[USN-7431-2] HAProxy vulnerability

-----BEGIN PGP SIGNATURE-----
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=8mkz
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-7431-2
April 23, 2025

haproxy vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.04

Summary:

HAProxy could be made to crash or run programs if it received specially
crafted network traffic.

Software Description:
- haproxy: fast and reliable load balancing reverse proxy

Details:

USN-7431-1 fixed a vulnerability in HAProxy. This update provides the
corresponding update for Ubuntu 25.04.

Original advisory details:

Aleandro Prudenzano and Edoardo Geraci discovered that HAProxy incorrectly
handled certain uncommon configurations that replace multiple short
patterns with a longer one. A remote attacker could use this issue to
cause HAProxy to crash, resulting in a denial of service, or possibly
execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
haproxy 3.0.8-1ubuntu1.1

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-7431-2
https://ubuntu.com/security/notices/USN-7431-1
CVE-2025-32464

Package Information:
https://launchpad.net/ubuntu/+source/haproxy/3.0.8-1ubuntu1.1