Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:1264-1

Опубликовано: 15 апр. 2025
Источник: suse-cvrf

Описание

Security update for haproxy

This update for haproxy fixes the following issues:

  • CVE-2025-32464: Fixed heap-based buffer overflow in sample_conv_regsub. (bsc#1240971)

Список пакетов

SUSE Linux Enterprise High Availability Extension 15 SP6
haproxy-2.8.11+git0.01c1056a4-150600.3.6.1
openSUSE Leap 15.6
haproxy-2.8.11+git0.01c1056a4-150600.3.6.1

Описание

HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.


Затронутые продукты
SUSE Linux Enterprise High Availability Extension 15 SP6:haproxy-2.8.11+git0.01c1056a4-150600.3.6.1
openSUSE Leap 15.6:haproxy-2.8.11+git0.01c1056a4-150600.3.6.1

Ссылки