[CLSA-2025:1764152160] squid: Fix of CVE-2025-62168
Type:
security
Severity:
Important
Release date:
2025-11-26 10:16:05 UTC
Description:
- CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure - email_err_data directive now defaults to 'off' for security (previously 'on')
Updated packages:
  • squid-3.5.20-17.0.5.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:7c19c191901a6c5d3ae91b6f6f28e819544224b7e2a04fdc520bdfa0a6d4afc6
  • squid-migration-script-3.5.20-17.0.5.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:dbfcf82de63d3a418f86ce8a98c016291aafccba2d6dc461290da1f3c6d2a461
  • squid-sysvinit-3.5.20-17.0.5.el7_9.99.tuxcare.els2.x86_64.rpm
    sha:ddff5a5cca530154d44af24ebea810cf087dd150e36a772b3a786d63aa4076e6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.