977997 – (CVE-2016-3711) VUL-0: CVE-2016-3711: haproxy: Setting cookie containing internal IP address of a pod

Bug 977997 (CVE-2016-3711) - VUL-0: CVE-2016-3711: haproxy: Setting cookie containing internal IP address of a pod

Summary: VUL-0: CVE-2016-3711: haproxy: Setting cookie containing internal IP address ...

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Sebastian Krahmer 2016-05-02 08:24:37 UTC

rh#1322718



References:
https://bugzilla.redhat.com/show_bug.cgi?id=1322718
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-3711

Comment 2 Kristoffer Gronlund 2016-05-02 08:59:08 UTC

This is not a bug in haproxy, this is a bug in openshift.

Here is the fix for it in openshift: https://github.com/openshift/origin/pull/8334