Red Hat Product Errata RHSA-2023:6496 - Security Advisory
Issued:
2023-11-07
Updated:
2023-11-07

RHSA-2023:6496 - Security Advisory

Synopsis

Moderate: haproxy security and bug fix update

Type/Severity

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for haproxy is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications.

Security Fix(es):

  • haproxy: data leak via fcgi requests (CVE-2023-0836)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

  • BZ - 2180746 - CVE-2023-0836 haproxy: data leak via fcgi requests
  • BZ - 2196530 - [Rebase] Rebase haproxy to 2.4.22
  • BZ - 2212246 - haproxy stats still showing status as OPEN after disabling frontend

Red Hat Enterprise Linux for x86_64 9

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
x86_64
haproxy-2.4.22-1.el9.x86_64.rpm SHA-256: be256120b1193f7f272871f034c3d25e38d8efa4209b440cec1d9656eee26313
haproxy-debuginfo-2.4.22-1.el9.x86_64.rpm SHA-256: 80434a97f3dd4555e6d635584b781711f4720d454444b02bcd3550a400c705bc
haproxy-debugsource-2.4.22-1.el9.x86_64.rpm SHA-256: da85325a8cd814073a2b2d246467f57f822b31cba85857d5d73148f4d70e29a8

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
x86_64
haproxy-2.4.22-1.el9.x86_64.rpm SHA-256: be256120b1193f7f272871f034c3d25e38d8efa4209b440cec1d9656eee26313
haproxy-debuginfo-2.4.22-1.el9.x86_64.rpm SHA-256: 80434a97f3dd4555e6d635584b781711f4720d454444b02bcd3550a400c705bc
haproxy-debugsource-2.4.22-1.el9.x86_64.rpm SHA-256: da85325a8cd814073a2b2d246467f57f822b31cba85857d5d73148f4d70e29a8

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
x86_64
haproxy-2.4.22-1.el9.x86_64.rpm SHA-256: be256120b1193f7f272871f034c3d25e38d8efa4209b440cec1d9656eee26313
haproxy-debuginfo-2.4.22-1.el9.x86_64.rpm SHA-256: 80434a97f3dd4555e6d635584b781711f4720d454444b02bcd3550a400c705bc
haproxy-debugsource-2.4.22-1.el9.x86_64.rpm SHA-256: da85325a8cd814073a2b2d246467f57f822b31cba85857d5d73148f4d70e29a8

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
x86_64
haproxy-2.4.22-1.el9.x86_64.rpm SHA-256: be256120b1193f7f272871f034c3d25e38d8efa4209b440cec1d9656eee26313
haproxy-debuginfo-2.4.22-1.el9.x86_64.rpm SHA-256: 80434a97f3dd4555e6d635584b781711f4720d454444b02bcd3550a400c705bc
haproxy-debugsource-2.4.22-1.el9.x86_64.rpm SHA-256: da85325a8cd814073a2b2d246467f57f822b31cba85857d5d73148f4d70e29a8

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
x86_64
haproxy-2.4.22-1.el9.x86_64.rpm SHA-256: be256120b1193f7f272871f034c3d25e38d8efa4209b440cec1d9656eee26313
haproxy-debuginfo-2.4.22-1.el9.x86_64.rpm SHA-256: 80434a97f3dd4555e6d635584b781711f4720d454444b02bcd3550a400c705bc
haproxy-debugsource-2.4.22-1.el9.x86_64.rpm SHA-256: da85325a8cd814073a2b2d246467f57f822b31cba85857d5d73148f4d70e29a8

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
s390x
haproxy-2.4.22-1.el9.s390x.rpm SHA-256: 2f5ac02df4bcaa4a3c2ec6360346fdde80faadb1c26d4596906c68104bac3f53
haproxy-debuginfo-2.4.22-1.el9.s390x.rpm SHA-256: 77868c9837cc875e1b6eab327a806817ded85f5a60452f9ecd54fb0a57b0ef80
haproxy-debugsource-2.4.22-1.el9.s390x.rpm SHA-256: 01879dc31d25abdc1d2f702d974ddaab7cfc3c9e23ceaa3d55d4bd1cdf30ea99

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
s390x
haproxy-2.4.22-1.el9.s390x.rpm SHA-256: 2f5ac02df4bcaa4a3c2ec6360346fdde80faadb1c26d4596906c68104bac3f53
haproxy-debuginfo-2.4.22-1.el9.s390x.rpm SHA-256: 77868c9837cc875e1b6eab327a806817ded85f5a60452f9ecd54fb0a57b0ef80
haproxy-debugsource-2.4.22-1.el9.s390x.rpm SHA-256: 01879dc31d25abdc1d2f702d974ddaab7cfc3c9e23ceaa3d55d4bd1cdf30ea99

