Updates for official Ubuntu Squid images with CVE-2025-62168

Project Discussion Server
1

Hi, how long does it usually take to update the Squid Docker image for CVEs? CVE-2025-62168 has not been patched in the latest docker image which has now been released almost a month ago. It comes with 6.13-1ubuntu1.1 but the CVE is fixed in 6.13-1ubuntu1.2

2

Hi, I can confirm this. Just deployed ubuntu/squid and I got 6.13-0ubuntu0.24.04.2, whereas .3 is available as a security update since end of october (about a month ago).
I’m checking internally who builds these images.

1 Like
3

This is done now, ubuntu/squid has squid version 6.13-0ubuntu0.24.04.3