SUSE-SU-2026:22544-1

SUSE-SU-2026:22544-1 · Security update for haproxy

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for haproxy fixes the following issues - Update to version 3.2.21+git0.dbe43be37 - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-2026-55204: null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c (bsc#1268558).

Fix available

Published: 2026-07-07T10:11:35Z
Updated: 2026-07-14T18:24:37.350680660Z

Stack: system · web

Affected products and versions

haproxy SUSE:Linux Micro 6.2
Affected ranges
- ECOSYSTEM: < 3.2.21+git0.dbe43be37-160000.1.1
Update to 3.2.21+git0.dbe43be37-160000.1.1

Original sources

https://www.suse.com/support/update/announcement/2026/suse-su-202622544-1/
https://bugzilla.suse.com/1268557
https://bugzilla.suse.com/1268558
https://www.suse.com/security/cve/CVE-2026-55203
https://www.suse.com/security/cve/CVE-2026-55204
https://osv.dev/vulnerability/SUSE-SU-2026:22544-1

Check your server →

SUSE-SU-2026:22544-1 · Security update for haproxy

Affected products and versions

haproxy SUSE:Linux Micro 6.2

Original sources