Files
buildroot/package
Thomas Perale 8918f1c2c8 package/squid: add patch for CVE-2025-62168
Fixes the following vulnerability:

- CVE-2025-62168:
    Squid is a caching proxy for the Web. In Squid versions prior to 7.2,
    a failure to redact HTTP authentication credentials in error handling
    allows information disclosure. The vulnerability allows a script to
    bypass browser security protections and learn the credentials a
    trusted client uses to authenticate. This potentially allows a remote
    client to identify security tokens or credentials used internally by a
    web application using Squid for backend load balancing. These attacks
    do not require Squid to be configured with HTTP authentication. The
    vulnerability is fixed in version 7.2. As a workaround, disable debug
    information in administrator mailto links generated by Squid by
    configuring squid.conf with email_err_data off.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2025-62168
  - 0951a06810

The backport has been compared against debian patch [1].

[1] https://sources.debian.org/src/squid/6.13-2%2Bdeb13u1/debian/patches/CVE-2025-62168.patch

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-03-03 18:22:52 +01:00
..
2026-02-05 22:18:33 +01:00
2026-01-02 16:46:32 +01:00
2026-02-07 22:33:55 +01:00
2026-02-02 21:59:04 +01:00
2026-02-04 14:58:45 +01:00
2026-02-14 21:13:35 +01:00
2026-01-01 23:36:33 +01:00
2026-01-08 12:14:44 +01:00
2026-02-14 12:42:59 +01:00
2026-02-02 19:26:17 +01:00
2026-02-03 22:12:51 +01:00
2026-02-03 14:44:01 +01:00
2026-02-02 21:59:30 +01:00
2026-01-22 20:41:01 +01:00
2026-01-02 21:50:13 +01:00
2026-02-14 12:43:01 +01:00
2026-02-03 21:42:42 +01:00
2026-02-27 20:17:16 +01:00
2026-02-12 21:08:31 +01:00
2026-02-11 21:24:34 +01:00
2026-01-11 22:22:43 +01:00
2026-01-02 13:43:03 +01:00
2026-02-02 21:59:04 +01:00
2026-01-06 21:57:32 +01:00
2026-02-16 20:50:01 +01:00
2026-01-01 23:28:45 +01:00
2026-01-11 22:00:47 +01:00
2026-02-15 19:41:25 +01:00
2026-02-04 14:07:56 +01:00
2026-02-03 14:44:01 +01:00
2026-01-16 23:13:05 +01:00
2026-01-07 15:03:37 +01:00
2026-02-10 15:59:28 +01:00
2026-02-08 12:55:36 +01:00
2026-02-03 14:44:01 +01:00
2026-02-05 17:19:44 +01:00
2026-02-03 11:37:14 +01:00
2026-02-01 21:09:50 +01:00
2026-01-07 15:03:40 +01:00
2026-02-02 21:59:04 +01:00
2026-01-22 20:08:08 +01:00
2026-03-01 13:34:43 +01:00
2026-02-03 14:44:01 +01:00
2026-02-02 11:26:36 +01:00
2026-02-22 18:45:07 +01:00
2026-01-05 18:20:28 +01:00
2026-02-18 22:27:05 +01:00
2026-02-16 21:37:53 +01:00
2026-02-20 07:52:24 +01:00
2026-02-12 20:39:59 +01:00
2026-01-24 13:12:05 +01:00
2026-01-12 19:01:20 +01:00
2026-02-04 11:22:30 +01:00
2026-02-21 14:28:55 +01:00
2026-02-10 19:21:51 +01:00
2026-02-12 23:34:41 +01:00
2026-01-02 18:28:11 +01:00