Photon OS 1.0: Haproxy PHSA-2019-1.0-0220

An update of the haproxy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0220. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Haproxy PHSA-2019-2.0-0150

An update of the haproxy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0150. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2019-11323

HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys. This is related to an include/types/sslsock.h error...

Code injection

HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys. This is related to an include/types/sslsock.h error...

CVE-2019-11323

HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys. This is related to an include/types/sslsock.h error...

CVE-2019-11323

HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys. This is related to an include/types/sslsock.h error...

CVE-2019-11323

HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys. This is related to an include/types/sslsock.h error...

CVE-2019-11323

HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys. This is related to an include/types/sslsock.h error...

CVE-2019-11323

HAProxy before 1.9.7 is vulnerable due to mishandling a reload with rotated keys, triggering the use of uninitialized, highly predictable HMAC keys in ssl_sock.h. This can lead to disclosure of HMAC keys. Public exploit details are not provided in the documents. The IBM Aspera IBM pages note fixe...

CVE-2019-11323

HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys. This is related to an include/types/sslsock.h error...

CVE-2019-11323: Use of a Broken or Risky Cryptographic Algorithm

HAProxy before 1.9.7 mishandles a reload with rotated keys, which triggers use of uninitialized, and very predictable, HMAC keys. This is related to an include/types/sslsock.h error...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0226

An update of 'elfutils', 'haproxy' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2019-0226

Updates of 'haproxy', 'elfutils' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-0010

Updates of 'postgresql', 'haproxy', 'ansible', 'libxslt', 'PyYAML' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-3.0-0010

Updates of 'haproxy', 'postgresql', 'ansible', 'PyYAML', 'libxslt' packages of Photon OS have been released...

HAProxy Compressed Name Denial of Service (CVE-2018-20103)

A denial-of-service vulnerability has been reported in HAProxy. The vulnerability is due to incorrect handling of compressed pointers. Successful exploitation of this vulnerability could lead to a denial of service condition...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0150

An update of 'haproxy' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2019-0150

Updates of 'haproxy' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-0220

Updates of 'systemd', 'cairo', 'libssh2', 'haproxy', 'dhcp', 'python2' packages of Photon OS have been released...

openSUSE Security Update : curl (openSUSE-2019-435)

This update for curl to version 7.60.0 fixes the following issues : These security issues were fixed : - CVE-2018-1000300: Prevent heap-based buffer overflow when closing down an FTP connection with very long server command replies bsc1092094. - CVE-2018-1000301: Prevent buffer over-read that cou...