UbuntuUpdates.org

Package "squid"

Name: squid

Description:

Full featured Web Proxy cache (HTTP proxy GnuTLS flavour)
Latest version: 6.14-0ubuntu0.25.10.1
Release: questing (25.10)
Level: updates
Repository: main
Homepage: http://www.squid-cache.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "squid"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "squid" in Questing

Repository Area Version
base main 6.13-1ubuntu4
base universe 6.13-1ubuntu4
security main 6.13-1ubuntu4.1
security universe 6.13-1ubuntu4.1
updates universe 6.14-0ubuntu0.25.10.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 6.14-0ubuntu0.25.10.1 2026-03-24 02:08:10 UTC

  squid (6.14-0ubuntu0.25.10.1) questing; urgency=medium

  * New upstream release 6.14 (LP: #2127669)
    - Do not get stuck in RESPMOD after pausing peer read(2)
    - Fix "make check" linking on Solaris
    - Fix SNMP cacheNumObjCount -- number of cached objects
    - Do not duplicate received Surrogate-Capability in sent requests
    - Fix Mem::Segment::open() stub to fix build without shm_open()
    - CI and documentation updates

 -- Renan Rodrigo <email address hidden> Tue, 03 Mar 2026 15:30:37 -0300
Source diff to previous version
2127669 Backport of squid for noble and questing

Version: 6.13-1ubuntu4.1 2025-10-29 18:07:14 UTC

  squid (6.13-1ubuntu4.1) questing-security; urgency=medium

  * SECURITY UPDATE: HTTP Authentication credential leak
    - debian/patches/CVE-2025-62168.patch: Add maskSensitiveInfo parameter to
      pack and pass it to packInto in src/HttpRequest.cc. Add maskSensitiveInfo
      to pack in src/HttpRequest.h. Adapt code with new parameter in
      src/client_side_reply.cc, and src/errorpage.cc. Remove request_hdr NULL
      assign in src/errorpage.h.
    - CVE-2025-62168

 -- Hlib Korzhynskyy <email address hidden> Wed, 22 Oct 2025 14:48:23 -0230
CVE-2025-62168 Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows in


About   -   Send Feedback to @ubuntu_updates