UbuntuUpdates.org

Package "haproxy"

Name: haproxy

Description:

fast and reliable load balancing reverse proxy

Latest version: 2.0.13-2ubuntu0.5
Release: focal (20.04)
Level: security
Repository: main
Homepage: http://www.haproxy.org/

Links


Download "haproxy"


Other versions of "haproxy" in Focal

Repository Area Version
base main 2.0.13-2
base universe 2.0.13-2
security universe 2.0.13-2ubuntu0.5
updates universe 2.0.29-0ubuntu1
updates main 2.0.29-0ubuntu1

Changelog

Version: 2.0.13-2ubuntu0.5 2022-03-03 14:06:18 UTC

  haproxy (2.0.13-2ubuntu0.5) focal-security; urgency=medium

  * SECURITY UPDATE: infinite loop via Set-Cookie2 header
    - debian/patches/CVE-2022-0711.patch: prevent unbounded loop in
      src/http_ana.c.
    - CVE-2022-0711
  * debian/rules: link against libatomic on riscv64.

 -- Marc Deslauriers <email address hidden> Wed, 02 Mar 2022 07:56:19 -0500

Source diff to previous version
CVE-2022-0711 A flaw was found in the way HAProxy processed HTTP responses containin ...

Version: 2.0.13-2ubuntu0.3 2021-09-08 13:06:49 UTC

  haproxy (2.0.13-2ubuntu0.3) focal-security; urgency=medium

  * SECURITY UPDATE: duplicate content-length header check bypass in HTX
    - d/p/0001-2.0-2.3-BUG-MAJOR*.patch: fix missing header name length
      check in htx_add_header/trailer in src/htx.c.
    - CVE number pending

 -- Marc Deslauriers <email address hidden> Fri, 27 Aug 2021 07:48:39 -0400

Source diff to previous version

Version: 2.0.13-2ubuntu0.2 2021-08-17 18:06:20 UTC

  haproxy (2.0.13-2ubuntu0.2) focal-security; urgency=medium

  * SECURITY UPDATE: Security issue in HTTP/2 implementation
    - d/p/2.0-0001*.patch: enforce checks on the method syntax before
      translating to HTX.
    - No CVE number

 -- Marc Deslauriers <email address hidden> Mon, 16 Aug 2021 07:42:00 -0400




About   -   Send Feedback to @ubuntu_updates