Red Hat Security Advisory: rh-haproxy18-haproxy security, bug fix, and enhancement update

Fixed packages 3

Vulnerabilities 2

• Unscored —
  CVE-2019-18277 EPSS 10%

  A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the "ch…

  haproxy haproxy Debian Ubuntu
  Oct 23, 2019
• Unscored —
  CVE-2019-19330

  The HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by carriage return (CR, ASCII 0x…

  haproxy haproxy haproxy Debian Ubuntu Alpine
  Nov 27, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.5_release_notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1759697
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1774747
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1777584
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2265.json
• report
  https://access.redhat.com/security/cve/CVE-2019-18277
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-18277
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-18277
• report
  https://access.redhat.com/security/cve/CVE-2019-19330
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-19330
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-19330