# CVE-2025-62168: Squid vulnerable to information disclosure via authentication credential leakage in error handling

CVE-2025-62168 is fixed in 11 products on 1 platform, first by RHSA-2025:21065, released October 17, 2025. It is not reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/cve/CVE-2025-62168
- Priority: Urgent
- CVSS: 10.0 (Critical)
- EPSS: 0.6482
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 17, 2025
- Weakness: Generation of Error Message Containing Sensitive Information
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62168

## Description

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, afailure to redact HTTP authentication credentials in error handling allowsinformation disclosure. The vulnerability allows a script to bypass browsersecurity protections and learn the credentials a trusted client uses toauthenticate. This potentially allows a remote client to identify securitytokens or credentials used internally by a web application using Squid forbackend load balancing. These attacks do not require Squid to be configuredwith HTTP authentication. The vulnerability is fixed in version 7.2. As aworkaround, disable debug information in administrator mailto linksgenerated by Squid by configuring squid.conf with email_err_data off.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | libecap RHEL 8 | 0:1.0.1-2.module+el8.9.0+19703+a1da7223 | [RHSA-2025:19107](https://patchblox.com/security/data/fix/linux/rhsa-2025-19107.md) | Oct 27, 2025 |
| Linux | libecap almalinux 8 | 1.0.1-2.module_el8.6.0+2741+01592ae8 | [ALSA-2025:19107](https://patchblox.com/security/data/fix/linux/alsa-2025-19107.md) | Oct 27, 2025 |
| Linux | libecap ol 8 | 0:1.0.1-2.module+el8.9.0+90083+f7556140 | [ELSA-2025-19107](https://patchblox.com/security/data/fix/linux/elsa-2025-19107.md) | Oct 27, 2025 |
| Linux | libecap rocky 8 | 0:1.0.1-2.module+el8.9.0+1437+df5ea8f0 | [RLSA-2025:19107](https://patchblox.com/security/data/fix/linux/rlsa-2025-19107.md) | Jan 15, 2026 |
| Linux | libecap-devel RHEL 8 | 0:1.0.1-2.module+el8.9.0+19703+a1da7223 | [RHSA-2025:19107](https://patchblox.com/security/data/fix/linux/rhsa-2025-19107.md) | Oct 27, 2025 |
| Linux | libecap-devel almalinux 8 | 1.0.1-2.module_el8.6.0+2741+01592ae8 | [ALSA-2025:19107](https://patchblox.com/security/data/fix/linux/alsa-2025-19107.md) | Oct 27, 2025 |
| Linux | libecap-devel ol 8 | 0:1.0.1-2.module+el8.9.0+90083+f7556140 | [ELSA-2025-19107](https://patchblox.com/security/data/fix/linux/elsa-2025-19107.md) | Oct 27, 2025 |
| Linux | squid Debian 12.15 (bookworm) | 5.7-2+deb12u4 | [DSA-6047-1](https://patchblox.com/security/data/fix/linux/dsa-6047-1.md) | Oct 30, 2025 |
| Linux | squid Debian 13.5 (trixie) | 6.13-2+deb13u1 | [DSA-6047-1](https://patchblox.com/security/data/fix/linux/dsa-6047-1.md) | Oct 30, 2025 |
| Linux | squid Debian 14 | 7.2-1 | [DEBIAN-CVE-2025-62168](https://patchblox.com/security/data/fix/linux/debian-cve-2025-62168.md) | Oct 17, 2025 |
| Linux | squid RHEL 10 | 6.10-5.el10_0.1 | [RHSA-2025:21065](https://patchblox.com/security/data/fix/linux/rhsa-2025-21065.md) | Oct 17, 2025 |
| Linux | squid RHEL 8 | 7:4.15-10.module+el8.10.0+23592+d564ec65.9 | [RHSA-2025:19107](https://patchblox.com/security/data/fix/linux/rhsa-2025-19107.md) | Oct 27, 2025 |
