Описание
[BUG/MAJOR: http: prevent risk of reading past end with balance url_param]
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| haproxy | fixed | 1.5.12-1 | package | |
| haproxy | no-dsa | jessie | package | |
| haproxy | not-affected | squeeze | package |
Примечания
Upstream fix: http://git.haproxy.org/?p=haproxy-1.5.git;a=commit;h=522aab39753e8ed13786bc57b03ef7ae4ffe6c87
For squeeze, the above commit message implies that the fix does not need to be backported to version 1.4 and indeed, the code already contains a (different) check that limits the value of "len".