haproxy HTTP/2 HPACK Decoder Vulnerability CVE-2020-11100

[jfqd]

Is there a timeframe for an update of haproxy to fix CVE-2020-11100 [1]?

[1] https://www.haproxy.com/blog/haproxy-1-8-http-2-hpack-decoder-vulnerability-fixed/

[franco]

Yes, 20.1.4 with HAProxy 2.0.14 this week.

Too late, too soon?


Cheers,
Franco

[jfqd]

Thx Franco, perfect! :)

[franco]

Whew, ok 8)

Currently we plan for a Wednesday release.


Cheers,
Franco