FEDORA-2021-e6557245e8 — security update for haproxy

stable

haproxy-2.3.13-1.fc34

FEDORA-2021-e6557245e8 created by rohara 3 years ago for Fedora 34

Security fix for CVE-2021-39240, CVE-2021-39241, CVE-2021-39242

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-e6557245e8

This update has been submitted for testing by rohara.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

Builds

haproxy-2.3.13-1.fc34

BZ#1995105 CVE-2021-39240 haproxy: does not ensure that the scheme and path portions of a URI have the expected characters [fedora-all]

BZ#1995109 CVE-2021-39241 haproxy: an HTTP method name may contain a space followed by the name of a protected resource [fedora-all]

BZ#1995113 CVE-2021-39242 haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled [fedora-all]

haproxy-2.3.13-1.fc34

Automated Test Results

ignored