-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 11 Nov 2025 12:07:53 +0100 Source: squid Architecture: source Version: 4.13-10+deb11u6 Distribution: bullseye-security Urgency: medium Maintainer: Luigi Gangitano <luigi@debian.org> Changed-By: Bastien Roucariès <rouca@debian.org> Closes: 1117048 1118341 Changes: squid (4.13-10+deb11u6) bullseye-security; urgency=medium . * Non-maintainer upload by the LTS Team. * Fix CVE-2025-62168 (Closes: #1118341) Due to a failure to redact HTTP Authentication credentials Squid is vulnerable to an Information Disclosure attack. * Fix CVE-2025-59362 (Closes: #1117048) Squid mishandles ASN.1 encoding of long SNMP OIDs. Checksums-Sha1: 4be67deac081a82ef479d650aca2de2275f67fcb 2753 squid_4.13-10+deb11u6.dsc cac95c18789e9ecd6620c2f278fc3900498c065b 2452752 squid_4.13.orig.tar.xz 937e0939e7dcf34617d10fa7b917255567e24cf0 118188 squid_4.13-10+deb11u6.debian.tar.xz 1c8736cce8ad7d282ca7e891330d9bd1a4319f3e 5670 squid_4.13-10+deb11u6_source.buildinfo Checksums-Sha256: 8d636a6008cb8cf920647962424c17aec96c0f6f18aa1483e391bec2d18fefc6 2753 squid_4.13-10+deb11u6.dsc 6891a0f540e60779b4f24f1802a302f813c6f473ec7336a474ed68c3e2e53ee0 2452752 squid_4.13.orig.tar.xz a0757102790ddaf73cb8c95055f9fe52cb542cab38451b65454698a91d27e4f3 118188 squid_4.13-10+deb11u6.debian.tar.xz a94953ae42fab488147562c13bf293101bca8557e15c517966e6165893116893 5670 squid_4.13-10+deb11u6_source.buildinfo Files: fc1a35de57d78ea5fdc1b6fa52b8d4ac 2753 web optional squid_4.13-10+deb11u6.dsc 492e54afc15821141ff1d1d9903854d6 2452752 web optional squid_4.13.orig.tar.xz b0d6be09a0ab67fd5069d0bfc5477f87 118188 web optional squid_4.13-10+deb11u6.debian.tar.xz 4262970764fa85021de2088fe70465d8 5670 web optional squid_4.13-10+deb11u6_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXQGHuUCiRbrXsPVqADoaLapBCF8FAmkTrTUACgkQADoaLapB CF93gg//f/n9xrunw4KPN4kWKTdp2KicbpNfFK+OmLJi5EwurGLq7BkkP1VEEdUZ Gt77EKYH/TLzc0visGvN//f13W4IslXU2kfEysv3zIfa3KjqjBiEoPPW1Mtig3aN TwzpWzv//DV3gFCvz0W1x3Vuv1yA5eG3gY8X9QaTHvvtbtXmXiwsSak201ow3mrJ HbssxEMyC0tZYtaI6ZJgh6hS9gEAwQcY23PX/MXASxJrPP4I8QECGy+enDFRtIZO 8LoD02eGyD8D+s36pxAeKGqwHrDdpEu0hTNnLdmTyfMJkCh8LeX2RGPGo+CbrVgg Zavity1r0/XriipoD/2dlYp/0DLmOCvQaPVvpMvwbejst6oRQHVVzI+XOn8uanwa DDpiQE3wgmpN8/+Apd206/cwE6JVrK0QWeSt02kJhH/CK8qjIpzRiVfeR3N7MIhN +xyZC1pzWO2jjNfv3O2IPLANlU4v4o1egSaCq8E/zxZECqY1nZQVlmH7AkG+4K+6 8WXupCyXoV2uRMSfEXj3GIoX+QYMu4siLHj8drnZzryGJWEp1eC8a8P7k169mu6k nx5zPbfe0g9KysuIVm5LYucFJ9izfgytuAewZVHC8OxoWUGQmkINM5isJQ3lw5te o8fW7k2+A4kLNjtuLE405K65D6oooXCceyOwMCKabRJKPQ1TkwQ= =C52u -----END PGP SIGNATURE-----