Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Ubuntu 18.04 & 16.04 LTS USN-6530-2 Moderate: HAProxy Security Issue

ubuntu
Calendar Grey July 23, 2024
Dist Ubuntu Esm H88
The Ubuntu Security Notice USN-6531-1 discloses a vulnerability in Apache that may expose confidential data owing to flawed request processing.
HAProxy could be made to expose sensitive information.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: HAProxy could be made to expose sensitive information. Software Description: - haproxy: fast and reliable load balancing reverse proxy Details: Seth Manesse and Paul Plasil discovered that HAProxy incorrectly handled URI components containing the hash character (#). A remote attacker could possibly use this issue to obtain sensitive information, or to bypass certain path_end rules.

Topics%20covered

Topics Covered

security advisory security issue information leak remote attack moderate severity ubuntu haproxy

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS   haproxy                         1.8.8-1ubuntu0.13+esm2                                   Available with Ubuntu Pro Ubuntu 16.04 LTS   haproxy                         1.6.3-1ubuntu0.3+esm1                                   Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-6530-2

  https://ubuntu.com/security/notices/USN-6530-1

  CVE-2023-45539

Ubuntu Security Notice USN-6530-2

Topics%20covered

Topics Covered

security advisory security issue information leak remote attack moderate severity ubuntu haproxy

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here