Merge pull request #250 from cloudfoundry-incubator/haproxy-2.4.4

Update haproxy to 2.4.4
cloudfoundry · Sep 10, 2021 · 2b03e07 · 2b03e07
2 parents e7d7af3 + 781af87
commit 2b03e07
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 6 deletions.
diff --git a/ci/release_notes.md b/ci/release_notes.md
@@ -0,0 +1,7 @@
+# Upgrades
+
+- `haproxy` has been upgraded to v2.4.4 from v2.4.2 to mitigate CVE-2021-40346
+
+# Acknowledgements
+
+Thanks @peterellisjones/@plowin for the PR / fixes!
diff --git a/config/blobs.yml b/config/blobs.yml
@@ -1,7 +1,7 @@
-haproxy/haproxy-2.4.2.tar.gz:
-  size: 3579220
-  object_id: 691e9f87-7bbd-4d80-6ee4-b9410745cda3
-  sha: sha256:edf9788f7f3411498e3d7b21777036b4dc14183e95c8e2ce7577baa0ea4ea2aa
+haproxy/haproxy-2.4.4.tar.gz:
+  size: 3587306
+  object_id: 5ff07959-cb68-4de2-59c1-d9886ca1d8a6
+  sha: sha256:116b7329cebee5dab8ba47ad70feeabd0c91680d9ef68c28e41c34869920d1fe
 haproxy/hatop:
   size: 72445
   object_id: 17a5f66c-bbc1-4e4d-681c-e36420d3e0f5

diff --git a/packages/haproxy/packaging b/packages/haproxy/packaging
@@ -10,8 +10,8 @@ PCRE_VERSION=10.37
 # http://www.dest-unreach.org/socat/download/socat-1.7.4.1.tar.gz
 SOCAT_VERSION=1.7.4.1
 
-# http://www.haproxy.org/download/2.4/src/haproxy-2.4.2.tar.gz
-HAPROXY_VERSION=2.4.2
+# http://www.haproxy.org/download/2.4/src/haproxy-2.4.4.tar.gz
+HAPROXY_VERSION=2.4.4
 
 mkdir ${BOSH_INSTALL_TARGET}/bin