Red Hat Product Errata RHSA-2024:1142 - Security Advisory
Issued:
2024-03-05
Updated:
2024-03-05

RHSA-2024:1142 - Security Advisory

Synopsis

Moderate: haproxy security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for haproxy is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications.

Security Fix(es):

  • haproxy: Proxy forwards malformed empty Content-Length headers (CVE-2023-40225)
  • haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers (CVE-2023-45539)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

  • BZ - 2231370 - CVE-2023-40225 haproxy: Proxy forwards malformed empty Content-Length headers
  • BZ - 2253037 - CVE-2023-45539 haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers

Red Hat Enterprise Linux for x86_64 9

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
x86_64
haproxy-2.4.22-3.el9_3.x86_64.rpm SHA-256: 1134991c11a7764a19e06913bf3597f5dbdb681babb418d6f742a6170fbe9616
haproxy-debuginfo-2.4.22-3.el9_3.x86_64.rpm SHA-256: e44941884a09e68fd75ec009c1e57214489f7972771ab44d9e3a30ecc8d51a44
haproxy-debugsource-2.4.22-3.el9_3.x86_64.rpm SHA-256: a64c8384c97dd5e3475811c9f4a9531fd58a8dd3c1bf1182fcbde1b33f6aa4c8

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
x86_64
haproxy-2.4.22-3.el9_3.x86_64.rpm SHA-256: 1134991c11a7764a19e06913bf3597f5dbdb681babb418d6f742a6170fbe9616
haproxy-debuginfo-2.4.22-3.el9_3.x86_64.rpm SHA-256: e44941884a09e68fd75ec009c1e57214489f7972771ab44d9e3a30ecc8d51a44
haproxy-debugsource-2.4.22-3.el9_3.x86_64.rpm SHA-256: a64c8384c97dd5e3475811c9f4a9531fd58a8dd3c1bf1182fcbde1b33f6aa4c8

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
x86_64
haproxy-2.4.22-3.el9_3.x86_64.rpm SHA-256: 1134991c11a7764a19e06913bf3597f5dbdb681babb418d6f742a6170fbe9616
haproxy-debuginfo-2.4.22-3.el9_3.x86_64.rpm SHA-256: e44941884a09e68fd75ec009c1e57214489f7972771ab44d9e3a30ecc8d51a44
haproxy-debugsource-2.4.22-3.el9_3.x86_64.rpm SHA-256: a64c8384c97dd5e3475811c9f4a9531fd58a8dd3c1bf1182fcbde1b33f6aa4c8

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
x86_64
haproxy-2.4.22-3.el9_3.x86_64.rpm SHA-256: 1134991c11a7764a19e06913bf3597f5dbdb681babb418d6f742a6170fbe9616
haproxy-debuginfo-2.4.22-3.el9_3.x86_64.rpm SHA-256: e44941884a09e68fd75ec009c1e57214489f7972771ab44d9e3a30ecc8d51a44
haproxy-debugsource-2.4.22-3.el9_3.x86_64.rpm SHA-256: a64c8384c97dd5e3475811c9f4a9531fd58a8dd3c1bf1182fcbde1b33f6aa4c8

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
x86_64
haproxy-2.4.22-3.el9_3.x86_64.rpm SHA-256: 1134991c11a7764a19e06913bf3597f5dbdb681babb418d6f742a6170fbe9616
haproxy-debuginfo-2.4.22-3.el9_3.x86_64.rpm SHA-256: e44941884a09e68fd75ec009c1e57214489f7972771ab44d9e3a30ecc8d51a44
haproxy-debugsource-2.4.22-3.el9_3.x86_64.rpm SHA-256: a64c8384c97dd5e3475811c9f4a9531fd58a8dd3c1bf1182fcbde1b33f6aa4c8

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
s390x
haproxy-2.4.22-3.el9_3.s390x.rpm SHA-256: 4e9458392b4310b4beeea3e03b223e5a786fbf91bee10e4b7f8edc3c4cb1cc08
haproxy-debuginfo-2.4.22-3.el9_3.s390x.rpm SHA-256: e32b3255b2e6b5fec689bca1731c0746d945182cce88e062887f7facd7d9b7c8
haproxy-debugsource-2.4.22-3.el9_3.s390x.rpm SHA-256: 7b4d8809788efc4dd16eab6db9233d624678f7b1d58d1ad89018401de0501b58

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
s390x
haproxy-2.4.22-3.el9_3.s390x.rpm SHA-256: 4e9458392b4310b4beeea3e03b223e5a786fbf91bee10e4b7f8edc3c4cb1cc08
haproxy-debuginfo-2.4.22-3.el9_3.s390x.rpm SHA-256: e32b3255b2e6b5fec689bca1731c0746d945182cce88e062887f7facd7d9b7c8
haproxy-debugsource-2.4.22-3.el9_3.s390x.rpm SHA-256: 7b4d8809788efc4dd16eab6db9233d624678f7b1d58d1ad89018401de0501b58

