Описание
Security update for haproxy
This update for haproxy fixes the following issues:
- CVE-2025-32464: Fixed heap-based buffer overflow in sample_conv_regsub. (bsc#1240971)
Список пакетов
SUSE Linux Enterprise High Availability Extension 15 SP6
haproxy-2.8.11+git0.01c1056a4-150600.3.6.1
openSUSE Leap 15.6
haproxy-2.8.11+git0.01c1056a4-150600.3.6.1
Ссылки
- Link for SUSE-SU-2025:1264-1
- E-Mail link for SUSE-SU-2025:1264-1
- SUSE Security Ratings
- SUSE Bug 1240971
- SUSE CVE CVE-2025-32464 page
Описание
HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.
Затронутые продукты
SUSE Linux Enterprise High Availability Extension 15 SP6:haproxy-2.8.11+git0.01c1056a4-150600.3.6.1
openSUSE Leap 15.6:haproxy-2.8.11+git0.01c1056a4-150600.3.6.1
Ссылки
- CVE-2025-32464
- SUSE Bug 1240971