SUSE-SU-2026:20078-1

Security update for squid

view advisory published 2026-01-14

Security update for squid

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-62168US	high7.5	63.4% (99th)	Exploit	2025-10-17
Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulne…
CVE-2025-59362US	—	0.41% (35th)	—	2025-09-26
Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asn_build_objid in lib/snmplib/asn1.c.

references

External citations — patches, advisories, analysis.

SUSE Bug 1250627self
SUSE Bug 1252281self
URL of this CSAF noticeself
E-Mail link for SUSE-SU-2026:20078-1self
SUSE CVE CVE-2025-59362 pageself
SUSE CVE CVE-2025-62168 pageself
SUSE ratingsexternal
URL for SUSE-SU-2026:20078-1self

remediations (16)

Fixedsquid-0:6.12-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsquid-0:6.12-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsquid-0:6.12-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsquid-0:6.12-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsquid-0:6.12-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsquid-0:6.12-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsquid-0:6.12-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsquid-0:6.12-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsquid-0:6.12-160000.3.1.s390x as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsquid-0:6.12-160000.3.1.s390x as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsquid-0:6.12-160000.3.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsquid-0:6.12-160000.3.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsquid-0:6.12-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsquid-0:6.12-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsquid-0:6.12-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsquid-0:6.12-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan