Ubuntu alert USN-7431-2 (haproxy)

From:
             
 
Marc Deslauriers <marc.deslauriers@canonical.com>
To:
             
 
"ubuntu-security-announce@lists.ubuntu.com" <ubuntu-security-announce@lists.ubuntu.com>
Subject:
             
 
[USN-7431-2] HAProxy vulnerability
Date:
             
 
Wed, 23 Apr 2025 10:39:09 -0400
Message-ID:
             
 
<9c481ca7-1472-4cbd-b1c9-427d222ab734@canonical.com>
==========================================================================
Ubuntu Security Notice USN-7431-2
April 23, 2025

haproxy vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.04

Summary:

HAProxy could be made to crash or run programs if it received specially
crafted network traffic.

Software Description:
- haproxy: fast and reliable load balancing reverse proxy

Details:

USN-7431-1 fixed a vulnerability in HAProxy. This update provides the
corresponding update for Ubuntu 25.04.

Original advisory details:

  Aleandro Prudenzano and Edoardo Geraci discovered that HAProxy incorrectly
  handled certain uncommon configurations that replace multiple short
  patterns with a longer one. A remote attacker could use this issue to
  cause HAProxy to crash, resulting in a denial of service, or possibly
  execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
   haproxy                         3.0.8-1ubuntu1.1

In general, a standard system update will make all the necessary changes.

References:
   https://ubuntu.com/security/notices/USN-7431-2
   https://ubuntu.com/security/notices/USN-7431-1
   CVE-2025-32464

Package Information:
   https://launchpad.net/ubuntu/+source/haproxy/3.0.8-1ubunt...



Attachment: OpenPGP_signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=8mkz
-----END PGP SIGNATURE-----


Attachment: None (type=text/plain)