6194 matches found
squid:4 security update
libecap squid 7:4.15-10.9 - Resolves: RHEL-122484 - squid: Squid vulnerable to information disclosure via authentication credential leakage in error handling CVE-2025-62168...
Important: squid
Issue Overview: Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. . This potentially allows a remote client to identify security tokens or credentials used internally by a web...
Important: squid:4 security update
Squid is a high-performance proxy caching server for web clients, supporting FTP, and HTTP data objects. Security Fixes: squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling CVE-2025-62168 For more details about the security issues,...
Important: squid
Issue Overview: Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. . This potentially allows a remote client to identify security tokens or credentials used internally by a web...
Fedora 42 : squid (2025-f0452df4e2)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f0452df4e2 advisory. - security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
Friday Squid Blogging: “El Pulpo The Squid”
There is a new cigar named "El Pulpo The Squid." Yes, that means "The Octopus The Squid." As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...
OESA-2025-2531 squid security update
Squid is a high-performance proxy caching server. It handles all requests in a single, non-blocking, I/O-driven process and keeps meta data and implements negative caching of failed requests. Security Fixes: Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact...
The vulnerability of the email_err_data configuration on the Squid proxy server allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the emailerrdata configuration on the Squid proxy server is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...
TencentOS Server 2: squid (TSSA-2025:0788)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0788 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...
CVE-2025-62168 affecting package squid for versions less than 6.13-3
CVE-2025-62168 affecting package squid for versions less than 6.13-3. A patched version of the package is available...
SUSE SLES15 Security Update : squid (SUSE-SU-2025:03627-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:03627-1 advisory. - CVE-2025-59362: fixed buffer overflow bsc1250627 Tenable has extracted the preceding description block directly from the SUSE security...
SUSE SLES12 Security Update : squid (SUSE-SU-2025:03607-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:03607-1 advisory. - CVE-2025-59362: fixed buffer overflow bsc1250627 Tenable has extracted the preceding description block directly from the SUSE security advisory. Not...
UBUNTU-CVE-2025-62168
Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to...
SUSE: Security Advisory (SUSE-SU-2025:03627-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Squid Information Disclosure Vulnerability (GHSA-c8cc-phh7-xmxr, SQUID-2025:2)
Squid is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:squid-cache:squid";...
Squid vulnerable to information disclosure via authentication credential leakage in error handling
...
SUSE CVE-2025-62168
Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to...
CVE-2025-62168
A Information Disclosure vulnerability has been identified in the Squid web caching proxy. This flaw occurs when the application fails to properly redact sensitive Hypertext Transfer Protocol HTTP authentication credentials from an error response. A remote client can exploit this by triggering an...
Friday Squid Blogging: Squid Inks Philippines Fisherman
Good video. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...
CVE-2025-62168
Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to...