Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 2099744

Summary:	[OCP 4.8] Request for update to haproxy 2.2.17 to solve major bug with path
Product:	OpenShift Container Platform	Reporter:	Pamela Escorza <pescorza>
Component:	Networking	Assignee:	aos-network-edge-staff <aos-network-edge-staff>
Networking sub component:	router	QA Contact:	Hongan Li <hongli>
Status:	CLOSED DUPLICATE	Docs Contact:
Severity:	urgent
Priority:	unspecified	CC:	amcdermo, aos-bugs
Version:	4.8
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	All
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-06-21 16:24:11 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Pamela Escorza 2022-06-21 15:36:13 UTC

Description of problem:
Customer has upgrade from ocp 4.6.42 to 4.8.39 and is facing the haproxy bug: 

  . BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  . https://github.com/haproxy/haproxy/commit/4b8852c70d8c4b7e225e24eb58258a15eb54c26e

OpenShift release version:
OCP 4.8.39
HA-Proxy version 2.2.13-5f3eb59 2021/04/02 - https://haproxy.org/




Actual results:
https://xxxxxx.corp//?authenticationType=....

Expected results:
https://xxxxxx.corp/?authenticationType=....

Impact of the problem:
This is impacting a critical environment for the client which where the development operations was working as expected and is not possible to modified.  

Additional info:
Is it possible to provide a workaround for this issue please?

Comment 1 Andrew McDermott 2022-06-21 16:24:11 UTC

This is a duplicate of https://bugzilla.redhat.com/show_bug.cgi?id=2088539.
That bug fixed a CVE. We cannot undo the CVE fix.

*** This bug has been marked as a duplicate of bug 2088539 ***