USN-5869-1: HAProxy vulnerability
14 February 2023
HAProxy could allow unintended access to network services.
- haproxy - fast and reliable load balancing reverse proxy
Bahruz Jabiyev, Anthony Gavazzi, Engin Kirda, Kaan Onarlioglu, Adi Peleg,
and Harvey Tuch discovered that HAProxy incorrectly handled empty header
names. A remote attacker could possibly use this issue to manipulate
headers and bypass certain authentication checks and restrictions.
The problem can be corrected by updating your system to the following package versions:
In general, a standard system update will make all the necessary changes.