UbuntuUpdates.org

Package "haproxy"




Name: haproxy

Description:

fast and reliable load balancing reverse proxy
Latest version: *DELETED*
Release: focal (20.04)
Level: proposed
Repository: main
Homepage: http://www.haproxy.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "haproxy"

APT INSTALL

Other versions of "haproxy" in Focal

Repository Area Version
base main 2.0.13-2
base universe 2.0.13-2
security universe 2.0.31-0ubuntu0.3
security main 2.0.31-0ubuntu0.3
updates universe 2.0.33-0ubuntu0.1
updates main 2.0.33-0ubuntu0.1

Changelog

Version: *DELETED* 2024-01-06 01:06:52 UTC
No changelog for deleted or moved packages.

Version: 2.0.33-0ubuntu0.1 2023-12-08 18:07:24 UTC

  haproxy (2.0.33-0ubuntu0.1) focal; urgency=medium

  * New upstream release (LP: #2028418)
    - Major and critical bug fixes according to the upstream changelog:
      + BUG/MAJOR: http-ana: Get a fresh trash buffer for each header value
        replacement
      + BUG/MAJOR: http: reject any empty content-length header value
    - For further information, refer to the upstream changelog at
      https://www.haproxy.org/download/2.0/src/CHANGELOG and to the upstream
      release announcements at
      https://<email address hidden>/msg43668.html
      (2.0.32), and
      https://<email address hidden>/msg43904.html (2.0.33)
    - Remove patches applied by upstream in debian/patches:
      + CVE-2023-40225-1.patch
      + CVE-2023-40225-2.patch

 -- Athos Ribeiro <email address hidden> Tue, 31 Oct 2023 16:00:44 -0300
2028418 MRE updates of haproxy for focal, jammy and lunar
CVE-2023-40225 HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2.7.x before 2.7.10, and 2.8.x

Version: *DELETED* 2023-05-01 22:07:06 UTC
No changelog for deleted or moved packages.

Version: 2.0.31-0ubuntu0.1 2023-04-14 20:06:56 UTC

  haproxy (2.0.31-0ubuntu0.1) focal; urgency=medium

  * New upstream release (LP: #2012557).
    - Major and critical bug fixes according to the upstream changelog:
      + BUG/MAJOR: stick-tables: do not try to index a server name for applets
      + BUG/MAJOR: stick-table: don't process store-response rules for applets
      + BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is
        realigned
      + BUG/CRITICAL: http: properly reject empty http header field names
    - Remove patches applied by upstream in debian/patches:
      + CVE-2023-0056.patch
      + CVE-2023-25725.patch
    - Refresh existing patches in debian/patches:
      + 0002-Use-dpkg-buildflags-to-build-halog.patch
  * Backport DEP-8 tests from Lunar:
    - d/t/proxy-ssl-termination
    - d/t/proxy-ssl-pass-through

 -- Lucas Kanashiro <email address hidden> Wed, 22 Mar 2023 17:39:46 -0300
2012557 [MRE] haproxy
CVE-2023-0056 RESERVED
CVE-2023-25725 HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling."

Version: *DELETED* 2022-09-23 22:07:05 UTC
No changelog for deleted or moved packages.


About   -   Send Feedback to @ubuntu_updates