[Git][security-tracker-team/security-tracker][master] Mark the two haproxy TEMP issues fixed in bookworm by DLA-4842-1

[Santiago R.R. (@santiago)]

Santiago R.R. pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e2849d3a by Santiago Ruano Rincón at 2026-10-18T11:41:24-03:00
Mark the two haproxy TEMP issues fixed in bookworm by DLA-4842-1

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2713,12 +2713,14 @@ CVE-2025-29895 (A NULL pointer dereference vulnerability has been reported to af
 CVE-2026-XXXX [BUG/MAJOR: mux-h2: properly handle short reads on PING frames]
 	- haproxy 3.2.26-1
 	[trixie] - haproxy 3.0.11-1+deb13u4
+	[bookworm] - haproxy 2.6.12-1+deb12u4
 	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=dc338d875ec907f18143ee369552658b750b7297 (v3.2.16)
 	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.0.git;a=commit;h=560f1019e55838187435f120b562fd66ce880303 (v3.0.30)
 	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=0914283029749ef172ca0b1063c29999dcf8cd79 (v2.6.35)
 CVE-2026-XXXX [BUG/MAJOR: h1-htx: report an error on a too long chunk-size line]
 	- haproxy 3.2.26-1
 	[trixie] - haproxy 3.0.11-1+deb13u4
+	[bookworm] - haproxy 2.6.12-1+deb12u4
 	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.2.git;a=commit;h=a5f625bd1bc433d0d1d44d28f7b0789f79ae60c0 (v3.2.26)
 	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-3.0.git;a=commit;h=fd0864b83920851eeaaa0dd934bfebc82ba6ca27 (v3.0.30)
 	NOTE: Fixed by: https://git.haproxy.org/?p=haproxy-2.6.git;a=commit;h=68609955873ff845220b7a7cf22147d3617a0b42 (v2.6.35)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e2849d3a6ed684b85afa392e9e50e17c910138c1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e2849d3a6ed684b85afa392e9e50e17c910138c1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261018/1e2e58d6/attachment.htm>