HAProxy 3.0.3 Release Notes: UAF, Race Condition, and Crash Fixes

From this webpage screenshot, we can extract the following key information about the vulnerability: 1. Version Information: - This version is 3.0.3, which is a released stable version. 2. Vulnerability List: - BUG/MINOR: - log: fix broken '+bin' logformat node option - hlua: distinguish burst timeout errors from exec timeout errors - REGTESTS: ssl: fix some regtests 'feature cmd' start condition - proxy: fix email-alert invalid free - configuration: fix alphabetical order of bind options - management: document ptr lookup for table commands - quic: fix padding with short packets - scripts: do not truncate git-show output - h3: fix crash on STOP_SENDING receive after GOAWAY emission - mux-quic: fix crash on qcs SD alloc failure - h3: fix BUG_ON() crash on control stream alloc failure - quic: fix BUG_ON() on Tx pkt alloc failure - flags/show-fd-to-flags: adapt to recent versions - hlua: report proper context upon error in hlua cli io_handler_fct() - stick-table: Decrement the ref count inside lock to kill a session - configuration: add details about crt-store in bind "crt" keyword - server: fix first server template name lookup UAF - activity: make the memory profiling hash size configurable at build time - server/dns: prevent DOWN/UP flap upon resolution timeout or error - h3: ensure the ":method" pseudo header is totally valid - h3: ensure the ":scheme" pseudo header is totally valid - quic: fix race-condition in quic_get_cid_tid() - quic: fix race-condition in qc_check_dcid() - quic: fix possible exit from qc_check_dcid() without unlocking - promex: Remove Help prefix repeated twice for each metric - hlua/cli: Fix lua CLI commands to work with apple's buffers - configuration: more details about the master-worker mode - server: fix race on server atomic sync() - jwt: don't try to load files with HMAC algorithm - init: set default for fd_hard_limit via DEFAULT_MAXFD - configuration: update maxconn description - peers: Fix crash when syncing learn state of a peer without appctx - Revert "MEDIUM: init: set default for fd_hard_limit via DEFAULT_MAXFD" - jwt: fix variable initialisation - h1: Fail to parse empty transfer coding names - h1: Reject empty coding name as last transfer-encoding value - h1: Reject empty Transfer-encoding header - spoe: Be sure to create a SPOE applet if none on the current thread - flags/quic: decode quic conn flags - bwlim: Be sure to never set the analyze expiration date in past These vulnerability details comprehensively list various bugs and security issues fixed in version 3.0.3, including but not limited to log formatting, Lua scripts, SSL testing, proxy, configuration, management, QUIC protocol, DNS server, activity, server, JWT, initialization, peer synchronization, configuration, server synchronization, JWT initialization, HTTP header parsing, SPOE, QUIC connection, bandwidth limiting, etc.

Goal Reached Thanks to every supporter — we hit 100%!

HAProxy 3.0.3 Release Notes: UAF, Race Condition, and Crash Fixes