Alerts This Week
Warning Icon 1 640
Alerts This Week
Warning Icon 1 640

SUSE Linux Micro 6.0: 2025:20101-1 moderate: haproxy HTTP smuggling

suse
Calendar Grey June 4, 2025
Dist Suse Esm H88
This notification pertains to a significant concern regarding haproxy on SUSE Linux Micro, in connection to potential risks associated with HTTP smuggling vulnerabilities.
* bsc#1233973 Cross-References: * CVE-2024-53008

Summary

## This update for haproxy fixes the following issues: Update to version 2.8.11+git0.01c1056a4: * VUL-0: CVE-2024-53008: haproxy: HTTP/3 request smuggling via malformed HTTP headers forwarded to a HTTP/1.1 non-compliant back-end server (bsc#1233973) * BUG/MINOR: cfgparse-listen: fix option httpslog override warning message * BUG/MEDIUM: promex: Wait to have the request before sending the response * BUG/MEDIUM: cache/stats: Wait to have the request before sending the response * BUG/MEDIUM: queue: implement a flag to check for the dequeuing * BUG/MINOR: clock: validate that now_offset still applies to the current date * BUG/MINOR: clock: make time jump corrections a bit more accurate * BUG/MINOR: polling: fix time reporting when using busy polling

Topics%20covered

Topics Covered

security advisory moderate vulnerability SUSE Linux haproxy HTTP smuggling

References

* bsc#1233973

Cross-

* CVE-2024-53008

CVSS scores:

* CVE-2024-53008 ( SUSE ): 6.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

* CVE-2024-53008 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

* CVE-2024-53008 ( NVD ): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Products:

* SUSE Linux Micro 6.0

An update that solves one vulnerability can now be installed.

##

* https://www.suse.com/security/cve/CVE-2024-53008.html

* https://bugzilla.suse.com/show_bug.cgi?id=1233973

Announcement ID: SUSE-SU-2025:20101-1
Release Date: 2025-02-03T09:17:38Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate vulnerability SUSE Linux haproxy HTTP smuggling

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here