:9squid7:5.5-22.el9_7.1
Red Hat:enterprise_linux:9squid-debuginfo7:5.5-22.el9_7.1
Red Hat:enterprise_linux:9squid-debugsource7:5.5-22.el9_7.1
Red Hat:enterprise_linux_eus:10.0squid7:6.10-5.el10_0.1
Red Hat:enterprise_linux_eus:10.0squid-debuginfo7:6.10-5.el10_0.1
Red Hat:enterprise_linux_eus:10.0squid-debugsource7:6.10-5.el10_0.1
Red Hat:rhel_aus:8.2libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.2libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.2libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.2libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.2squid7:4.4-8.module+el8.2.0+23601+6cdb820c.11
Red Hat:rhel_aus:8.2squid-debuginfo7:4.4-8.module+el8.2.0+23601+6cdb820c.11
Red Hat:rhel_aus:8.2squid-debugsource7:4.4-8.module+el8.2.0+23601+6cdb820c.11
Red Hat:rhel_aus:8.4libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.4libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.4libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.4libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.4squid7:4.11-4.module+el8.4.0+23593+1fc48abe.10
Red Hat:rhel_aus:8.4squid-debuginfo7:4.11-4.module+el8.4.0+23593+1fc48abe.10
Red Hat:rhel_aus:8.4squid-debugsource7:4.11-4.module+el8.4.0+23593+1fc48abe.10
Red Hat:rhel_aus:8.6libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.6libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.6libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.6libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_aus:8.6squid7:4.15-3.module+el8.6.0+23600+226c63ed.8
Red Hat:rhel_aus:8.6squid-debuginfo7:4.15-3.module+el8.6.0+23600+226c63ed.8
Red Hat:rhel_aus:8.6squid-debugsource7:4.15-3.module+el8.6.0+23600+226c63ed.8
Red Hat:rhel_e4s:8.6libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_e4s:8.6libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_e4s:8.6libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_e4s:8.6libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_e4s:8.6squid7:4.15-3.module+el8.6.0+23600+226c63ed.8
Red Hat:rhel_e4s:8.6squid-debuginfo7:4.15-3.module+el8.6.0+23600+226c63ed.8
Red Hat:rhel_e4s:8.6squid-debugsource7:4.15-3.module+el8.6.0+23600+226c63ed.8
Red Hat:rhel_e4s:8.8libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_e4s:8.8libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_e4s:8.8libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_e4s:8.8libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_e4s:8.8squid7:4.15-6.module+el8.8.0+23607+473e38b5.8
Red Hat:rhel_e4s:8.8squid-debuginfo7:4.15-6.module+el8.8.0+23607+473e38b5.8
Red Hat:rhel_e4s:8.8squid-debugsource7:4.15-6.module+el8.8.0+23607+473e38b5.8
Red Hat:rhel_e4s:9.0squid7:5.2-1.el9_0.9
Red Hat:rhel_e4s:9.0squid-debuginfo7:5.2-1.el9_0.9
Red Hat:rhel_e4s:9.0squid-debugsource7:5.2-1.el9_0.9
Red Hat:rhel_e4s:9.2squid7:5.5-5.el9_2.10
Red Hat:rhel_e4s:9.2squid-debuginfo7:5.5-5.el9_2.10
Red Hat:rhel_e4s:9.2squid-debugsource7:5.5-5.el9_2.10
Red Hat:rhel_els:7squid7:3.5.20-17.el7_9.15
Red Hat:rhel_eus:9.4squid7:5.5-13.el9_4.4
Red Hat:rhel_eus:9.4squid-debuginfo7:5.5-13.el9_4.4
Red Hat:rhel_eus:9.4squid-debugsource7:5.5-13.el9_4.4
Red Hat:rhel_eus:9.6squid7:5.5-19.el9_6.2
Red Hat:rhel_eus:9.6squid-debuginfo7:5.5-19.el9_6.2
Red Hat:rhel_eus:9.6squid-debugsource7:5.5-19.el9_6.2
