UbuntuUpdates.org

Package "squid-purge"

Name: squid-purge

Description:

Full featured Web Proxy cache (HTTP proxy) - cache management utility

Latest version: 6.13-1ubuntu4.1
Release: questing (25.10)
Level: updates
Repository: universe
Head package: squid
Homepage: http://www.squid-cache.org

Links


Download "squid-purge"


Other versions of "squid-purge" in Questing

Repository Area Version
base universe 6.13-1ubuntu4
security universe 6.13-1ubuntu4.1

Changelog

Version: *DELETED* 2025-10-29 16:07:36 UTC
No changelog for deleted or moved packages.

Version: 6.13-1ubuntu4.1 2025-10-29 14:07:23 UTC

  squid (6.13-1ubuntu4.1) questing-security; urgency=medium

  * SECURITY UPDATE: HTTP Authentication credential leak
    - debian/patches/CVE-2025-62168.patch: Add maskSensitiveInfo parameter to
      pack and pass it to packInto in src/HttpRequest.cc. Add maskSensitiveInfo
      to pack in src/HttpRequest.h. Adapt code with new parameter in
      src/client_side_reply.cc, and src/errorpage.cc. Remove request_hdr NULL
      assign in src/errorpage.h.
    - CVE-2025-62168

 -- Hlib Korzhynskyy <email address hidden> Wed, 22 Oct 2025 14:48:23 -0230

CVE-2025-62168 Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows in



About   -   Send Feedback to @ubuntu_updates