| Linux | squid RHEL 9 | 7:5.5-22.el9_7.1 | [RHSA-2025:20935](https://patchblox.com/security/data/fix/linux/rhsa-2025-20935.md) | Nov 11, 2025 |
| Linux | squid Ubuntu 18.04.6 LTS (bionic) | 3.5.27-1ubuntu1.14+esm4 | [squid 3.5.27-1ubuntu1.14+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-squid-3.5.27-1ubuntu1.14-esm4.md) | Oct 20, 2025 |
| Linux | squid Ubuntu 20.04 LTS (focal) | 4.10-1ubuntu1.13+esm1 | [squid 4.10-1ubuntu1.13+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-squid-4.10-1ubuntu1.13-esm1.md) | Oct 20, 2025 |
| Linux | squid Ubuntu 22.04.1 LTS (jammy) | 5.9-0ubuntu0.22.04.4 | [squid 5.9-0ubuntu0.22.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-squid-5.9-0ubuntu0.22.04.4.md) | Oct 20, 2025 |
| Linux | squid Ubuntu 24.04.5 LTS (noble) | 6.13-0ubuntu0.24.04.3 | [squid 6.13-0ubuntu0.24.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-squid-6.13-0ubuntu0.24.04.3.md) | Oct 20, 2025 |
| Linux | squid Ubuntu 25.04 (plucky) | 6.13-1ubuntu1.2 | [squid 6.13-1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-squid-6.13-1ubuntu1.2.md) | Oct 21, 2025 |
| Linux | squid Ubuntu 25.10 (questing) | 6.13-1ubuntu4.1 | [squid 6.13-1ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-squid-6.13-1ubuntu4.1.md) | Oct 20, 2025 |
| Linux | squid almalinux 10 | 7:6.10-6.el10_1.1 | [ALSA-2025:21002](https://patchblox.com/security/data/fix/linux/alsa-2025-21002.md) | Nov 11, 2025 |
| Linux | squid almalinux 8 | 7:4.15-10.module_el8.10.0+4055+645078d8.9 | [ALSA-2025:19107](https://patchblox.com/security/data/fix/linux/alsa-2025-19107.md) | Oct 27, 2025 |
| Linux | squid almalinux 9 | 7:5.5-22.el9_7.1 | [ALSA-2025:20935](https://patchblox.com/security/data/fix/linux/alsa-2025-20935.md) | Nov 11, 2025 |
| Linux | squid amzn 2023 | 7:6.13-1.amzn2023.0.3 | [ALAS2023-2025-1238](https://patchblox.com/security/data/fix/linux/alas2023-2025-1238.md) | Oct 27, 2025 |
| Linux | squid ol 10 | 7:6.10-6.el10_1.1 | [ELSA-2025-21002](https://patchblox.com/security/data/fix/linux/elsa-2025-21002.md) | Dec 2, 2025 |
| Linux | squid ol 8 | 7:4.15-10.module+el8.10.0+90691+00cd6d19.9 | [ELSA-2025-19107](https://patchblox.com/security/data/fix/linux/elsa-2025-19107.md) | Oct 27, 2025 |
| Linux | squid ol 9 | 7:5.5-22.el9_7.1 | [ELSA-2025-20935](https://patchblox.com/security/data/fix/linux/elsa-2025-20935.md) | Nov 25, 2025 |
| Linux | squid opensuse-leap 15.6 | 6.10-150600.3.14.1 | [SUSE-SU-2025:4026-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4026-1.md) | Nov 10, 2025 |
| Linux | squid opensuse-leap 16.0 | 6.12-160000.3.1 | [OPENSUSE-SU-2026:20027-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20027-1.md) | Jan 14, 2026 |
| Linux | squid rocky 10 | 7:6.10-6.el10_1.1 | [RLSA-2025:21002](https://patchblox.com/security/data/fix/linux/rlsa-2025-21002.md) | Nov 21, 2025 |
| Linux | squid rocky 8 | 7:4.15-10.module+el8.10.0+2080+49064dbd.9 | [RLSA-2025:19107](https://patchblox.com/security/data/fix/linux/rlsa-2025-19107.md) | Jan 15, 2026 |
| Linux | squid rocky 9 | 7:5.5-22.el9_7.1 | [RLSA-2025:20935](https://patchblox.com/security/data/fix/linux/rlsa-2025-20935.md) | Nov 21, 2025 |
| Linux | squid sles 15.6 | 6.10-150600.3.14.1 | [SUSE-SU-2025:4026-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4026-1.md) | Nov 10, 2025 |