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
s390x
haproxy-2.4.22-3.el9_3.s390x.rpm SHA-256: 4e9458392b4310b4beeea3e03b223e5a786fbf91bee10e4b7f8edc3c4cb1cc08
haproxy-debuginfo-2.4.22-3.el9_3.s390x.rpm SHA-256: e32b3255b2e6b5fec689bca1731c0746d945182cce88e062887f7facd7d9b7c8
haproxy-debugsource-2.4.22-3.el9_3.s390x.rpm SHA-256: 7b4d8809788efc4dd16eab6db9233d624678f7b1d58d1ad89018401de0501b58

Red Hat Enterprise Linux for Power, little endian 9

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
ppc64le
haproxy-2.4.22-3.el9_3.ppc64le.rpm SHA-256: 116fb5348377fb165ba2f1b94d4cafe0a12a82a0b79e13e3de56fb18731d9269
haproxy-debuginfo-2.4.22-3.el9_3.ppc64le.rpm SHA-256: 61ef9d3d3a08b78fd7a8f0ca60de08291b55ea5696e64eab9d2f94a6039d8c39
haproxy-debugsource-2.4.22-3.el9_3.ppc64le.rpm SHA-256: d5b485e74abe65a2a2f997e69f038223cacd7464f6087da4d34bf7fdec984e71

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
ppc64le
haproxy-2.4.22-3.el9_3.ppc64le.rpm SHA-256: 116fb5348377fb165ba2f1b94d4cafe0a12a82a0b79e13e3de56fb18731d9269
haproxy-debuginfo-2.4.22-3.el9_3.ppc64le.rpm SHA-256: 61ef9d3d3a08b78fd7a8f0ca60de08291b55ea5696e64eab9d2f94a6039d8c39
haproxy-debugsource-2.4.22-3.el9_3.ppc64le.rpm SHA-256: d5b485e74abe65a2a2f997e69f038223cacd7464f6087da4d34bf7fdec984e71

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
ppc64le
haproxy-2.4.22-3.el9_3.ppc64le.rpm SHA-256: 116fb5348377fb165ba2f1b94d4cafe0a12a82a0b79e13e3de56fb18731d9269
haproxy-debuginfo-2.4.22-3.el9_3.ppc64le.rpm SHA-256: 61ef9d3d3a08b78fd7a8f0ca60de08291b55ea5696e64eab9d2f94a6039d8c39
haproxy-debugsource-2.4.22-3.el9_3.ppc64le.rpm SHA-256: d5b485e74abe65a2a2f997e69f038223cacd7464f6087da4d34bf7fdec984e71

Red Hat Enterprise Linux for ARM 64 9

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
aarch64
haproxy-2.4.22-3.el9_3.aarch64.rpm SHA-256: 00346167922b381b6ff8b45d123420a1c5e2f4af42ee80bac19f995f31590c24
haproxy-debuginfo-2.4.22-3.el9_3.aarch64.rpm SHA-256: d24d3448d061acf67789a897593650ae1218f68ca4198929725bfb751d80d516
haproxy-debugsource-2.4.22-3.el9_3.aarch64.rpm SHA-256: 319b1c08f4e9710943bfa3ab3f9b49e95c268670739b912f5daa85d55db23b3e

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
aarch64
haproxy-2.4.22-3.el9_3.aarch64.rpm SHA-256: 00346167922b381b6ff8b45d123420a1c5e2f4af42ee80bac19f995f31590c24
haproxy-debuginfo-2.4.22-3.el9_3.aarch64.rpm SHA-256: d24d3448d061acf67789a897593650ae1218f68ca4198929725bfb751d80d516
haproxy-debugsource-2.4.22-3.el9_3.aarch64.rpm SHA-256: 319b1c08f4e9710943bfa3ab3f9b49e95c268670739b912f5daa85d55db23b3e

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
aarch64
haproxy-2.4.22-3.el9_3.aarch64.rpm SHA-256: 00346167922b381b6ff8b45d123420a1c5e2f4af42ee80bac19f995f31590c24
haproxy-debuginfo-2.4.22-3.el9_3.aarch64.rpm SHA-256: d24d3448d061acf67789a897593650ae1218f68ca4198929725bfb751d80d516
haproxy-debugsource-2.4.22-3.el9_3.aarch64.rpm SHA-256: 319b1c08f4e9710943bfa3ab3f9b49e95c268670739b912f5daa85d55db23b3e

