[Git][security-tracker-team/security-tracker][master] new squid issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5e6e6864 by Moritz Mühlenhoff at 2025-10-17T22:47:23+02:00
new squid issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -23,7 +23,9 @@ CVE-2025-62353 (A path traversal vulnerability in all versions of the Windsurf I
 CVE-2025-62171 (ImageMagick is an open source software suite for displaying, convertin ...)
 	TODO: check
 CVE-2025-62168 (Squid is a caching proxy for the Web. In Squid versions prior to 7.2,  ...)
-	TODO: check
+	- squid <unfixed>
+	NOTE: https://github.com/squid-cache/squid/security/advisories/GHSA-c8cc-phh7-xmxr
+	NOTE: https://github.com/squid-cache/squid/commit/0951a0681011dfca3d78c84fd7f1e19c78a4443f (SQUID_7_2)
 CVE-2025-60514 (Tillywork v0.1.3 and below is vulnerable to SQL Injection in app/commo ...)
 	NOT-FOR-US: Tillywork
 CVE-2025-60361 (radare2 v5.9.8 and before contains a memory leak in the function bochs ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e6e6864eeee9f24e43529f13555bb64c4ff6187

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e6e6864eeee9f24e43529f13555bb64c4ff6187
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251017/469e901d/attachment-0001.htm>