Ubuntu notice USN-8998-1 covers a Squid flaw in HTTP Transfer-Encoding handling
VULNERABILITYSquidredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Ubuntu's security notice USN-8998-1 describes a flaw in how Squid handles certain HTTP Transfer-Encoding headers. The article says an attacker could possibly use it for HTTP request smuggling, bypass security mechanisms, or poison web caches. The notice does not give a CVE ID or affected versions.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Check whether Squid is installed on your Ubuntu systems and where it sits in front of web services.
- Apply the fixed Squid package from the Ubuntu security notice USN-8998-1 once you have confirmed the affected version.
Written by AI from the sources, checked against them
Full story timeline · 1 update
- Wed 4 NovemberUSN-8998-1: Squid vulnerabilityUbuntu Security Notices
Who reported · 1 outlet
Ubuntu Security Notices