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
ppc64le
haproxy-2.4.22-3.el9_3.ppc64le.rpm SHA-256: 116fb5348377fb165ba2f1b94d4cafe0a12a82a0b79e13e3de56fb18731d9269
haproxy-debuginfo-2.4.22-3.el9_3.ppc64le.rpm SHA-256: 61ef9d3d3a08b78fd7a8f0ca60de08291b55ea5696e64eab9d2f94a6039d8c39
haproxy-debugsource-2.4.22-3.el9_3.ppc64le.rpm SHA-256: d5b485e74abe65a2a2f997e69f038223cacd7464f6087da4d34bf7fdec984e71

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
ppc64le
haproxy-2.4.22-3.el9_3.ppc64le.rpm SHA-256: 116fb5348377fb165ba2f1b94d4cafe0a12a82a0b79e13e3de56fb18731d9269
haproxy-debuginfo-2.4.22-3.el9_3.ppc64le.rpm SHA-256: 61ef9d3d3a08b78fd7a8f0ca60de08291b55ea5696e64eab9d2f94a6039d8c39
haproxy-debugsource-2.4.22-3.el9_3.ppc64le.rpm SHA-256: d5b485e74abe65a2a2f997e69f038223cacd7464f6087da4d34bf7fdec984e71

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
x86_64
haproxy-2.4.22-3.el9_3.x86_64.rpm SHA-256: 1134991c11a7764a19e06913bf3597f5dbdb681babb418d6f742a6170fbe9616
haproxy-debuginfo-2.4.22-3.el9_3.x86_64.rpm SHA-256: e44941884a09e68fd75ec009c1e57214489f7972771ab44d9e3a30ecc8d51a44
haproxy-debugsource-2.4.22-3.el9_3.x86_64.rpm SHA-256: a64c8384c97dd5e3475811c9f4a9531fd58a8dd3c1bf1182fcbde1b33f6aa4c8

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
x86_64
haproxy-2.4.22-3.el9_3.x86_64.rpm SHA-256: 1134991c11a7764a19e06913bf3597f5dbdb681babb418d6f742a6170fbe9616
haproxy-debuginfo-2.4.22-3.el9_3.x86_64.rpm SHA-256: e44941884a09e68fd75ec009c1e57214489f7972771ab44d9e3a30ecc8d51a44
haproxy-debugsource-2.4.22-3.el9_3.x86_64.rpm SHA-256: a64c8384c97dd5e3475811c9f4a9531fd58a8dd3c1bf1182fcbde1b33f6aa4c8

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
aarch64
haproxy-2.4.22-3.el9_3.aarch64.rpm SHA-256: 00346167922b381b6ff8b45d123420a1c5e2f4af42ee80bac19f995f31590c24
haproxy-debuginfo-2.4.22-3.el9_3.aarch64.rpm SHA-256: d24d3448d061acf67789a897593650ae1218f68ca4198929725bfb751d80d516
haproxy-debugsource-2.4.22-3.el9_3.aarch64.rpm SHA-256: 319b1c08f4e9710943bfa3ab3f9b49e95c268670739b912f5daa85d55db23b3e

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
aarch64
haproxy-2.4.22-3.el9_3.aarch64.rpm SHA-256: 00346167922b381b6ff8b45d123420a1c5e2f4af42ee80bac19f995f31590c24
haproxy-debuginfo-2.4.22-3.el9_3.aarch64.rpm SHA-256: d24d3448d061acf67789a897593650ae1218f68ca4198929725bfb751d80d516
haproxy-debugsource-2.4.22-3.el9_3.aarch64.rpm SHA-256: 319b1c08f4e9710943bfa3ab3f9b49e95c268670739b912f5daa85d55db23b3e

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
s390x
haproxy-2.4.22-3.el9_3.s390x.rpm SHA-256: 4e9458392b4310b4beeea3e03b223e5a786fbf91bee10e4b7f8edc3c4cb1cc08
haproxy-debuginfo-2.4.22-3.el9_3.s390x.rpm SHA-256: e32b3255b2e6b5fec689bca1731c0746d945182cce88e062887f7facd7d9b7c8
haproxy-debugsource-2.4.22-3.el9_3.s390x.rpm SHA-256: 7b4d8809788efc4dd16eab6db9233d624678f7b1d58d1ad89018401de0501b58

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
haproxy-2.4.22-3.el9_3.src.rpm SHA-256: c51eb23338554f4327c9d4bc0195d980381a5a996b79aa8bb20fa8ce79d9d3bc
s390x
haproxy-2.4.22-3.el9_3.s390x.rpm SHA-256: 4e9458392b4310b4beeea3e03b223e5a786fbf91bee10e4b7f8edc3c4cb1cc08
haproxy-debuginfo-2.4.22-3.el9_3.s390x.rpm SHA-256: e32b3255b2e6b5fec689bca1731c0746d945182cce88e062887f7facd7d9b7c8
haproxy-debugsource-2.4.22-3.el9_3.s390x.rpm SHA-256: 7b4d8809788efc4dd16eab6db9233d624678f7b1d58d1ad89018401de0501b58

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.