openSUSE-SU-2026:22162-1

openSUSE-SU-2026:22162-1 · Security update for haproxy

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

This update for haproxy fixes the following issue: - h1-htx: report an error on a too long chunk-size line (bsc#1285046). Changes for haproxy: - Otel Update to version 2.3.0+git2.b031728: * DOC: otel: added a security policy to the repository * MINOR: otel: test: added a test with an optional upstream context * VERSION: otel: bumped filter version to 2.3.0 * DOC: otel: shortened the repeated passages of the implementation guide * BUG/MINOR: otel: left a baggage pair out when its sample yielded nothing * DOC: otel: completed the stream stop notes and the function reference * DOC: otel: added the load-time warnings and missing rules to the guides * DOC: otel: corrected stale statements across the guides and notes * DOC: otel: corrected and completed the keyword guides * CLEANUP: otel: marked the code that cannot run with a NOTE comment * CLEANUP: otel: described the invalid-character check modes * MINOR: otel: checked the context field key against the W3C rules * DOC: otel: added an overview of the tests * MINOR: otel: reported the event pairings on the line that completes them * MINOR: otel: warned about an otel-scope that never runs * MINOR: otel: enforced the root span rules * MINOR: otel: validated the span and context names of every reference * MINOR: otel: enforced the rules of the inject and extract context names * MINOR: otel: bound the instrument lines of one name to a single owner * MINOR: otel: let a key repeat once per condition, first match applied * MINOR: otel: gave the 'link' keyword a condition and let it repeat * MINOR: otel: allowed the 'otel-stop' keyword to be repeated * MINOR: otel: ended a sample list at a repeated clause of the same line * MINOR: otel: separated a repeated span line from a redefinition * MINOR: otel: checked the metric instrument line against the SDK rules * MINOR: otel: allowed each otel-instrumentation keyword only once * MINOR: otel: required the configuration to live inside an OTel scope * MINOR: otel: allowed the configuration sections in any order * MINOR: otel: rejected a bare 'if' or 'unless' with no ACL term * MINOR: otel: made an ACL name unique within its section * BUG/MINOR: otel: allowed a condition to mix ACLs from the three lists * MINOR: otel: refused the reserved words as names and limited the length * MINOR: otel: named the sample key where the value stands on its own * BUG/MINOR: otel: read the whole filter line before its configuration * BUG/MINOR: otel: allowed a repeated sample expression in one value * BUG/MINOR: otel: stopped measuring a sample expression as a name * BUG/MINOR: otel: named the 'config' keyword in its own parse error * CLEANUP: otel: compared the baggage carrier key without case folding * CLEANUP: otel: replaced the word 'verbatim' in the comments and guides * CLEANUP: otel: added the entry traces to the functions that lacked them * CLEANUP: otel: collected the repeated error messages into macros * MINOR: otel: test: added the configuration parser test * DOC: otel: added the keyword definition rules and updated the guides * CLEANUP: otel: replaced the word 'gate' in the comments and guides * MINOR: otel: warned about the events the filter placement never fires * BUG/MINOR: otel: kept a backend filter from re-running the frontend rules * BUG/MINOR: otel: fired on-server-unavailable when no server was reached * BUG/MINOR: otel: armed the idle timer for a filter of a backend section * MINOR: otel: required every otel-group to be named on a 'groups' line * BUG/MINOR: otel: cleared the section state after an aborted parse * BUG/MINOR: otel: gave the events that run on no channel a usable direction * CLEANUP: otel: used the span event dump macro where the events are handled * MINOR: otel: checked 'extract use-headers' against the scope event * BUG/MINOR: otel: kept the session alive when a root scope is skipped * CLEANUP: otel: collected the session disabling into one function * LICENSE: otel: added the LICENSE