tocsin

Debian/haproxy: medium 6.8

HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer on

Action: Upgrade haproxy to 2.6.12-1+deb12u2 or later.

Affected

introducedfixedlast affected
02.6.12-1+deb12u2-

Fixed versions

2.6.12-1+deb12u2

Sources

published · modified · JSON