CLSA-2025-1763543346 squid: Fix of CVE-2025-62168

CVE-2025-62168: Fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure...

squid: Fix of CVE-2025-62168

CVE-2025-62168: Fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure...

PT-2025-49090

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash could occur in the scx enable function when a helper kthread creation failed. This was observed during termination of the sched ext selftests runner with Ctrl+ while test 15 was...

PT-2025-51525

Уязвимость функции scx enable модуля kernel/sched/ext.c ядра операционной системы Linux связана с неправильной обработки ошибок. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

AlmaLinux 9 : squid (ALSA-2025:20935)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2025:20935 advisory. squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling CVE-2025-62168 Tenable has extracted the preceding...

CLSA-2025-1763490076 Fix CVE(s): CVE-2025-62168

SECURITY UPDATE: failure to redact HTTP authentication credentials in error handling allows information disclosure - debian/patches/CVE-2025-62168.patch: Fix HttpRequest::pack to mask sensitive information to prevent disclosure - CVE-2025-62168...

CLSA-2025-1763478867 squid: Fix of CVE-2025-62168

CVE-2025-62168: Fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure...

CLSA-2025-1763413374 Fix CVE(s): CVE-2025-62168

SECURITY UPDATE: information disclosure in error handling - debian/patches/CVE-2025-62168.patch: Fix bug where proxy auth data was visible to scripts by redacting credentials from error page code expansion output and email links - CVE-2025-62168...

kernel: nfsd: don't ignore the return code of svc_proc_register()

In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svcprocregister Currently, nfsdprocstatinit ignores the return value of svcprocregister. If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later. Fix...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2023-52887)

net: can: j1939: vulnerability related to error handling for closely received RTS messages in xtprxrtssessionnew, which is addressed by replacing less informative backtraces with a new method that provides clearer error messages and allows for early termination of problematic sessions. This plugi...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56728)

octeontx2-pf: handle otx2mboxgetrsp errors in otx2ethtool.c. Add error pointer check after calling otx2mboxgetrsp. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56605)

Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2capsockcreate btsockalloc allocates the sk object and attaches it to the provided sock object. On error l2capsockalloc frees the sk object, but the dangling pointer is still attached to the sock object, which may create use-after-fr...

BIT-MOODLE-2025-62396 Moodle: router (r.php) could expose application directories

An error-handling issue in the Moodle router r.php could cause the application to display internal directory listings when specific HTTP headers were not properly configured...

CLSA-2025-1763397982 squid34: Fix of CVE-2025-62168

CVE-2025-62168: Redact HTTP authentication credentials in error handling to prevent information disclosure...

CLSA-2025-1763388821 squid34: Fix of CVE-2025-62168

CVE-2025-62168: Redact HTTP authentication credentials in error handling to prevent information disclosure...

CLSA-2025-1763370812 squid: Fix of CVE-2025-62168

CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure...

Alibaba Cloud Linux 3 : 0170: squid:4 (ALINUX3-SA-2025:0170)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0170 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-62168: Squid is a caching proxy for the We...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the bioendio function in the block/bio.c module of the Linux operating system’s kernel is related to incorrect error handling. Exploiting this vulnerability could allow an attacker to cause a service failure...

a3xx_gpu_init Heap Buffer Overflow DoS

The vulnerability of the a3xxgpuinit function in the drivers/gpu/drm/msm/adreno/a3xxgpu.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernels, is related to the absence of a standardized error-handling mechanism. Exploiting this vulnerability could allow an attacker...

SUSE SLES12 Security Update : squid (SUSE-SU-2025:4099-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:4099-1 advisory. - CVE-2025-62168: Fixed failure to redact HTTP authentication credentials in error handling leading to information disclosure bsc1252281 Tenable has...