Project

General

Profile

Actions
Copy link

Bug #9962

closed

HAproxy Upgrade needed HTTP/2 CVE-2019-19330

Added by DRago_Angel [InV@DER] over 4 years ago. Updated over 4 years ago.

Status:
Resolved
Priority:
Urgent
Assignee:
Renato Botelho
Category:
haproxy
Target version:
-
Start date:
12/10/2019
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Affected Version:
All
Affected Plus Version:
Affected Architecture:
All

Description

[https://nvd.nist.gov/vuln/detail/CVE-2019-19330]

Haproxy 1.8 need be updated to 1.8.23 (RD: 2019/11/25) from 1.8.21 [https://www.haproxy.org/download/1.8/src/CHANGELOG]
Haproxy 2.0 need be updated to 2.0.10 (RD: 2019/11/25) from 2.0.7 [https://www.haproxy.org/download/2.0/src/CHANGELOG]

Commits with fix:
[https://git.haproxy.org/?p=haproxy.git;a=commit;h=146f53ae7e97dbfe496d0445c2802dd0a30b0878]
[https://git.haproxy.org/?p=haproxy.git;a=commit;h=54f53ef7ce4102be596130b44c768d1818570344]
[https://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d461515551b95daae20954b3053ce87e]

Actions
Copy link

Also available in: Atom PDF