[Git][security-tracker-team/security-tracker][master] Reserve DSA numer for haproxy update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun Oct 18 13:29:01 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
0e212c28 by Salvatore Bonaccorso at 2026-10-18T14:28:28+02:00
Reserve DSA numer for haproxy update
- - - - -
3 changed files:
- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -2707,11 +2707,13 @@ CVE-2025-29895 (A NULL pointer dereference vulnerability has been reported to af
NOT-FOR-US: QNAP
CVE-2026-XXXX [BUG/MAJOR: mux-h2: properly handle short reads on PING frames]
- haproxy 3.2.26-1
+ [trixie] - haproxy 3.0.11-1+deb13u4
NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=dc338d875ec907f18143ee369552658b750b7297 (v3.2.16)
NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.0.git;a=commit;h=560f1019e55838187435f120b562fd66ce880303 (v3.0.30)
NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=0914283029749ef172ca0b1063c29999dcf8cd79 (v2.6.35)
CVE-2026-XXXX [BUG/MAJOR: h1-htx: report an error on a too long chunk-size line]
- haproxy 3.2.26-1
+ [trixie] - haproxy 3.0.11-1+deb13u4
NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=a5f625bd1bc433d0d1d44d28f7b0789f79ae60c0 (v3.2.26)
NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.0.git;a=commit;h=fd0864b83920851eeaaa0dd934bfebc82ba6ca27 (v3.0.30)
NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=68609955873ff845220b7a7cf22147d3617a0b42 (v2.6.35)
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,5 @@
+[18 Oct 2026] DSA-6570-1 haproxy - security update
+ [trixie] - haproxy 3.0.11-1+deb13u4
[18 Oct 2026] DSA-6567-2 cifs-utils - regression update
[trixie] - cifs-utils 2:7.4-1+deb13u2
[16 Oct 2026] DSA-6569-1 apache2 - security update
=====================================
data/dsa-needed.txt
=====================================
@@ -57,9 +57,6 @@ graphicsmagick
--
gst-plugins-good1.0 (jmm)
--
-haproxy (carnil)
- Maintainer is preparing an update <428c92ce-ed43-401a-a604-5e3d50344d23 at debian.org>
---
hplip
security patches first need to be isolated
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0e212c2846a2150fc71f208c170836ec663c86fc
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0e212c2846a2150fc71f208c170836ec663c86fc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261018/f711615c/attachment.htm>
More information about the debian-security-tracker-commits
mailing list