We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.6.8, 2.7 before 2.7.1. There are 5 bytes left uninitialized in the connection buffer when encoding the FCGI_BEGIN_REQUEST record. Sensitive data may be disclosed to configured FastCGI backends in an unexpected way.
Reserved 2023-02-14 | Published 2023-03-29 | Updated 2025-02-18 | Assigner redhatgit.haproxy.org/?p=haproxy.git%3Ba=commitdiff%3Bh=2e6bf0a
www.debian.org/security/2023/dsa-5388 (DSA-5388)
Support options
