Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:1338-1

Опубликовано: 17 апр. 2025
Источник: suse-cvrf

Описание

Security update for haproxy

This update for haproxy fixes the following issues:

  • CVE-2025-32464: Fixed heap-based buffer overflow in sample_conv_regsub. (bsc#1240971)

Список пакетов

SUSE Linux Enterprise High Availability Extension 15 SP4
haproxy-2.4.22+git0.f8e3218e2-150400.3.22.1
SUSE Linux Enterprise High Availability Extension 15 SP5
haproxy-2.4.22+git0.f8e3218e2-150400.3.22.1
SUSE Linux Enterprise Micro 5.3
haproxy-2.4.22+git0.f8e3218e2-150400.3.22.1
SUSE Linux Enterprise Micro 5.4
haproxy-2.4.22+git0.f8e3218e2-150400.3.22.1
SUSE Linux Enterprise Micro 5.5
haproxy-2.4.22+git0.f8e3218e2-150400.3.22.1

Ссылки

Описание

HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one.

Затронутые продукты
SUSE Linux Enterprise High Availability Extension 15 SP4:haproxy-2.4.22+git0.f8e3218e2-150400.3.22.1
SUSE Linux Enterprise High Availability Extension 15 SP5:haproxy-2.4.22+git0.f8e3218e2-150400.3.22.1
SUSE Linux Enterprise Micro 5.3:haproxy-2.4.22+git0.f8e3218e2-150400.3.22.1
SUSE Linux Enterprise Micro 5.4:haproxy-2.4.22+git0.f8e3218e2-150400.3.22.1
Ссылки
Уязвимость SUSE-SU-2025:1338-1