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
s390x
haproxy-2.4.22-1.el9.s390x.rpm SHA-256: 2f5ac02df4bcaa4a3c2ec6360346fdde80faadb1c26d4596906c68104bac3f53
haproxy-debuginfo-2.4.22-1.el9.s390x.rpm SHA-256: 77868c9837cc875e1b6eab327a806817ded85f5a60452f9ecd54fb0a57b0ef80
haproxy-debugsource-2.4.22-1.el9.s390x.rpm SHA-256: 01879dc31d25abdc1d2f702d974ddaab7cfc3c9e23ceaa3d55d4bd1cdf30ea99

Red Hat Enterprise Linux for Power, little endian 9

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
ppc64le
haproxy-2.4.22-1.el9.ppc64le.rpm SHA-256: dcd172b5e5afb9e22820113db0e99659a870c045e57948649d6e4f468fb5596b
haproxy-debuginfo-2.4.22-1.el9.ppc64le.rpm SHA-256: 9ae7b5a98ba122845934c62a128b95da0204d31313474c7dd54eeb5cfe4130cc
haproxy-debugsource-2.4.22-1.el9.ppc64le.rpm SHA-256: 6993ecf594ab5a070d4ed3213d1932d69218c8ac958d23686177565b4fcdae2a

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
ppc64le
haproxy-2.4.22-1.el9.ppc64le.rpm SHA-256: dcd172b5e5afb9e22820113db0e99659a870c045e57948649d6e4f468fb5596b
haproxy-debuginfo-2.4.22-1.el9.ppc64le.rpm SHA-256: 9ae7b5a98ba122845934c62a128b95da0204d31313474c7dd54eeb5cfe4130cc
haproxy-debugsource-2.4.22-1.el9.ppc64le.rpm SHA-256: 6993ecf594ab5a070d4ed3213d1932d69218c8ac958d23686177565b4fcdae2a

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
ppc64le
haproxy-2.4.22-1.el9.ppc64le.rpm SHA-256: dcd172b5e5afb9e22820113db0e99659a870c045e57948649d6e4f468fb5596b
haproxy-debuginfo-2.4.22-1.el9.ppc64le.rpm SHA-256: 9ae7b5a98ba122845934c62a128b95da0204d31313474c7dd54eeb5cfe4130cc
haproxy-debugsource-2.4.22-1.el9.ppc64le.rpm SHA-256: 6993ecf594ab5a070d4ed3213d1932d69218c8ac958d23686177565b4fcdae2a

Red Hat Enterprise Linux for ARM 64 9

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
aarch64
haproxy-2.4.22-1.el9.aarch64.rpm SHA-256: 99a9cce99612d9bea63b24d3a0ce81ca0f67501f34a935940877b591cb36905f
haproxy-debuginfo-2.4.22-1.el9.aarch64.rpm SHA-256: 9d776570769666021b02f3bf882a47b154dfbd1800b837d1f04c54675f82733e
haproxy-debugsource-2.4.22-1.el9.aarch64.rpm SHA-256: 9a1310b860eba411b0a6e80b52d47fb1fd70a6ad56f0a0653e3ee19169eb9736

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
aarch64
haproxy-2.4.22-1.el9.aarch64.rpm SHA-256: 99a9cce99612d9bea63b24d3a0ce81ca0f67501f34a935940877b591cb36905f
haproxy-debuginfo-2.4.22-1.el9.aarch64.rpm SHA-256: 9d776570769666021b02f3bf882a47b154dfbd1800b837d1f04c54675f82733e
haproxy-debugsource-2.4.22-1.el9.aarch64.rpm SHA-256: 9a1310b860eba411b0a6e80b52d47fb1fd70a6ad56f0a0653e3ee19169eb9736

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
aarch64
haproxy-2.4.22-1.el9.aarch64.rpm SHA-256: 99a9cce99612d9bea63b24d3a0ce81ca0f67501f34a935940877b591cb36905f
haproxy-debuginfo-2.4.22-1.el9.aarch64.rpm SHA-256: 9d776570769666021b02f3bf882a47b154dfbd1800b837d1f04c54675f82733e
haproxy-debugsource-2.4.22-1.el9.aarch64.rpm SHA-256: 9a1310b860eba411b0a6e80b52d47fb1fd70a6ad56f0a0653e3ee19169eb9736

