USN-3011-1: HAProxy vulnerability

USN-3011-1: HAProxy vulnerability

Ubuntu Security Notice USN-3011-1

20th June, 2016

haproxy vulnerability

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 16.04 LTS

Summary

HAProxy could be made to crash if it received specially crafted network
traffic.

Software description

• haproxy
  – fast and reliable load balancing reverse proxy

Details

Falco Schmutz discovered that HAProxy incorrectly handled the reqdeny
filter. A remote attacker could use this issue to cause HAProxy to crash,
resulting in a denial of service.

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 16.04 LTS:

haproxy

1.6.3-1ubuntu0.1

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

In general, a standard system update will make all the necessary changes.

References

CVE-2016-5360

Source: USN-3011-1: HAProxy vulnerability