This bug was fixed in the package haproxy - 2.8.30-0ubuntu0.24.04.1
---------------
haproxy (2.8.30-0ubuntu0.24.04.1) noble; urgency=medium
* New upstream version (LP: #2153485):
Major bugs fixed:
- mux_quic: fix potential crash on RESET_STREAM receive
- h3: reject H3 truncated frames
- htx: Check the header/trailer length limits when one is updated
- mux_quic: fix leak on RESET_STREAM reception
- ssl/ocsp: lock the OCSP response around reads in the stapling callback
- htx: Don't swap buffers for empty HTX message with an error
- mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in h2c_dec_hdrs()
- http: forbid comma character in authority value
- http-htx: Store new host in a chunk for scheme-based normalization
- slz: always make sure to limit fixed output to less than worst case
literals
- mux-h2: detect incomplete transfers on HEADERS frames as well
- h3: check body size with content-length on empty FIN
- qpack: unchecked length passed to huffman decoder
- fcgi: Fix param decoding by properly checking its size
- resolvers: Properly lowered the names found in DNS response
- stream: Force channel analysis on successful synchronous send
- quic: use ncbmbuf for CRYPTO handling
* Dropped changes:
- d/p/CVE-2026-33555 [upstream in 2.8.20]
- d/p/CVE-2026-55203 [upstream in 2.8.25]
- d/p/CVE-2026-55204 [upstream in 2.8.25]
-- Jonas Jelten <[email protected]> Tue, 06 Oct 2026 16:39:22 +0200
** Changed in: haproxy (Ubuntu Noble)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2153485
Title:
Backport haproxy for stonking cycle
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/haproxy/+bug/2153485/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
