Critical DSA-5348-1 2 CVEs

haproxy - security update

Published Feb 14, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	haproxy	2.2.9-2+deb11u4

Vulnerabilities 2

Critical 9.1

CVE-2023-25725 Public exploit

HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situati…

haproxy haproxy haproxy Debian Ubuntu Azure Linux

Feb 14, 2023
Medium 6.5

CVE-2023-0056

An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue …

haproxy haproxy haproxy-3.2 haproxy-3.3 Debian Ubuntu Wolfi

Mar 23, 2023