openSUSE-SU-2026:22162-1

openSUSE-SU-2026:22162-1 · Security update for haproxy

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

This update for haproxy fixes the following issue: - h1-htx: report an error on a too long chunk-size line (bsc#1285046). Changes for haproxy: - Otel Update to version 2.3.0+git2.b031728: * DOC: otel: added a security policy to the repository * MINOR: otel: test: added a test with an optional upstream context * VERSION: otel: bumped filter version to 2.3.0 * DOC: otel: shortened the repeated passages of the implementation guide * BUG/MINOR: otel: left a baggage pair out when its sample yielded nothing * DOC: otel: completed the stream stop notes and the function reference * DOC: otel: added the load-time warnings and missing rules to the guides * DOC: otel: corrected stale statements across the guides and notes * DOC: otel: corrected and completed the keyword guides * CLEANUP: otel: marked the code that cannot run with a NOTE comment * CLEANUP: otel: described the invalid-character check modes * MINOR: otel: checked the context field key against the W3C rules * DOC: otel: added an overview of the tests * MINOR: otel: reported the event pairings on the line that completes them * MINOR: otel: warned about an otel-scope that never runs * MINOR: otel: enforced the root span rules * MINOR: otel: validated the span and context names of every reference * MINOR: otel: enforced the rules of the inject and extract context names * MINOR: otel: bound the instrument lines of one name to a single owner * MINOR: otel: let a key repeat once per condition, first match applied * MINOR: otel: gave the 'link' keyword a condition and let it repeat * MINOR: otel: allowed the 'otel-stop' keyword to be repeated * MINOR: otel: ended a sample list at a repeated clause of the same line * MINOR: otel: separated a repeated span line from a redefinition * MINOR: otel: checked the metric instrument line against the SDK rules * MINOR: otel: allowed each otel-instrumentation keyword only once * MINOR: otel: required the configuration to live inside an OTel scope * MINOR: otel: allowed the configuration sections in any order * MINOR: otel: rejected a bare 'if' or 'unless' with no ACL term * MINOR: otel: made an ACL name unique within its section * BUG/MINOR: otel: allowed a condition to mix ACLs from the three lists * MINOR: otel: refused the reserved words as names and limited the length * MINOR: otel: named the sample key where the value stands on its own * BUG/MINOR: otel: read the whole filter line before its configuration * BUG/MINOR: otel: allowed a repeated sample expression in one value * BUG/MINOR: otel: stopped measuring a sample expression as a name * BUG/MINOR: otel: named the 'config' keyword in its own parse error * CLEANUP: otel: compared the baggage carrier key without case folding * CLEANUP: otel: replaced the word 'verbatim' in the comments and guides * CLEANUP: otel: added the entry traces to the functions that lacked them * CLEANUP: otel: collected the repeated error messages into macros * MINOR: otel: test: added the configuration parser test * DOC: otel: added the keyword definition rules and updated the guides * CLEANUP: otel: replaced the word 'gate' in the comments and guides * MINOR: otel: warned about the events the filter placement never fires * BUG/MINOR: otel: kept a backend filter from re-running the frontend rules * BUG/MINOR: otel: fired on-server-unavailable when no server was reached * BUG/MINOR: otel: armed the idle timer for a filter of a backend section * MINOR: otel: required every otel-group to be named on a 'groups' line * BUG/MINOR: otel: cleared the section state after an aborted parse * BUG/MINOR: otel: gave the events that run on no channel a usable direction * CLEANUP: otel: used the span event dump macro where the events are handled * MINOR: otel: checked 'extract use-headers' against the scope event * BUG/MINOR: otel: kept the session alive when a root scope is skipped * CLEANUP: otel: collected the session disabling into one function * LICENSE: otel: