-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 26 Oct 2025 09:31:13 +0100 Source: squid Binary: squid squid-cgi squid-cgi-dbgsym squid-dbgsym squid-openssl squid-openssl-dbgsym squid-purge squid-purge-dbgsym squidclient squidclient-dbgsym Architecture: armhf Version: 6.13-2+deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm Build Daemon (arm-conova-03) Changed-By: Bastien Roucariès Description: squid - Full featured Web Proxy cache (HTTP proxy GnuTLS flavour) squid-cgi - Full featured Web Proxy cache (HTTP proxy) - control CGI squid-openssl - Full featured Web Proxy cache (HTTP proxy OpenSSL flavour) squid-purge - Full featured Web Proxy cache (HTTP proxy) - cache management uti squidclient - Full featured Web Proxy cache (HTTP proxy) - HTTP(S) message util Closes: 1117048 1118341 Changes: squid (6.13-2+deb13u1) trixie-security; urgency=high . * Non Maintainer Upload by LTS team * Fix CVE-2025-62168 (Closes: #1118341) Due to a failure to redact HTTP Authentication credentials Squid is vulnerable to an Information Disclosure attack. * Fix CVE-2025-59362 (Closes: #1117048) Squid mishandles ASN.1 encoding of long SNMP OIDs. Checksums-Sha1: 0e2d102f13f014bc919d33d5dc86696b3d586ccf 146600 squid-cgi-dbgsym_6.13-2+deb13u1_armhf.deb 09b29b074bf4f17652cf452a9ba21986c11e9d41 159936 squid-cgi_6.13-2+deb13u1_armhf.deb ba5ea8d4b194d84f1a813c87251a8de45ac43d19 23005424 squid-dbgsym_6.13-2+deb13u1_armhf.deb 87d2591a2da55aebe8bd1d24fe14659b66a57da2 24684352 squid-openssl-dbgsym_6.13-2+deb13u1_armhf.deb b47c08da689cbba2d16beaac44e443ba3637119c 2409768 squid-openssl_6.13-2+deb13u1_armhf.deb 7729cdc87298a88174945af4f9217c05d28f5163 89252 squid-purge-dbgsym_6.13-2+deb13u1_armhf.deb 089023633397e5bd55a4f0d4cd89ab441ec009cb 154360 squid-purge_6.13-2+deb13u1_armhf.deb f39b86a75a7d653cd631b83cd4cbe11e33c6d3dc 9944 squid_6.13-2+deb13u1_armhf-buildd.buildinfo eb68634f1147f7cf1bfb21b577ddb65441aefaa8 2533872 squid_6.13-2+deb13u1_armhf.deb c3c35b9f6a47cf16bf49ba32e45b131e775ee1ab 192604 squidclient-dbgsym_6.13-2+deb13u1_armhf.deb d0d7ba5549fcfecbbc53bdd88081ae9f18f78dcb 163172 squidclient_6.13-2+deb13u1_armhf.deb Checksums-Sha256: 95d7de7ee1087555443a02a24c422d27a98f4a39be878c0a93847755c9a30dab 146600 squid-cgi-dbgsym_6.13-2+deb13u1_armhf.deb 8d75e614186755c1eb0a52bd377fe81b9da311d6c1d8c6f86ad38e3ff5fbffaa 159936 squid-cgi_6.13-2+deb13u1_armhf.deb 15aefd93c9cabbd141a9e13ee1c56111679adc81d713830be9b8d9749754e9c3 23005424 squid-dbgsym_6.13-2+deb13u1_armhf.deb 78a20e41920adfe6cc9427294b1d438ec06ab9c071dd0749cd3d3d6f4648a3f3 24684352 squid-openssl-dbgsym_6.13-2+deb13u1_armhf.deb 