High ELSA-2025-21693 1 CVE

Important: haproxy security update (Oracle Linux 9)

Published Nov 25, 2025 · Updated Nov 25, 2025

Ecosystem: Oracle Linux

Summary

[2.8.14-1.1]
- Fix denial of service vulnerability in mjson library (CVE-2025-11230)
Resolves: RHEL-126664

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	haproxy	0:2.8.14-1.el9_7.1

Vulnerabilities 1

High 7.5

CVE-2025-11230

Denial of service vulnerability in HAProxy mjson library

Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.

HAProxy HAProxy Community Edition haproxy haproxy Debian Ubuntu Azure Linux

Nov 19, 2025