[ubuntu/raring-proposed] haproxy 1.4.18-0ubuntu3 (Accepted)

[Marc Deslauriers]

haproxy (1.4.18-0ubuntu3) raring; urgency=low

  * SECURITY UPDATE: denial of service and possible arbitrary code
    execution via non-default global.tune.bufsize.
    - debian/patches/CVE-2012-2942.patch: check buffer sizes in
      include/types/global.h, src/acl.c, src/cfgparse.c, src/checks.c,
      src/dumpstats.c, src/haproxy.c, src/proto_http.c,
      tests/0000-debug-stats.diff.
    - CVE-2012-2942
  * SECURITY UPDATE: denial of service via HTTP information in tcp-request
    - debian/patches/CVE-2013-1912.patch: properly handle buffers in
      src/proto_http.c.
    - CVE-2013-1912

Date: Fri, 05 Apr 2013 10:12:47 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/raring/+source/haproxy/1.4.18-0ubuntu3
-------------- next part --------------
Format: 1.8
Date: Fri, 05 Apr 2013 10:12:47 -0400
Source: haproxy
Binary: haproxy
Architecture: source
Version: 1.4.18-0ubuntu3
Distribution: raring
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 haproxy    - fast and reliable load balancing reverse proxy
Changes: 
 haproxy (1.4.18-0ubuntu3) raring; urgency=low
 .
   * SECURITY UPDATE: denial of service and possible arbitrary code
     execution via non-default global.tune.bufsize.
     - debian/patches/CVE-2012-2942.patch: check buffer sizes in
       include/types/global.h, src/acl.c, src/cfgparse.c, src/checks.c,
       src/dumpstats.c, src/haproxy.c, src/proto_http.c,
       tests/0000-debug-stats.diff.
     - CVE-2012-2942
   * SECURITY UPDATE: denial of service via HTTP information in tcp-request
     - debian/patches/CVE-2013-1912.patch: properly handle buffers in
       src/proto_http.c.
     - CVE-2013-1912
Checksums-Sha1: 
 0a833c3d2d163f7d305dc377d47b3430e2ecd2c5 1887 haproxy_1.4.18-0ubuntu3.dsc
 c483df76299418db269c5b66c8d9aba8cbe1951e 13512 haproxy_1.4.18-0ubuntu3.debian.tar.gz
Checksums-Sha256: 
 1b9057ce29f20594620d2df3c42806375640c149f175913bb5b06dc96cab5083 1887 haproxy_1.4.18-0ubuntu3.dsc
 e5dc7b05b290be2c96c4f00732b3c50379810a6f170bc4856b752f4c28d601a9 13512 haproxy_1.4.18-0ubuntu3.debian.tar.gz
Files: 
 c33af387a1caee05afc3dd2765dd5cd9 1887 net optional haproxy_1.4.18-0ubuntu3.dsc
 137a1449c9302a124e780db662a25823 13512 net optional haproxy_1.4.18-0ubuntu3.debian.tar.gz
Original-Maintainer: Christo Buschek <crito at 30loops.net>