[Git][security-tracker-team/security-tracker][master] haproxy: triage for LTS and add to dla-needed.txt

[Carlos Henrique Lima Melara (@charles)]

Carlos Henrique Lima Melara pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4063d522 by Carlos Henrique Lima Melara at 2026-10-17T00:00:38-03:00
haproxy: triage for LTS and add to dla-needed.txt

Add references for fixes in upstream 2.6.x branch.

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -2252,10 +2252,12 @@ CVE-2026-XXXX [BUG/MAJOR: mux-h2: properly handle short reads on PING frames]
 	- haproxy 3.2.26-1
 	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=dc338d875ec907f18143ee369552658b750b7297 (v3.2.16)
 	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.0.git;a=commit;h=560f1019e55838187435f120b562fd66ce880303 (v3.0.30)
+	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=0914283029749ef172ca0b1063c29999dcf8cd79 (v2.6.35)
 CVE-2026-XXXX [BUG/MAJOR: h1-htx: report an error on a too long chunk-size line]
 	- haproxy 3.2.26-1
 	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=a5f625bd1bc433d0d1d44d28f7b0789f79ae60c0 (v3.2.26)
 	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.0.git;a=commit;h=fd0864b83920851eeaaa0dd934bfebc82ba6ca27 (v3.0.30)
+	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=68609955873ff845220b7a7cf22147d3617a0b42 (v2.6.35)
 CVE-2026-97629 (Description When NGINX Plus or NGINX Open Source is configured withssl ...)
 	- nginx 1.30.4-8
 	NOTE: https://my.f5.com/manage/s/article/K000162606


=====================================
data/dla-needed.txt
=====================================
@@ -270,6 +270,10 @@ graphicsmagick
 gvfs
   NOTE: 20260919: Added by Front-Desk (Beuc)
 --
+haproxy
+  NOTE: 20261016: Added by Front-Desk (charles)
+  NOTE: 20261016: In dsa-needed.txt, sync with secteam or follow DSA (charles)
+--
 hplip (Thorsten Alteholz)
   NOTE: 20260925: Added by Front-Desk (ta)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4063d522d09b696850d2596cadd4ba2bfe6e6201

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4063d522d09b696850d2596cadd4ba2bfe6e6201
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/309d8196/attachment.htm>