Bugs fixes in "haproxy"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2026-55204 | HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that | 2026-10-15 |
| CVE | CVE-2026-55203 | HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer | 2026-10-15 |
| CVE | CVE-2026-33555 | An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced conten | 2026-10-15 |
| CVE | CVE-2026-26081 | HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected. | 2026-10-15 |
| CVE | CVE-2026-26080 | HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are a | 2026-10-15 |
| Launchpad | 2153485 | Backport haproxy for stonking cycle | 2026-10-15 |
| CVE | CVE-2026-55204 | HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that | 2026-10-15 |
| CVE | CVE-2026-55203 | HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer | 2026-10-15 |
| CVE | CVE-2026-33555 | An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced conten | 2026-10-15 |
| CVE | CVE-2026-26081 | HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected. | 2026-10-15 |
| CVE | CVE-2026-26080 | HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are a | 2026-10-15 |
| Launchpad | 2153485 | Backport haproxy for stonking cycle | 2026-10-15 |
| CVE | CVE-2026-55204 | HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that | 2026-10-14 |
| CVE | CVE-2026-55203 | HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer | 2026-10-14 |
| CVE | CVE-2026-33555 | An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced conten | 2026-10-14 |
| Launchpad | 2153485 | Backport haproxy for stonking cycle | 2026-10-14 |
| CVE | CVE-2026-55204 | HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that | 2026-10-14 |
| CVE | CVE-2026-55203 | HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer | 2026-10-14 |
| CVE | CVE-2026-33555 | An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced conten | 2026-10-14 |
| Launchpad | 2153485 | Backport haproxy for stonking cycle | 2026-10-14 |
About
-
Send Feedback to @ubuntu_updates
