From 72e6d54d4eb582c444cfd6768719ea92a0a7a94a Mon Sep 17 00:00:00 2001 From: Ryan O'Hara Date: Thu, 16 Feb 2023 09:01:05 -0600 Subject: [PATCH] Update to 2.7.3 (#2154925) --- haproxy.spec | 9 +++++++-- sources | 2 +- 2 files changed, 8 insertions(+), 3 deletions(-) diff --git a/haproxy.spec b/haproxy.spec index 2048b22..138e960 100644 --- a/haproxy.spec +++ b/haproxy.spec @@ -7,8 +7,8 @@ %global _hardened_build 1 Name: haproxy -Version: 2.7.0 -Release: 2%{?dist} +Version: 2.7.3 +Release: 1%{?dist} Summary: HAProxy reverse proxy for high availability environments License: GPLv2+ @@ -127,6 +127,11 @@ done %{_sysusersdir}/%{name}.conf %changelog +* Wed Feb 15 2023 Ryan O'Hara - 2.7.3-1 +- Update to 2.7.3 (#2154925) +- Reject invalid response header (CVE-2023-0056, #2161138) +- Fix request smuggling attack (CVE-2023-25725, #2169823) + * Thu Jan 19 2023 Fedora Release Engineering - 2.7.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild diff --git a/sources b/sources index 6c497de..fe842f8 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (haproxy-2.7.0.tar.gz) = cc2eb49c6055cca1d4744cb715d43048621e3078b2621cc104b3e54671f6b9a0a530c0c044c23e4cbd276f3d792bfa46d88bf034c777a671dc49ace0777829ad +SHA512 (haproxy-2.7.3.tar.gz) = f9eeee2d232fd2f4da1959e9265dd6abe6c6182109a0455d4f868a516e78cc6ea67e8456d5bc26e439385d17f52e4b179d7c615bacf15aeae901ab8e172dc758