Ubuntu alert USN-8036-1 (haproxy)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8036-1] HAProxy vulnerability
Date:
             
 
Thu, 12 Feb 2026 23:46:14 +0000
Message-ID:
             
 
<E1vqgNy-0005mK-C2@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-8036-1
February 12, 2026

haproxy vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10

Summary:

HAProxy could be made to crash if it received specially crafted network
traffic.

Software Description:
- haproxy: fast and reliable load balancing reverse proxy

Details:

Asim Viladi Oglu Manizada discovered that HAProxy incorrectly handled
certain INITIAL packets. A remote attacker could possibly use this issue
to cause HAProxy to crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  haproxy                         3.0.12-0ubuntu0.25.10.3

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8036-1
  CVE-2026-26081

Package Information:
  https://launchpad.net/ubuntu/+source/haproxy/3.0.12-0ubun...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=/Mt7
-----END PGP SIGNATURE-----