Package: haproxy; Maintainer for haproxy is (unknown); Source for haproxy is src:haproxy.
Reported by: gr0 bUst4 <bUst4gr0@riseup.net>
Date: Mon, 28 Oct 2024 10:38:01 UTC
Severity: normal
Tags: debian
🔗 View this message in rfc822 format
X-Loop: owner@bugs.devuan.org
Subject: bug#863: [devuan-dev] bug#863: haproxy forward upgrade and connection headers as default (h2c request smuggling)
Reply-To: Mark Hindley <mark@hindley.org.uk>, 863@bugs.devuan.org
Resent-From: Mark Hindley <mark@hindley.org.uk>
Resent-To: devuan-bugs@lists.dyne.org
Resent-CC: devuan-dev@lists.dyne.org
X-Loop: owner@bugs.devuan.org
Resent-Date: Mon, 28 Oct 2024 19:50:27 +0000
Resent-Message-ID: <handler.863.B863.17301437654083@bugs.devuan.org>
Resent-Sender: owner@bugs.devuan.org
X-Devuan-PR-Message: followup 863
X-Devuan-PR-Package: haproxy
X-Devuan-PR-Keywords:
References: <20241028060840.GA6398@haproxy.com> <33a6301a-2146-4b07-921e-724a2432c796@riseup.net> <33a6301a-2146-4b07-921e-724a2432c796@riseup.net>
Received: via spool by 863-submit@bugs.devuan.org id=B863.17301437654083
(code B ref 863); Mon, 28 Oct 2024 19:50:27 +0000
Received: (at 863) by bugs.devuan.org; 28 Oct 2024 19:29:25 +0000
Delivered-To: bugs@devuan.org
Received: from email.devuan.org [2a01:4f9:fff1:13::5fd9:f9e4]
by doc.devuan.org with IMAP (fetchmail-6.4.16)
for <debbugs@localhost> (single-drop); Mon, 28 Oct 2024 19:29:25 +0000 (UTC)
Received: from email.devuan.org
by email.devuan.org with LMTP
id cGctGb7lH2cYTwAAmSBk0A
(envelope-from <mark@hindley.org.uk>)
for <bugs@devuan.org>; Mon, 28 Oct 2024 19:27:58 +0000
Received: by email.devuan.org (Postfix, from userid 109)
id 496464E; Mon, 28 Oct 2024 19:27:58 +0000 (UTC)
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on email.devuan.org
X-Spam-Level:
X-Spam-Status: No, score=0.4 required=5.0 tests=RDNS_DYNAMIC,SPF_PASS,
T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=193.36.131.86; helo=mx.hindley.org.uk; envelope-from=mark@hindley.org.uk; receiver=<UNKNOWN>
Received: from mx.hindley.org.uk (193-36-131-86.cfwn.uk [193.36.131.86])
by email.devuan.org (Postfix) with ESMTPS id 9E0EF4E
for <863@bugs.devuan.org>; Mon, 28 Oct 2024 19:27:57 +0000 (UTC)
Received: from hindley.org.uk (apollo.hindleynet [192.168.1.3])
by mx.hindley.org.uk (Postfix) with SMTP id 1AFC78E;
Mon, 28 Oct 2024 19:27:56 +0000 (GMT)
Received: (nullmailer pid 14421 invoked by uid 1000);
Mon, 28 Oct 2024 19:27:55 -0000
Date: Mon, 28 Oct 2024 19:27:55 +0000
From: Mark Hindley <mark@hindley.org.uk>
To: gr0 bUst4 <bUst4gr0@riseup.net>, 863@bugs.devuan.org
Message-ID: <Zx_lu6Jvglox9Snv@hindley.org.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <33a6301a-2146-4b07-921e-724a2432c796@riseup.net>
Send a report that this bug log contains spam.
Devuan BTS -- Powered by Debian bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.
Devuan Bugs Owner <owner@bugs.devuan.org>.
Last modified:
Thu Oct 31 05:21:18 2024;