First published: Wed Apr 20 2022(Updated: )
Red Hat OpenShift Container Platform is Red Hat's cloud computing<br>Kubernetes application platform solution designed for on-premise or private<br>cloud deployments.<br>See the following advisory for the container images for this release:<br><a href="https://access.redhat.com/errata/RHBA-2022:1337" target="_blank">https://access.redhat.com/errata/RHBA-2022:1337</a> Security Fix(es):<br><li> haproxy: Denial of service via set-cookie2 header (CVE-2022-0711)</li> For more details about the security issue(s), including the impact, a CVSS<br>score, acknowledgments, and other related information, refer to the CVE<br>page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/haproxy | <2.0.19-3.el8 | 2.0.19-3.el8 |
redhat/haproxy-debugsource | <2.0.19-3.el8 | 2.0.19-3.el8 |
redhat/haproxy20 | <2.0.19-3.el8 | 2.0.19-3.el8 |
redhat/haproxy20-debuginfo | <2.0.19-3.el8 | 2.0.19-3.el8 |
redhat/haproxy | <2.0.19-3.el7 | 2.0.19-3.el7 |
redhat/haproxy-debuginfo | <2.0.19-3.el7 | 2.0.19-3.el7 |
redhat/haproxy20 | <2.0.19-3.el7 | 2.0.19-3.el7 |
redhat/haproxy-debugsource | <2.0.19-3.el8 | 2.0.19-3.el8 |
redhat/haproxy20 | <2.0.19-3.el8 | 2.0.19-3.el8 |
redhat/haproxy20-debuginfo | <2.0.19-3.el8 | 2.0.19-3.el8 |
redhat/haproxy-debugsource | <2.0.19-3.el8 | 2.0.19-3.el8 |
redhat/haproxy20 | <2.0.19-3.el8 | 2.0.19-3.el8 |
redhat/haproxy20-debuginfo | <2.0.19-3.el8 | 2.0.19-3.el8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2022:1336 is classified as important.
To address RHSA-2022:1336, upgrade the affected haproxy packages to version 2.0.19-3.el8 or 2.0.19-3.el7 as applicable.
The affected packages include haproxy, haproxy-debugsource, haproxy20, and haproxy20-debuginfo.
Yes, fixes are available for both el7 and el8 versions of the affected packages.
If immediate updates cannot be applied, ensure that your system is monitored for any unusual activities until the patch is applied.