Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 939016 (CVE-2024-45506) - <net-proxy/haproxy-{2.9.10, 3.0.4}: endless loop in HTTP/2 with zero-copy forwarding in HAProxy
Summary: <net-proxy/haproxy-{2.9.10, 3.0.4}: endless loop in HTTP/2 with zero-copy for...
Status: IN_PROGRESS
Alias: CVE-2024-45506
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Security
URL: https://www.haproxy.com/blog/cve-2024...
Whiteboard: B3 [stable]
Keywords:
Depends on: 941583
Blocks:
  Show dependency tree
 
Reported: 2024-09-04 06:19 UTC by Sam James
Modified: 2024-10-17 05:28 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-09-04 06:19:20 UTC 
commit b935fa36f142459290bf8d7de7e8159ec98c8c1a
Author: Christian Ruppert <idl0r@gentoo.org>
Date:   Tue Sep 3 16:01:43 2024 +0200

    net-proxy/haproxy: Bump to 3.0.4 re CVE-2024-45506

    Signed-off-by: Christian Ruppert <idl0r@gentoo.org>

commit 6c57c17026a383938d4e34fe3fcd1f6b044d3dba
Author: Christian Ruppert <idl0r@gentoo.org>
Date:   Tue Sep 3 16:35:37 2024 +0200

    net-proxy/haproxy: Bump to 2.9.10 re CVE-2024-45506

    Signed-off-by: Christian Ruppert <idl0r@gentoo.org>

Please always file security bugs for your packages.