UbuntuUpdates.org

Package "haproxy"

Name: haproxy

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • fast and reliable load balancing reverse proxy (HTML documentation)
  • syntax highlighting for HAProxy configuration files
Latest version: 3.2.25-0ubuntu0.26.04.1
Release: resolute (26.04)
Level: proposed
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "haproxy" in Resolute

Repository Area Version
base universe 3.2.9-1ubuntu2
base main 3.2.9-1ubuntu2
security main 3.2.9-1ubuntu2.2
security universe 3.2.9-1ubuntu2.2
updates main 3.2.9-1ubuntu2.2
updates universe 3.2.9-1ubuntu2.2
proposed main 3.2.25-0ubuntu0.26.04.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 3.2.25-0ubuntu0.26.04.1 2026-10-15 12:08:01 UTC

haproxy (3.2.25-0ubuntu0.26.04.1) resolute; urgency=medium

  * New upstream version (LP: #2153485):
    Major bugs fixed:
    - mux_quic: fix potential crash on RESET_STREAM receive
    - h3: reject H3 truncated frames
    - htx: Check the header/trailer length limits when one is updated
    - mux_quic: fix leak on RESET_STREAM reception
    - ssl/ocsp: lock the OCSP response around reads in the stapling callback
    - htx: Don't swap buffers for empty HTX message with an error
    - mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in h2c_dec_hdrs()
    - http: forbid comma character in authority value
    - http-htx: Store new host in a chunk for scheme-based normalization
    - mux-h1: Deal with true 64-bits integer to emit chunks size
    - slz: always make sure to limit fixed output to less than worst case literals
    - sched: protect task->expire on 32-bit platforms
    - mux-h2: detect incomplete transfers on HEADERS frames as well
    - h3: check body size with content-length on empty FIN
    - qpack: unchecked length passed to huffman decoder
    - fcgi: Fix param decoding by properly checking its size
    - resolvers: Properly lowered the names found in DNS response
    - Revert "MEDIUM: mux-quic: add BUG_ON if sending on locally closed QCS"
    - applet: Don't call I/O handler if the applet was shut
    - quic: reject invalid token
    - quic: fix parsing frame type
  * Dropped changes:
    - d/p/CVE-2026-26080: removed [upstream in 3.2.12]
    - d/p/CVE-2026-26081: removed [upstream in 3.2.12]
    - d/p/quic-fix-1: removed [upstream in 3.2.13]
    - d/p/quic-fix-2: removed [upstream in 3.2.13]
    - d/p/CVE-2026-33555: removed [upstream in 3.2.15]
    - d/p/CVE-2026-55203: removed [upstream in 3.2.20]
    - d/p/CVE-2026-55204: removed [upstream in 3.2.20]

 -- Jonas Jelten Thu, 24 Sep 2026 15:18:56 +0200
2153485 Backport haproxy for stonking cycle
CVE-2026-26080 HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are a
CVE-2026-26081 HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.
CVE-2026-33555 An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced conten
CVE-2026-55203 HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer
CVE-2026-55204 HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that


About   -   Send Feedback to @ubuntu_updates