file and moved the headers to the GPL * MINOR: otel: added a sampler level to the speed test * MINOR: otel: evaluated the samples in a trash buffer * MEDIUM: otel: skipped the samples of a span that records nothing - Update to version 3.4.7+git0.8872a2604: * [RELEASE] Released version 3.4.7 * BUG/MAJOR: h1-htx: report an error on a too long chunk-size line (bsc#1285046) * BUG/MAJOR: mux-h2: properly handle short reads on PING frames * BUG/MINOR: cfgparse-global: only warn when "localpeer" is set together with -L * REGTEST: ssl: require OpenSSL 1.1.1 for crt-list ciphersuites tests * REGTESTS: http-messaging: Fix http_fail_cnt_body to succeed with small timeouts * BUG/MEDIUM: mux-h1: only accept the H2 preface on the first request * BUG/MINOR: http-fetch: don't report pseudo-headers in TCP mode * BUG/MEDIUM: mux-h1: also release the embryonic stream when the error is empty * BUG/MEDIUM: mux-h2: fix a possible crash on rxbuf allocation failure * BUG/MEDIUM: mux-h2: report a dead rhttp connection in h2_wake() * BUG/MEDIUM: mux-h1: don't pass an upgraded connection to traces in h1s_destroy() * BUG/MEDIUM: mux-fcgi: don't return a freed tasklet from fcgi_deferred_shut() * BUG/MEDIUM: mux-h2: don't return a freed tasklet from h2_deferred_shut() * BUG/MINOR: hlua: assume proxy_find_by_id() may return NULL on previously existing server * BUG/MINOR: spoe: Fix the message list splice with an empty list * REGTESTS: log: check that a log-forward TCP session ends on client close * BUG/MEDIUM: log: do not ignore the peer's shutdown in the syslog applet * REGTESTS: cli: test a command line of exactly tune.bufsize bytes * BUG/MEDIUM: cli: fix the last command detection on a full command line * BUG/MINOR: cfgparse-listen: complete the list of options for the suggestions * BUG/MINOR: proxy: also look for the closest option among cfg_opts3 * BUG/MINOR: cfgparse-listen: properly reject extra args in a backend section * BUG/MINOR: cfgparse-listen: fix quoting of the condition conflict warning * BUG/MINOR: cfgparse-listen: fix the argument checked by "email-alert" * BUG/MINOR: cfgparse-listen: release the previous description of the proxy * BUG/MINOR: cfgparse-global: add missing calloc() check for the global description * BUG/MINOR: cfgparse-global: add missing gotos to error label in max-spread-checks * BUG/MAJOR: cfgparse: properly check userlist section when scanning keywords * MINOR: doc: elaborate on diagnostic mode behavior * BUG/MINOR: ssl: Fix potential NULL-deref in "dump ssl cert" with AWS-LC * BUG/MINOR: h3: reject RS/SS for QPACK uni streams * BUG/MINOR: h3: close connection on GOAWAY frame too long * BUG/MINOR: h3: reject frames with truncated header * BUG/MINOR: mux_quic: extend FINAL_SIZE_ERROR detection on stream * BUG/MINOR: ssl: use standard names for X25519 and X448 groups * BUG/MEDIUM: listener: Consider maxconn before waking listeners * BUG/MEDIUM: ssl: crt-list curves ignored with AWS-LC * BUG/MEDIUM: ssl: crt-list ciphers ignored with AWS-LC * BUG/MINOR: ssl: fix trace crash on BE conn release in io cb * BUG/MINOR: ssl: fix trace crash on FE conn release in io cb * BUG/MINOR: hq-interop: prevent double EOM on request with standalone FIN * BUG/MINOR: log: fix erroneous error message in log-steps parser * MINOR: http-ana: automatically enable http-no-delay for streaming events (SSE) * BUG/MINOR: cli: update wait help usage * BUG/MINOR: server: fix "del server" description * BUG/MINOR: proxy: add PR_CAP_LB for dynamically added backend * DOC: config: mention that url_ip and url_port fail when passed a name * DOC: config: fix doc for hex2i() converter on unparsable input * DOC: config: mention other responses not blocked by option checkcache * BUG/MINOR: sample: return the decoded JWT part when no path is given * BUG/MEDIUM: tcpcheck: do not run a regex on an unallocated buffer * BUG/MINOR: http-fetch: do not count Set-Cookie attributes as cookies * BUG/MINO

Correctif disponible

Publication

2026-10-23T17:11:42Z

Mise à jour

2026-10-24T16:45:03.949252778Z

Pile logicielle: system · web

Vérifiez votre serveur →