| Linux | squid sles 15.7 | 6.10-150600.3.14.1 | [SUSE-SU-2025:4026-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4026-1.md) | Nov 10, 2025 |
| Linux | squid sles 16.0 | 6.12-160000.3.1 | [SUSE-SU-2026:20078-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20078-1.md) | Jan 14, 2026 |
| Linux | squid-cgi Ubuntu 18.04.6 LTS (bionic) | 3.5.27-1ubuntu1.14+esm4 | [squid-cgi 3.5.27-1ubuntu1.14+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-squid-cgi-3.5.27-1ubuntu1.14-esm4.md) | Oct 20, 2025 |
| Linux | squid-cgi Ubuntu 20.04 LTS (focal) | 4.10-1ubuntu1.13+esm1 | [squid-cgi 4.10-1ubuntu1.13+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-squid-cgi-4.10-1ubuntu1.13-esm1.md) | Oct 20, 2025 |
| Linux | squid-cgi Ubuntu 22.04.1 LTS (jammy) | 5.9-0ubuntu0.22.04.4 | [squid-cgi 5.9-0ubuntu0.22.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-squid-cgi-5.9-0ubuntu0.22.04.4.md) | Oct 20, 2025 |
| Linux | squid-cgi Ubuntu 24.04.5 LTS (noble) | 6.13-0ubuntu0.24.04.3 | [squid-cgi 6.13-0ubuntu0.24.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-squid-cgi-6.13-0ubuntu0.24.04.3.md) | Oct 20, 2025 |
| Linux | squid-cgi Ubuntu 25.04 (plucky) | 6.13-1ubuntu1.2 | [squid-cgi 6.13-1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-squid-cgi-6.13-1ubuntu1.2.md) | Oct 21, 2025 |
| Linux | squid-cgi Ubuntu 25.10 (questing) | 6.13-1ubuntu4.1 | [squid-cgi 6.13-1ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-squid-cgi-6.13-1ubuntu4.1.md) | Oct 20, 2025 |
| Linux | squid-common Ubuntu 18.04.6 LTS (bionic) | 3.5.27-1ubuntu1.14+esm4 | [squid-common 3.5.27-1ubuntu1.14+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-squid-common-3.5.27-1ubuntu1.14-esm4.md) | Oct 20, 2025 |
| Linux | squid-common Ubuntu 20.04 LTS (focal) | 4.10-1ubuntu1.13+esm1 | [squid-common 4.10-1ubuntu1.13+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-squid-common-4.10-1ubuntu1.13-esm1.md) | Oct 20, 2025 |
| Linux | squid-common Ubuntu 22.04.1 LTS (jammy) | 5.9-0ubuntu0.22.04.4 | [squid-common 5.9-0ubuntu0.22.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-squid-common-5.9-0ubuntu0.22.04.4.md) | Oct 20, 2025 |
| Linux | squid-common Ubuntu 24.04.5 LTS (noble) | 6.13-0ubuntu0.24.04.3 | [squid-common 6.13-0ubuntu0.24.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-squid-common-6.13-0ubuntu0.24.04.3.md) | Oct 20, 2025 |
| Linux | squid-common Ubuntu 25.04 (plucky) | 6.13-1ubuntu1.2 | [squid-common 6.13-1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-squid-common-6.13-1ubuntu1.2.md) | Oct 21, 2025 |
| Linux | squid-common Ubuntu 25.10 (questing) | 6.13-1ubuntu4.1 | [squid-common 6.13-1ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-squid-common-6.13-1ubuntu4.1.md) | Oct 20, 2025 |
| Linux | squid-debuginfo amzn 2023 | 7:6.13-1.amzn2023.0.3 | [ALAS2023-2025-1238](https://patchblox.com/security/data/fix/linux/alas2023-2025-1238.md) | Oct 27, 2025 |
| Linux | squid-debugsource amzn 2023 | 7:6.13-1.amzn2023.0.3 | [ALAS2023-2025-1238](https://patchblox.com/security/data/fix/linux/alas2023-2025-1238.md) | Oct 27, 2025 |
| Linux | squid-openssl Ubuntu 22.04.1 LTS (jammy) | 5.9-0ubuntu0.22.04.4 | [squid-openssl 5.9-0ubuntu0.22.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-squid-openssl-5.9-0ubuntu0.22.04.4.md) | Oct 20, 2025 |
