USN-7431-2: HAProxy vulnerability
USN-7431-1 fixed a vulnerability in HAProxy. This update provides the corresponding update for Ubuntu 25.04. Original advisory details: Aleandro Prudenzano and Edoardo Geraci discovered that HAProxy incorrectly handled certain uncommon configurations that replace multiple short patterns with a longer one. A remote attacker could use this issue to cause HAProxy to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7431-2?
The severity of USN-7431-2 is considered medium due to potential impact on HAProxy configurations.
How do I fix USN-7431-2?
To fix USN-7431-2, update the HAProxy package to version 3.0.8-1ubuntu1.1.
What vulnerabilities does USN-7431-2 address?
USN-7431-2 addresses a vulnerability in HAProxy related to improper handling of certain configurations.
Which version of Ubuntu is affected by USN-7431-2?
USN-7431-2 affects Ubuntu 25.04.
Who discovered the vulnerability in USN-7431-2?
The vulnerability in USN-7431-2 was discovered by Aleandro Prudenzano and Edoardo Geraci.