added the LICENSE file and moved the headers to the GPL * MINOR: otel: added a sampler level to the speed test * MINOR: otel: evaluated the samples in a trash buffer * MEDIUM: otel: skipped the samples of a span that records nothing - Update to version 3.4.7+git0.8872a2604: * [RELEASE] Released version 3.4.7 * BUG/MAJOR: h1-htx: report an error on a too long chunk-size line (bsc#1285046) * BUG/MAJOR: mux-h2: properly handle short reads on PING frames * BUG/MINOR: cfgparse-global: only warn when "localpeer" is set together with -L * REGTEST: ssl: require OpenSSL 1.1.1 for crt-list ciphersuites tests * REGTESTS: http-messaging: Fix http_fail_cnt_body to succeed with small timeouts * BUG/MEDIUM: mux-h1: only accept the H2 preface on the first request * BUG/MINOR: http-fetch: don't report pseudo-headers in TCP mode * BUG/MEDIUM: mux-h1: also release the embryonic stream when the error is empty * BUG/MEDIUM: mux-h2: fix a possible crash on rxbuf allocation failure * BUG/MEDIUM: mux-h2: report a dead rhttp connection in h2_wake() * BUG/MEDIUM: mux-h1: don't pass an upgraded connection to traces in h1s_destroy() * BUG/MEDIUM: mux-fcgi: don't return a freed tasklet from fcgi_deferred_shut() * BUG/MEDIUM: mux-h2: don't return a freed tasklet from h2_deferred_shut() * BUG/MINOR: hlua: assume proxy_find_by_id() may return NULL on previously existing server * BUG/MINOR: spoe: Fix the message list splice with an empty list * REGTESTS: log: check that a log-forward TCP session ends on client close * BUG/MEDIUM: log: do not ignore the peer's shutdown in the syslog applet * REGTESTS: cli: test a command line of exactly tune.bufsize bytes * BUG/MEDIUM: cli: fix the last command detection on a full command line * BUG/MINOR: cfgparse-listen: complete the list of options for the suggestions * BUG/MINOR: proxy: also look for the closest option among cfg_opts3 * BUG/MINOR: cfgparse-listen: properly reject extra args in a backend section * BUG/MINOR: cfgparse-listen: fix quoting of the condition conflict warning * BUG/MINOR: cfgparse-listen: fix the argument checked by "email-alert" * BUG/MINOR: cfgparse-listen: release the previous description of the proxy * BUG/MINOR: cfgparse-global: add missing calloc() check for the global description * BUG/MINOR: cfgparse-global: add missing gotos to error label in max-spread-checks * BUG/MAJOR: cfgparse: properly check userlist section when scanning keywords * MINOR: doc: elaborate on diagnostic mode behavior * BUG/MINOR: ssl: Fix potential NULL-deref in "dump ssl cert" with AWS-LC * BUG/MINOR: h3: reject RS/SS for QPACK uni streams * BUG/MINOR: h3: close connection on GOAWAY frame too long * BUG/MINOR: h3: reject frames with truncated header * BUG/MINOR: mux_quic: extend FINAL_SIZE_ERROR detection on stream * BUG/MINOR: ssl: use standard names for X25519 and X448 groups * BUG/MEDIUM: listener: Consider maxconn before waking listeners * BUG/MEDIUM: ssl: crt-list curves ignored with AWS-LC * BUG/MEDIUM: ssl: crt-list ciphers ignored with AWS-LC * BUG/MINOR: ssl: fix trace crash on BE conn release in io cb * BUG/MINOR: ssl: fix trace crash on FE conn release in io cb * BUG/MINOR: hq-interop: prevent double EOM on request with standalone FIN * BUG/MINOR: log: fix erroneous error message in log-steps parser * MINOR: http-ana: automatically enable http-no-delay for streaming events (SSE) * BUG/MINOR: cli: update wait help usage * BUG/MINOR: server: fix "del server" description * BUG/MINOR: proxy: add PR_CAP_LB for dynamically added backend * DOC: config: mention that url_ip and url_port fail when passed a name * DOC: config: fix doc for hex2i() converter on unparsable input * DOC: config: mention other responses not blocked by option checkcache * BUG/MINOR: sample: return the decoded JWT part when no path is given * BUG/MEDIUM: tcpcheck: do not run a regex on an unallocated buffer * BUG/MINOR: http-fetch: do not count Set-Cookie attributes as cookies * BUG/MINO

Fix available

Published

2026-10-23T17:11:42Z

Updated

2026-10-24T16:45:03.949252778Z

Stack: system · web

Check your server →