| Linux | squid-openssl Ubuntu 24.04.5 LTS (noble) | 6.13-0ubuntu0.24.04.3 | [squid-openssl 6.13-0ubuntu0.24.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-squid-openssl-6.13-0ubuntu0.24.04.3.md) | Oct 20, 2025 |
| Linux | squid-openssl Ubuntu 25.04 (plucky) | 6.13-1ubuntu1.2 | [squid-openssl 6.13-1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-squid-openssl-6.13-1ubuntu1.2.md) | Oct 21, 2025 |
| Linux | squid-openssl Ubuntu 25.10 (questing) | 6.13-1ubuntu4.1 | [squid-openssl 6.13-1ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-squid-openssl-6.13-1ubuntu4.1.md) | Oct 20, 2025 |
| Linux | squid-purge Ubuntu 18.04.6 LTS (bionic) | 3.5.27-1ubuntu1.14+esm4 | [squid-purge 3.5.27-1ubuntu1.14+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-squid-purge-3.5.27-1ubuntu1.14-esm4.md) | Oct 20, 2025 |
| Linux | squid-purge Ubuntu 20.04 LTS (focal) | 4.10-1ubuntu1.13+esm1 | [squid-purge 4.10-1ubuntu1.13+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-squid-purge-4.10-1ubuntu1.13-esm1.md) | Oct 20, 2025 |
| Linux | squid-purge Ubuntu 22.04.1 LTS (jammy) | 5.9-0ubuntu0.22.04.4 | [squid-purge 5.9-0ubuntu0.22.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-squid-purge-5.9-0ubuntu0.22.04.4.md) | Oct 20, 2025 |
| Linux | squid-purge Ubuntu 24.04.5 LTS (noble) | 6.13-0ubuntu0.24.04.3 | [squid-purge 6.13-0ubuntu0.24.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-squid-purge-6.13-0ubuntu0.24.04.3.md) | Oct 20, 2025 |
| Linux | squid-purge Ubuntu 25.04 (plucky) | 6.13-1ubuntu1.2 | [squid-purge 6.13-1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-squid-purge-6.13-1ubuntu1.2.md) | Oct 21, 2025 |
| Linux | squid-purge Ubuntu 25.10 (questing) | 6.13-1ubuntu4.1 | [squid-purge 6.13-1ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-squid-purge-6.13-1ubuntu4.1.md) | Oct 20, 2025 |
| Linux | squid3 Ubuntu 18.04.6 LTS (bionic) | 3.5.27-1ubuntu1.14+esm4 | [squid3 3.5.27-1ubuntu1.14+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-squid3-3.5.27-1ubuntu1.14-esm4.md) | Oct 20, 2025 |
| Linux | squidclient Ubuntu 18.04.6 LTS (bionic) | 3.5.27-1ubuntu1.14+esm4 | [squidclient 3.5.27-1ubuntu1.14+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-squidclient-3.5.27-1ubuntu1.14-esm4.md) | Oct 20, 2025 |
| Linux | squidclient Ubuntu 20.04 LTS (focal) | 4.10-1ubuntu1.13+esm1 | [squidclient 4.10-1ubuntu1.13+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-squidclient-4.10-1ubuntu1.13-esm1.md) | Oct 20, 2025 |
| Linux | squidclient Ubuntu 22.04.1 LTS (jammy) | 5.9-0ubuntu0.22.04.4 | [squidclient 5.9-0ubuntu0.22.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-squidclient-5.9-0ubuntu0.22.04.4.md) | Oct 20, 2025 |
| Linux | squidclient Ubuntu 24.04.5 LTS (noble) | 6.13-0ubuntu0.24.04.3 | [squidclient 6.13-0ubuntu0.24.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-squidclient-6.13-0ubuntu0.24.04.3.md) | Oct 20, 2025 |
| Linux | squidclient Ubuntu 25.04 (plucky) | 6.13-1ubuntu1.2 | [squidclient 6.13-1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-squidclient-6.13-1ubuntu1.2.md) | Oct 21, 2025 |
| Linux | squidclient Ubuntu 25.10 (questing) | 6.13-1ubuntu4.1 | [squidclient 6.13-1ubuntu4.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-squidclient-6.13-1ubuntu4.1.md) | Oct 20, 2025 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.