—–BEGIN PGP SIGNED MESSAGE—–
\nHash: SHA512<\/p>\n
– ————————————————————————-
\nDebian Security Advisory DSA-5388-1 security@debian.org
\nhttps:\/\/www.debian.org\/security\/ Salvatore Bonaccorso
\nApril 13, 2023 https:\/\/www.debian.org\/security\/faq
\n– ————————————————————————-<\/p>\n
Package : haproxy
\nCVE ID : CVE-2023-0836<\/p>\n
It was reported that HAProxy, a fast and reliable load balancing reverse
\nproxy, does not properly initialize connection buffers when encoding the
\nFCGI_BEGIN_REQUEST record. A remote attacker can take advantage of this
\nflaw to cause an information leak.<\/p>\n
For the stable distribution (bullseye), this problem has been fixed in
\nversion 2.2.9-2+deb11u5.<\/p>\n
We recommend that you upgrade your haproxy packages.<\/p>\n
For the detailed security status of haproxy please refer to its security
\ntracker page at:
\nhttps:\/\/security-tracker.debian.org\/tracker\/haproxy<\/p>\n
Further information about Debian Security Advisories, how to apply
\nthese updates to your system and frequently asked questions can be
\nfound at: https:\/\/www.debian.org\/security\/<\/p>\n
Mailing list: debian-security-announce@lists.debian.org
\n—–BEGIN PGP SIGNATURE—–<\/p>\n
iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmQ4YxlfFIAAAAAALgAo
\naXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
\nNDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND
\nz0RA+g\/8C9B17OgAEYmOivNLX\/0SmHC0WQft66LH5a3lrr+xgncSO6h7REzVlgMX
\nIffI+RnTxTuHH0sMb8S1rYsAfaHeAHGzXOEKiooPVwMix3TMTR6mocv5D1V4smTi
\nI8JWZSDIzPLKn1EYKQDXxg8wz6nEVsc5njF8SAcWZ1fDDLgbbVtUEY9SL2dkGLF+
\nQlsGWnsseN6AzNfVm7vYIdTzSFbc1Hd3mnlL+uIolhKkGLtQ+iMTLxWjxu1n4MqI
\nYh3VR\/f2BUVez9JP3GZ\/BOEZU\/M3b91QYjmY2OghAlNBBXlL\/jMmbZAAAfFukIK1
\nJIb23iLac\/bjv6e8yixwLX0q+t0j4ZTpxmln+iiIPLSZ\/1IBYXOvf6nrP\/cIueGq
\nwlMFdD6qRm7s8cIsx4Gw8bb+ge9zUCOdkX0uPzLDRWul3e+69fdmWazcmDXIFOrg
\nBcp5cp4i33r0+T338rimyN4Q6CyqYQ756gf5mK8kq\/vVLI4qyLYmVjZj2eAUI6EP
\nWptxP0UKUarFtpYsc2XRRFb66bxaRTf1yuPvR3aRJKnBW4+KnuiTho1J5wa\/HaK5
\n51NWwbgmICsbGsfI5\/S0cHpYcvdSRG5SAZavFGUT\/dIlsOD4OdjevHGnN021AYP1
\n+EqLuX8Zsq5DQKh3s\/yUsl6svTTBOiXZxVer9DLYD+D4yuqkqIc=6SUU
\n—–END PGP SIGNATURE—–<\/p>\n","protected":false},"excerpt":{"rendered":"
—–BEGIN PGP SIGNED MESSAGE—– Hash: SHA512 – ————————————————————————- Debian Security Advisory DSA-5388-1 security@debian.org https:\/\/www.debian.org\/security\/ Salvatore Bonaccorso April 13, 2023 https:\/\/www.debian.org\/security\/faq – ————————————————————————- Package : haproxy CVE ID : CVE-2023-0836 It was reported that HAProxy, a fast and reliable load balancing reverse proxy, does not properly initialize connection buffers when encoding the FCGI_BEGIN_REQUEST record. A remote …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-40376","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/40376","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=40376"}],"version-history":[{"count":1,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/40376\/revisions"}],"predecessor-version":[{"id":40395,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/40376\/revisions\/40395"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=40376"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=40376"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=40376"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}