USN-8157-1: Squid vulnerabilities

USN-8157-1: Squid vulnerabilities
Publication date: 8 April 2026
Overview: Several security issues were fixed in Squid.

Packages

• squid - Web proxy cache server

Details
It was discovered that Squid incorrectly handled certain ICP traffic. In
environments where ICP support is enabled, a remote attacker could use this
issue to cause Squid to crash, resulting in a denial of service, or obtain
small amounts of sensitive information.

Update instructions

• 25.10 questing squid – 6.14-0ubuntu0.25.10.2
• 24.04 LTS noble squid – 6.14-0ubuntu0.24.04.2
• 22.04 LTS jammy squid – 5.9-0ubuntu0.22.04.5