Security update for squid

This update for squid fixes the following issues: CVE-2025-62168: Fixed proxy auth data visible to scripts bsc1252281. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command list...

EUVD-2010-4456

Malware in sbrugna...

EUVD-2002-0707

Malware in sbrugna...

EUVD-2012-0371

Malware in sbrugna...

EUVD-2005-0195

Malware in sbrugna...

EUVD-2016-6084

Malware in sbrugna...

EUVD-2016-5628

Malware in sbrugna...

EUVD-1999-1258

Malware in sbrugna...

EUVD-2020-1357

Malware in sbrugna...

EUVD-2005-0148

Malware in sbrugna...

EUVD-2005-4865

Malware in sbrugna...

EUVD-2015-1370

Malware in sbrugna...

EUVD-2013-2449

Malware in sbrugna...

EUVD-2017-9474

Malware in sbrugna...

EUVD-2024-0479

Malicious code in bioql PyPI...

EUVD-2024-53001

Malicious code in bioql PyPI...

GO-2025-3972 Dragonfly vulnerable to timing attacks against Proxy’s basic authentication in d7y.io/dragonfly

Dragonfly vulnerable to timing attacks against Proxy’s basic authentication in d7y.io/dragonfly...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack via the Proxy authentication. An attacker can obtain sensitive authentication information by exploiting differences in response times during password validation. Remediation Upgrade d7y.io/dragonfly/v2/client/daemon/proxy ...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack via the Proxy authentication. An attacker can obtain sensitive authentication information by exploiting differences in response times during password validation. Remediation Upgrade...

GHSA-C2FC-9Q9C-5486 Dragonfly vulnerable to timing attacks against Proxy’s basic authentication

Impact The access control mechanism for the Proxy feature uses simple string comparisons and is therefore vulnerable to timing attacks. An attacker may try to guess the password one character at a time by sending all possible characters to a vulnerable mechanism and measuring the comparison...