haproxy vulnerability

A security issue affects these releases of Ubuntu and its
derivatives:

* Ubuntu 19.10
* Ubuntu 19.04
* Ubuntu 18.04 LTS

Summary

HAProxy could be made to execute arbitrary code if it received a
specially crafted HTTP/2 header.

Software Description

* haproxy - fast and reliable load balancing reverse proxy

Details

Tim D**sterhus discovered that HAProxy incorrectly handled certain
HTTP/2 headers. An attacker could possibly use this issue to
execute arbitrary code through CRLF injection.

Update instructions

The problem can be corrected by updating your system to the
following package versions:

Ubuntu 19.10
haproxy - 2.0.5-1ubuntu0.3

Ubuntu 19.04
haproxy - 1.8.19-1ubuntu1.3

Ubuntu 18.04 LTS
haproxy - 1.8.8-1ubuntu0.9

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

In general, a standard system update will make all the necessary
changes.

References

* CVE-2019-19330

--- Mystic BBS v1.12 A43 (Linux/64)
* Origin: BZ&BZ BBS (21:4/110)