Ubuntu Security Update USN-5063-1: HAProxy vulnerabilities

[LinuxBot]

Ori Hollander discovered that HAProxy incorrectly handled HTTP header name length encoding. A remote attacker could possibly use this issue to inject a duplicate content-length header and perform request smuggling attacks.

Continue reading...