Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Fedora 21: FEDORA-2015-11255 Critical Info Leak in HAProxy

fedora
Calendar Grey July 29, 2015
Scroller Fedora
Fedora 21 security fix for HAProxy addresses critical information leak in CVE-2015-3281, ensuring high availability.
Security fix for CVE-2015-3281

Summary

HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high

availability environments. Indeed, it can:

- route HTTP requests depending on statically assigned cookies

- spread load among several servers while assuring server persistence

through the use of HTTP cookies

- switch to backup servers in the event a main one fails

- accept connections to special ports dedicated to service monitoring

- stop accepting connections without breaking existing ones

- add, modify, and delete HTTP headers in both directions

- block requests matching particular patterns

- report detailed status to authenticated users from a URI

intercepted from the application

Update Information:

Security fix for CVE-2015-3281

Topics%20covered

Topics Covered

security advisory information leak critical software update Fedora security fix haproxy

Change Log

* Mon Jul 6 2015 Ryan O'Hara - 1.5.14-1 - Update to 1.5.14 (CVE-2015-3281, #1239181) * Fri Jun 26 2015 Ryan O'Hara - 1.5.13-1 - Update to 1.5.13 (#1236056) * Tue May 5 2015 Ryan O'Hara - 1.5.12-1 - Update to 1.5.12 (#1217922) * Wed Mar 4 2015 Ryan O'Hara - 1.5.11-4 - Rework systemd service and sysconfig file * Wed Feb 11 2015 Ryan O'Hara - 1.5.11-3 - Add sysconfig file * Tue Feb 10 2015 Ryan O'Hara - 1.5.11-2 - Add tcp-ut bind option to set TCP_USER_TIMEOUT (#1190783) * Sun Feb 1 2015 Ryan O'Hara - 1.5.11-1 - Update to 1.5.11 (#1188029) * Mon Jan 5 2015 Ryan O'Hara - 1.5.10-1 - Update to 1.5.10 * Mon Dec 1 2014 Ryan O'Hara - 1.5.9-1 - Update to 1.5.9

References


[ 1 ] Bug #1239072 - CVE-2015-3281 haproxy: information leak in buffer_slow_realign() https://bugzilla.redhat.com/show_bug.cgi?id=1239072

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update haproxy' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: haproxy
Product: Fedora 21
Version: 1.5.14
Release: 1.fc21
URL: http://www.haproxy.org/
Summary: HAProxy reverse proxy for high availability environments

Topics%20covered

Topics Covered

security advisory information leak critical software update Fedora security fix haproxy

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.