[CLSA-2025:1764151964] squid: Fix of CVE-2025-62168
Type:
security
Severity:
Important
Release date:
2025-11-26 10:12:47 UTC
Description:
- CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure - email_err_data directive now defaults to 'off' for security (previously 'on')
Updated packages:
  • squid-3.5.20-17.0.5.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:30a01b7dd8ab8783cdacd195154aa4183da42e4fd54136ffe8924438338e167c
  • squid-migration-script-3.5.20-17.0.5.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:48ec26218ab276dc3169d90348ef0c9e34b91bc089fe22161b4cb7980857e01f
  • squid-sysvinit-3.5.20-17.0.5.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:2dea618bd4c2223ab7d8d7ee26520a716adf8fe56e3ecad45d8c14902edca322
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.