Ubuntu alert USN-8459-1 (haproxy)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8459-1] HAProxy vulnerabilities
Date:
             
 
Mon, 22 Jun 2026 15:35:01 +0000
Message-ID:
             
 
<E1wbgft-0006vf-PI@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8459-1
June 22, 2026

haproxy vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in HAProxy.

Software Description:
- haproxy: fast and reliable load balancing reverse proxy

Details:

It was discovered that HAProxy incorrectly handled the FCGI demultiplexer
record length field. A remote attacker could possibly use this issue to
cause incorrect request routing, response smuggling, or other memory safety
issues. (CVE-2026-55203)

It was discovered that HAProxy failed to validate the return value of the
HPACK dynamic table defragmentation function when memory was exhausted. A
remote attacker could possibly use this issue to cause HAProxy to crash,
resulting in a denial of service. (CVE-2026-55204)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  haproxy                         3.2.9-1ubuntu2.2

Ubuntu 25.10
  haproxy                         3.0.12-0ubuntu0.25.10.5

Ubuntu 24.04 LTS
  haproxy                         2.8.16-0ubuntu0.24.04.3

Ubuntu 22.04 LTS
  haproxy                         2.4.30-0ubuntu0.22.04.2

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8459-1
  CVE-2026-55203, CVE-2026-55204

Package Information:
  https://launchpad.net/ubuntu/+source/haproxy/3.2.9-1ubunt...
  https://launchpad.net/ubuntu/+source/haproxy/3.0.12-0ubun...
  https://launchpad.net/ubuntu/+source/haproxy/2.8.16-0ubun...
  https://launchpad.net/ubuntu/+source/haproxy/2.4.30-0ubun...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=xZMG
-----END PGP SIGNATURE-----