A haproxy security update has been released for AlmaLinux 9.
ALSA-2023:1696 Moderate: haproxy security update
Type:
security
Severity:
moderate
Release date:
2023-04-20
Description
Security Fix(es):
* haproxy: segfault DoS (CVE-2023-0056)
* haproxy: request smuggling attack in HTTP/1 header parsing (CVE-2023-25725)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
RHSA-2023:1696
CVE-2023-0056
CVE-2023-25725
ALSA-2023:1696
Updates packages:
haproxy-2.4.17-3.el9_1.2.x86_64.rpm
haproxy-2.4.17-3.el9_1.2.ppc64le.rpm
haproxy-2.4.17-3.el9_1.2.s390x.rpm
haproxy-2.4.17-3.el9_1.2.aarch64.rpm
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.
