Cyber ·
USN-8998-1: Transfer-Encoding handling flaw in Squid
Notice from the Ubuntu Security feed about a Squid flaw in handling HTTP Transfer-Encoding headers, which could allow request smuggling and web cache poisoning.
Notice USN-8998-1, published on November 4, 2026 in the Ubuntu Security feed, describes a flaw in how Squid, a widely used caching proxy, incorrectly handles certain HTTP Transfer-Encoding headers. According to the text, an attacker could possibly use the issue to carry out HTTP request smuggling, bypass security mechanisms, or poison web caches. The available text is a machine translation of the feed content and does not state the affected versions or the specific fix; that information is in the original notice. To study the case, consult the distribution's official notice, confirm whether your Squid installation is affected, and follow the update guidance published by the vendor. If you use an AI assistant to summarize or analyze the notice, do not paste internal configurations, host names, addresses, or credentials from your network.