This update for haproxy fixes the following issue:
- h1-htx: report an error on a too long chunk-size line (bsc#1285046).
Changes for haproxy:
- Otel Update to version 2.3.0+git2.b031728:
* DOC: otel: added a security policy to the repository
* MINOR: otel: test: added a test with an optional upstream context
* VERSION: otel: bumped filter version to 2.3.0
* DOC: otel: shortened the repeated passages of the implementation guide
* BUG/MINOR: otel: left a baggage pair out when its sample yielded nothing
* DOC: otel: completed the stream stop notes and the function reference
* DOC: otel: added the load-time warnings and missing rules t
This update for haproxy fixes the following issues
- Update to version 3.2.21+git0.dbe43be37
- CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557).
- CVE-2026-55204: null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c (bsc#1268558).
This update for haproxy fixes the following issues:
Security issue:
- CVE-2026-33555: Request smuggling via HTTP/3 parser desynchronization (bsc#1262103).
- bug in SLZ compression (bsc#1261626).
This update for haproxy fixes the following issues:
- Update to version 3.2.12+git0.6011f448e
- CVE-2026-26081: Fixed a DOS vulnerability in QUIC. (bsc#1257976)
- CVE-2026-26080: Fixed a DOS vulnerability in QUIC. (bsc#1257976)
This update for haproxy fixes the following issues:
- CVE-2025-11230: issue in the mjson JSON decoder leads to excessive resource consumption when processing numbers with
large exponents (bsc#1250983).