Red Hat 製品エラータ RHSA-2024:8849 - Security Advisory
発行日:
2024-11-05
更新日:
2024-11-05

RHSA-2024:8849 - Security Advisory

概要

Moderate: haproxy security update

タイプ/重大度

Security Advisory: Moderate

Red Hat Insights パッチ分析

このアドバイザリーの影響を受けるシステムを特定し、修正します。

影響を受けるシステムの表示

トピック

An update for haproxy is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

説明

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications.

Security Fix(es):

  • haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers (CVE-2023-45539)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解決策

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

影響を受ける製品

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64

修正

  • BZ - 2253037 - CVE-2023-45539 haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers

Red Hat Enterprise Linux for x86_64 8

SRPM
haproxy-1.8.27-5.el8_10.1.src.rpm SHA-256: c8c50710f1f3592e1ba9187b91d7602a8ad7aad3bb802cdd6646fc75073b7c5e
x86_64
haproxy-1.8.27-5.el8_10.1.x86_64.rpm SHA-256: ae8c68f86d6b35a1f8a2affc9ef4cfcfbf62e620d98dde2fa4acf018856598aa
haproxy-debuginfo-1.8.27-5.el8_10.1.x86_64.rpm SHA-256: 942f74a41217f7201fc9cecc696585c0bf568e2af4fec4b80f50225c16643653
haproxy-debugsource-1.8.27-5.el8_10.1.x86_64.rpm SHA-256: 0f631eade15fa0421649694e0a0cb5554a46fe5b93eda677a187be8c30305aae

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
haproxy-1.8.27-5.el8_10.1.src.rpm SHA-256: c8c50710f1f3592e1ba9187b91d7602a8ad7aad3bb802cdd6646fc75073b7c5e
s390x
haproxy-1.8.27-5.el8_10.1.s390x.rpm SHA-256: e41dcf9fdc7aefecf288009e3c516edc78a1e332584d8c7504fbbbbfff492400
haproxy-debuginfo-1.8.27-5.el8_10.1.s390x.rpm SHA-256: 3a13d165839df413eb2eceda63118a9456b8705823e3724f6a966de0fd1e12a2
haproxy-debugsource-1.8.27-5.el8_10.1.s390x.rpm SHA-256: 63e5b845aae71cc5294fc133b0b9e221bbbad5c2cdf7134c7f131a1f568bd4aa

Red Hat Enterprise Linux for Power, little endian 8

SRPM
haproxy-1.8.27-5.el8_10.1.src.rpm SHA-256: c8c50710f1f3592e1ba9187b91d7602a8ad7aad3bb802cdd6646fc75073b7c5e
ppc64le
haproxy-1.8.27-5.el8_10.1.ppc64le.rpm SHA-256: e772c8abf7b042dbfa5120444be8ff7b207ac7c6b7e8fea016809f3ee6b4b77a
haproxy-debuginfo-1.8.27-5.el8_10.1.ppc64le.rpm SHA-256: d034c6714df9038b9ee9a24846fdb569e16b10bafd924efe355689c1fb4e3529
haproxy-debugsource-1.8.27-5.el8_10.1.ppc64le.rpm SHA-256: 146d3c5ae247bddec61fb5b9c4c21c2e7eb1dae38692110774ff9b6c51a1d21b

Red Hat Enterprise Linux for ARM 64 8

SRPM
haproxy-1.8.27-5.el8_10.1.src.rpm SHA-256: c8c50710f1f3592e1ba9187b91d7602a8ad7aad3bb802cdd6646fc75073b7c5e
aarch64
haproxy-1.8.27-5.el8_10.1.aarch64.rpm SHA-256: d537e52a1c871967a24cd9a8415af9ff2b8a0cce8a34b82a4b90af488eb5e758
haproxy-debuginfo-1.8.27-5.el8_10.1.aarch64.rpm SHA-256: ee2a8eb8ee9bf99dbbf8ade35f5e8721baf6bfd5fca1b4a327770834af4d25b9
haproxy-debugsource-1.8.27-5.el8_10.1.aarch64.rpm SHA-256: bbd54c1f3052d3aef2b978a1fd2f0ad6c4439f7f26b1b4baaf1b636d2753b67d

Red Hat のセキュリティーに関する連絡先は secalert@redhat.com です。 連絡先の詳細は https://access.redhat.com/security/team/contact/ をご覧ください。