Red Hat Security AdvisoryRHSA-2020:2265
rh-haproxy18-haproxy security, bug fix, and enhancement update
Released 2020-05-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-haproxy18-haproxy-1.8.24-2.el7, rh-haproxy18-haproxy-syspaths-1.8.24-2.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-haproxy18-haproxy-1.8.24-2.el7, rh-haproxy18-haproxy-syspaths-1.8.24-2.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-haproxy18-haproxy-1.8.24-2.el7, rh-haproxy18-haproxy-syspaths-1.8.24-2.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-haproxy18-haproxy-1.8.24-2.el7, rh-haproxy18-haproxy-syspaths-1.8.24-2.el7
Fixes 2 records
Priority MEDIUM 49
The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0xd), line feed (LF, ASCII 0xa), and the zero character (NUL, ASCII 0x0), aka Intermediary Encapsulatio…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04032 · Published 2019-11-27 · Fixed CWE-74
Priority MEDIUM 45
A flaw was found in HAProxy before 2.0.6.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.10068 · Published 2019-10-23 · Partial fix CWE-444
