Red Hat Security AdvisoryRHSA-2019:0275
rh-haproxy18-haproxy security update
Released 2019-02-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-haproxy18-haproxy-1.8.4-4.el7, rh-haproxy18-haproxy-syspaths-1.8.4-4.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-haproxy18-haproxy-1.8.4-4.el7, rh-haproxy18-haproxy-syspaths-1.8.4-4.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-haproxy18-haproxy-1.8.4-4.el7, rh-haproxy18-haproxy-syspaths-1.8.4-4.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-haproxy18-haproxy-1.8.4-4.el7, rh-haproxy18-haproxy-syspaths-1.8.4-4.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-haproxy18-haproxy-1.8.4-4.el7, rh-haproxy18-haproxy-syspaths-1.8.4-4.el7
Fixes 1 record
Priority MEDIUM 40
An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 which can result in a crash.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04459 · Published 2019-03-18 · Partial fix CWE-125
