Oval Definition:oval:com.redhat.rhsa:def:20151741
Revision Date:2015-09-08Version:637
Title:RHSA-2015:1741: haproxy security update (Important)
Description:HAProxy provides high availability, load balancing, and proxying for TCP and HTTP-based applications.

  • An implementation error related to the memory management of request and responses was found within HAProxy's buffer_slow_realign() function. An unauthenticated remote attacker could possibly use this flaw to leak certain memory buffer contents from a past request or session. (CVE-2015-3281)

    All haproxy users are advised to upgrade to this updated package, which contains a backported patch to correct this issue.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2015-3281
    RHSA-2015:1741
    RHSA-2015:1741-00
    RHSA-2015:1741-01
    Platform(s):Red Hat Enterprise Linux 6
    Red Hat Enterprise Linux 7
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND haproxy is earlier than 0:1.5.4-2.el6_7.1
  • AND haproxy is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 7 is installed
  • AND haproxy is earlier than 0:1.5.4-4.el7_1.1
  • AND haproxy is signed with Red Hat redhatrelease2 key
  • BACK