High ELSA-2025-21691 1 CVE

Important: haproxy security update (Oracle Linux 10)

Published Dec 2, 2025 · Updated Dec 2, 2025

Ecosystem: Oracle Linux

Summary

[3.0.5-4.1]
- Fix denial of service vulnerability in mjson library (CVE-2025-11230)
Resolves: RHEL-126652

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 10	haproxy	0:3.0.5-4.el10_1.1

Vulnerabilities 1

High 7.5

CVE-2025-11230

Denial of service vulnerability in HAProxy mjson library

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.

HAProxy HAProxy Community Edition haproxy haproxy Debian Ubuntu Azure Linux

Nov 19, 2025