7da2510f522ce16a624e11cf2d4c3944b125e574b7ca94fdf095800ef38da8fd 2409768 squid-openssl_6.13-2+deb13u1_armhf.deb dccc366fd4e2ae3292f6fc0657217344d9d4227dfb5eb2913a31052da2892bc6 89252 squid-purge-dbgsym_6.13-2+deb13u1_armhf.deb 2726782930dff8624c59361deaca7e92052b6273e79e09647d054b2f30ffaa20 154360 squid-purge_6.13-2+deb13u1_armhf.deb a1ce7ddf0383a83e920e7b72ad863f9434bb7500e459925897e420d410cef5a3 9944 squid_6.13-2+deb13u1_armhf-buildd.buildinfo f865452a32a803db0f8316285e07d9b12118eeef20a0caa1430a3913c85cb7b1 2533872 squid_6.13-2+deb13u1_armhf.deb d867478c5e4a2f68175a37eb6b982336e69e5d8fb4692bfe21cd704c39e0790e 192604 squidclient-dbgsym_6.13-2+deb13u1_armhf.deb 61401a8d0ed8974dc23df8a7d4a96bce29036c2928895d14d00c0115c4b4f97f 163172 squidclient_6.13-2+deb13u1_armhf.deb Files: 1a8dd6d0134b6217c7f739a125518696 146600 debug optional squid-cgi-dbgsym_6.13-2+deb13u1_armhf.deb 78dd0fb9af44241f5501ea92609806af 159936 web optional squid-cgi_6.13-2+deb13u1_armhf.deb e3fdabf23eff0a7de80cebaf5e1ee7d9 23005424 debug optional squid-dbgsym_6.13-2+deb13u1_armhf.deb 00ca9fd6a20cfd92688bf8c9d8540269 24684352 debug optional squid-openssl-dbgsym_6.13-2+deb13u1_armhf.deb eccf87a529ad579df6d3b9cb71cf1479 2409768 web optional squid-openssl_6.13-2+deb13u1_armhf.deb 90ec28196480a4c5783a73158083c047 89252 debug optional squid-purge-dbgsym_6.13-2+deb13u1_armhf.deb a0fdd5b34bb8320ac19861ebb0fb8a27 154360 web optional squid-purge_6.13-2+deb13u1_armhf.deb cbaeff795a1bc0f1dbcc260f63054ee5 9944 web optional squid_6.13-2+deb13u1_armhf-buildd.buildinfo 79c6b89051460ae032719ad83b9b2fdf 2533872 web optional squid_6.13-2+deb13u1_armhf.deb 1b1083cd32a1004943507ce366bef16d 192604 debug optional squidclient-dbgsym_6.13-2+deb13u1_armhf.deb 74753479781e2c90fe061c811830bb7e 163172 web optional squidclient_6.13-2+deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEVM4SKBZumztS8zr3lST9Us03ywsFAmkCAH4ACgkQlST9Us03 ywufdQ//WkuOYmYtVzVAoJmEjUpoGs4thtAkktWEOs5+54yBin02nBTqVkWVxBJS TqpBFZKUWhnH4BTJ2tzevoKCaLeuvJD4blQhxyiWNi8bxIyTOzEU/OI7nmp5Knzn KX2KYdh/SbhywTC7e49RhpB8ltA9xbGPwkXtRTbYMLj2RmlI71wyYtGd7+aEVzSx ZlkBO6XfoeMI4Krk01y9Jw33oTbw2h3FS1DrQb0MIf1dXW5qoED0kvdvyx8e36E7 OWqmEk/hMKoB/yjw9K1D4xoboQ8nSAVwGDK+tenLeAIXvt2iMVs5BsliNjYAcvXd sDnUvITBEszXxQIJdXiv0Lspf6BF+Q1H1+AMbdG4IOeThsE7zrBko5Cmu0SyXJVc scBKNFz7z1jtZ9/9KeSho23aeGjySVcx5GD1frvOEK/gc73ubkhD3Q7Y8G68PdDy shilwSvTQrLTgUpfZyXNByaG75tvL6pAm51M3F+mzuReZnIciT0c1K4npt0gQiuZ LuNs0VZY2mgzV7mq8VGZRr3iKAaYyPK4R6pi3MpUqOEWNt67gpQJJgmABEnB4gJI sOYCanx7zrLO1nxa1etOZTxXSqcuxk67GwcxvfyIb88YctkDS9kk7oixQGj5HHwe SlGdGAybhWyfouyKD3az7o1C49eS9icJvU241Kx391q/Urx30Ak= =pLD/ -----END PGP SIGNATURE-----