Fixes the following security issues: - CVE-2021-40346: An integer overflow exists in HAProxy 2.0 through 2.5 in the htx_add_header() can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all configured http-request HAProxy ACLs and possibly other ACLs. For more details, see the advisory: https://www.mail-archive.com/haproxy@formilux.org/msg41114.html Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
7 lines
448 B
Plaintext
7 lines
448 B
Plaintext
# From: http://www.haproxy.org/download/2.2/src/haproxy-2.2.17.tar.gz.sha256
|
|
sha256 68af4aa3807d9c9f29b976d0ed57fb2e06acf7a185979059584862cc20d85be0 haproxy-2.2.17.tar.gz
|
|
# Locally computed:
|
|
sha256 0717ca51fceaa25ac9e5ccc62e0c727dcf27796057201fb5fded56a25ff6ca28 LICENSE
|
|
sha256 5df07007198989c622f5d41de8d703e7bef3d0e79d62e24332ee739a452af62a doc/lgpl.txt
|
|
sha256 ddb9db7630752f8fdc6898f7c99a99eaeeac5213627ecb093df9c82f56175dc7 doc/gpl.txt
|