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
ppc64le
haproxy-2.4.22-1.el9.ppc64le.rpm SHA-256: dcd172b5e5afb9e22820113db0e99659a870c045e57948649d6e4f468fb5596b
haproxy-debuginfo-2.4.22-1.el9.ppc64le.rpm SHA-256: 9ae7b5a98ba122845934c62a128b95da0204d31313474c7dd54eeb5cfe4130cc
haproxy-debugsource-2.4.22-1.el9.ppc64le.rpm SHA-256: 6993ecf594ab5a070d4ed3213d1932d69218c8ac958d23686177565b4fcdae2a

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
ppc64le
haproxy-2.4.22-1.el9.ppc64le.rpm SHA-256: dcd172b5e5afb9e22820113db0e99659a870c045e57948649d6e4f468fb5596b
haproxy-debuginfo-2.4.22-1.el9.ppc64le.rpm SHA-256: 9ae7b5a98ba122845934c62a128b95da0204d31313474c7dd54eeb5cfe4130cc
haproxy-debugsource-2.4.22-1.el9.ppc64le.rpm SHA-256: 6993ecf594ab5a070d4ed3213d1932d69218c8ac958d23686177565b4fcdae2a

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
x86_64
haproxy-2.4.22-1.el9.x86_64.rpm SHA-256: be256120b1193f7f272871f034c3d25e38d8efa4209b440cec1d9656eee26313
haproxy-debuginfo-2.4.22-1.el9.x86_64.rpm SHA-256: 80434a97f3dd4555e6d635584b781711f4720d454444b02bcd3550a400c705bc
haproxy-debugsource-2.4.22-1.el9.x86_64.rpm SHA-256: da85325a8cd814073a2b2d246467f57f822b31cba85857d5d73148f4d70e29a8

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
x86_64
haproxy-2.4.22-1.el9.x86_64.rpm SHA-256: be256120b1193f7f272871f034c3d25e38d8efa4209b440cec1d9656eee26313
haproxy-debuginfo-2.4.22-1.el9.x86_64.rpm SHA-256: 80434a97f3dd4555e6d635584b781711f4720d454444b02bcd3550a400c705bc
haproxy-debugsource-2.4.22-1.el9.x86_64.rpm SHA-256: da85325a8cd814073a2b2d246467f57f822b31cba85857d5d73148f4d70e29a8

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
aarch64
haproxy-2.4.22-1.el9.aarch64.rpm SHA-256: 99a9cce99612d9bea63b24d3a0ce81ca0f67501f34a935940877b591cb36905f
haproxy-debuginfo-2.4.22-1.el9.aarch64.rpm SHA-256: 9d776570769666021b02f3bf882a47b154dfbd1800b837d1f04c54675f82733e
haproxy-debugsource-2.4.22-1.el9.aarch64.rpm SHA-256: 9a1310b860eba411b0a6e80b52d47fb1fd70a6ad56f0a0653e3ee19169eb9736

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
aarch64
haproxy-2.4.22-1.el9.aarch64.rpm SHA-256: 99a9cce99612d9bea63b24d3a0ce81ca0f67501f34a935940877b591cb36905f
haproxy-debuginfo-2.4.22-1.el9.aarch64.rpm SHA-256: 9d776570769666021b02f3bf882a47b154dfbd1800b837d1f04c54675f82733e
haproxy-debugsource-2.4.22-1.el9.aarch64.rpm SHA-256: 9a1310b860eba411b0a6e80b52d47fb1fd70a6ad56f0a0653e3ee19169eb9736

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
s390x
haproxy-2.4.22-1.el9.s390x.rpm SHA-256: 2f5ac02df4bcaa4a3c2ec6360346fdde80faadb1c26d4596906c68104bac3f53
haproxy-debuginfo-2.4.22-1.el9.s390x.rpm SHA-256: 77868c9837cc875e1b6eab327a806817ded85f5a60452f9ecd54fb0a57b0ef80
haproxy-debugsource-2.4.22-1.el9.s390x.rpm SHA-256: 01879dc31d25abdc1d2f702d974ddaab7cfc3c9e23ceaa3d55d4bd1cdf30ea99

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
haproxy-2.4.22-1.el9.src.rpm SHA-256: e44d40f506d9ac0c92e14a5a60b0892d86a2b89e535cad1267a0f92df2e817b4
s390x
haproxy-2.4.22-1.el9.s390x.rpm SHA-256: 2f5ac02df4bcaa4a3c2ec6360346fdde80faadb1c26d4596906c68104bac3f53
haproxy-debuginfo-2.4.22-1.el9.s390x.rpm SHA-256: 77868c9837cc875e1b6eab327a806817ded85f5a60452f9ecd54fb0a57b0ef80
haproxy-debugsource-2.4.22-1.el9.s390x.rpm SHA-256: 01879dc31d25abdc1d2f702d974ddaab7cfc3c9e23ceaa3d55d4bd1cdf30ea99

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.