[CLSA-2025:1764315069] squid: Fix of CVE-2025-62168
Type:
security
Severity:
Important
Release date:
2025-11-28 07:31:12 UTC
Description:
- CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure - email_err_data directive now defaults to 'off' for security (previously 'on')
Updated packages:
  • squid-3.5.20-17.0.5.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:c6a4818553f8f31018233776197ed765ad2475798b0dcc1c598ca4c22aa096ef
  • squid-migration-script-3.5.20-17.0.5.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:950a5e583ca2f8141191593cb337cb8b9abfff51bec9edec8313bc6d5c61a588
  • squid-sysvinit-3.5.20-17.0.5.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:661e54a61704215c601e5b1660027c170581e30522e568cc845b04ccd3f2472d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.