Wednesday 4 November
Global

Your region, kept on this device.

Ubuntu notice USN-8998-1 covers a Squid flaw in HTTP Transfer-Encoding handling

Severity
Medium
Sources
1

is a widely used program that handles web traffic for many networks. A weakness in how it reads certain web request headers could let an attacker sneak hidden requests past security checks or corrupt cached web content.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

  1. Check whether Squid is installed on your Ubuntu systems and where it sits in front of web services.
  2. Apply the fixed Squid package from the Ubuntu security notice USN-8998-1 once you have confirmed the affected version.

Written by AI from the sources, checked against them

Full story timeline · 1 update

  1. Wed 4 NovemberUSN-8998-1: Squid vulnerabilityUbuntu Security Notices

Who reported · 1 outlet

Ubuntu Security Notices

Who and what is in it

Products

Report a problem