Red Hat:rhel_eus_long_life:8.4libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_eus_long_life:8.4libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_eus_long_life:8.4libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_eus_long_life:8.4libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_eus_long_life:8.4squid7:4.11-4.module+el8.4.0+23593+1fc48abe.10
Red Hat:rhel_eus_long_life:8.4squid-debuginfo7:4.11-4.module+el8.4.0+23593+1fc48abe.10
Red Hat:rhel_eus_long_life:8.4squid-debugsource7:4.11-4.module+el8.4.0+23593+1fc48abe.10
Red Hat:rhel_tus:8.6libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_tus:8.6libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_tus:8.6libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_tus:8.6libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_tus:8.6squid7:4.15-3.module+el8.6.0+23600+226c63ed.8
Red Hat:rhel_tus:8.6squid-debuginfo7:4.15-3.module+el8.6.0+23600+226c63ed.8
Red Hat:rhel_tus:8.6squid-debugsource7:4.15-3.module+el8.6.0+23600+226c63ed.8
Red Hat:rhel_tus:8.8libecap0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_tus:8.8libecap-debuginfo0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_tus:8.8libecap-debugsource0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_tus:8.8libecap-devel0:1.0.1-2.module+el8.1.0+4044+36416a77
Red Hat:rhel_tus:8.8squid7:4.15-6.module+el8.8.0+23607+473e38b5.8
Red Hat:rhel_tus:8.8squid-debuginfo7:4.15-6.module+el8.8.0+23607+473e38b5.8
Red Hat:rhel_tus:8.8squid-debugsource7:4.15-6.module+el8.8.0+23607+473e38b5.8
Rocky Linux:10squid7:6.10-6.el10_1.1
Rocky Linux:8libecap0:1.0.1-2.module+el8.9.0+1437+df5ea8f0
Rocky Linux:8squid7:4.15-10.module+el8.10.0+2080+49064dbd.9
Rocky Linux:9squid7:5.5-22.el9_7.1
SUSE:Enterprise Storage 7.1squid4.17-150000.5.58.1
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsquid4.17-150000.5.58.1
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsquid5.7-150400.3.38.2
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsquid5.7-150400.3.38.2
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSsquid5.7-150400.3.38.2
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSsquid5.7-150400.3.38.2
SUSE:Linux Enterprise Module for Server Applications 15 SP6squid6.10-150600.3.14.1
SUSE:Linux Enterprise Module for Server Applications 15 SP7squid6.10-150600.3.14.1
SUSE:Linux Enterprise Server 12 SP5-LTSSsquid4.17-4.59.1
SUSE:Linux Enterprise Server 15 SP3-LTSSsquid4.17-150000.5.58.1
SUSE:Linux Enterprise Server 15 SP4-LTSSsquid5.7-150400.3.38.2
SUSE:Linux Enterprise Server 15 SP5-LTSSsquid5.7-150400.3.38.2
SUSE:Linux Enterprise Server 16.0squid6.12-160000.3.1
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5squid4.17-4.59.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP3squid4.17-150000.5.58.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP4squid5.7-150400.3.38.2
SUSE:Linux Enterprise Server for SAP Applications 15 SP5squid5.7-150400.3.38.2
SUSE:Linux Enterprise Server for SAP applications 16.0squid6.12-160000.3.1
SUSE:Manager Proxy LTS 4.3squid5.7-150400.3.38.2
SUSE:Manager Server LTS 4.3squid5.7-150400.3.38.2
Ubuntu:22.04:LTSsquid5.9-0ubuntu0.22.04.4
Ubuntu:24.04:LTSsquid6.13-0ubuntu0.24.04.3
Ubuntu:25.10squid6.13-1ubuntu4.1
Ubuntu:Pro:16.04:LTSsquid33.5.12-1ubuntu7.16+esm5
Ubuntu:Pro:18.04:LTSsquid33.5.27-1ubuntu1.14+esm4
Ubuntu:Pro:20.04:LTSsquid4.10-1ubuntu1.13+esm1
openSUSE:Leap 15.6squid6.10-150600.3.14.1
openSUSE:Leap 16.0squid6.12-160000.3.1
openSUSE:Tumbleweedsquid7.3-1.1