[Git][security-tracker-team/security-tracker][master] Reserve DSA numer for haproxy update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun Oct 18 13:29:01 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0e212c28 by Salvatore Bonaccorso at 2026-10-18T14:28:28+02:00
Reserve DSA numer for haproxy update

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -2707,11 +2707,13 @@ CVE-2025-29895 (A NULL pointer dereference vulnerability has been reported to af
 	NOT-FOR-US: QNAP
 CVE-2026-XXXX [BUG/MAJOR: mux-h2: properly handle short reads on PING frames]
 	- haproxy 3.2.26-1
+	[trixie] - haproxy 3.0.11-1+deb13u4
 	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=dc338d875ec907f18143ee369552658b750b7297 (v3.2.16)
 	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.0.git;a=commit;h=560f1019e55838187435f120b562fd66ce880303 (v3.0.30)
 	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=0914283029749ef172ca0b1063c29999dcf8cd79 (v2.6.35)
 CVE-2026-XXXX [BUG/MAJOR: h1-htx: report an error on a too long chunk-size line]
 	- haproxy 3.2.26-1
+	[trixie] - haproxy 3.0.11-1+deb13u4
 	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=a5f625bd1bc433d0d1d44d28f7b0789f79ae60c0 (v3.2.26)
 	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.0.git;a=commit;h=fd0864b83920851eeaaa0dd934bfebc82ba6ca27 (v3.0.30)
 	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=68609955873ff845220b7a7cf22147d3617a0b42 (v2.6.35)


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,5 @@
+[18 Oct 2026] DSA-6570-1 haproxy - security update
+	[trixie] - haproxy 3.0.11-1+deb13u4
 [18 Oct 2026] DSA-6567-2 cifs-utils - regression update
 	[trixie] - cifs-utils 2:7.4-1+deb13u2
 [16 Oct 2026] DSA-6569-1 apache2 - security update


=====================================
data/dsa-needed.txt
=====================================
@@ -57,9 +57,6 @@ graphicsmagick
 --
 gst-plugins-good1.0 (jmm)
 --
-haproxy (carnil)
-  Maintainer is preparing an update <428c92ce-ed43-401a-a604-5e3d50344d23 at debian.org>
---
 hplip
   security patches first need to be isolated
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0e212c2846a2150fc71f208c170836ec663c86fc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0e212c2846a2150fc71f208c170836ec663c86fc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261018/f711615c/attachment.htm>


More information about the debian-security-tracker-commits mailing list