Summary
haproxy was updated to fix two security issues.
These security issues were fixed:
- CVE-2015-3281: Information disclosure (bsc#937042).
- CVE-2015-4000: The Logjam Attack / weakdh.org (bsc#937202).
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| SUSE · Cloud Compute Node for SUSE Linux Enterprise 12 Cloud Compute Node for SUSE Linux Enterprise 12 5 | haproxy | 1.5.4-2.4.1 |
| SUSE · SLES 12 Linux Enterprise High Availability Extension 12 | haproxy | 1.5.4-2.4.1 |
Vulnerabilities 2
-
Low 3.7
The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not pr…
-
Unscored —
The buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly realign a buffer that is …