haproxy (2.2.9-2+deb11u7) bullseye-security; urgency=medium
authorAdrian Bunk <bunk@debian.org>
Wed, 23 Apr 2025 17:55:00 +0000 (20:55 +0300)
committerAdrian Bunk <bunk@debian.org>
Wed, 23 Apr 2025 17:55:00 +0000 (20:55 +0300)
commit4373b95a4d1cd65b3bc70d839ae79de17ae823e5
tree71e5a3815933fcf4148b72f662c4ad7de77bd2df
parent5e5d7c518e4f324f489823c644f6f39976669750
parentd24d18cd241188c214634828ecff366427988fcd
haproxy (2.2.9-2+deb11u7) bullseye-security; urgency=medium

  * Non-maintainer upload by the LTS Team.
  * CVE-2025-32464: heap buffer overflow in sample_conv_regsub()

[dgit import unpatched haproxy 2.2.9-2+deb11u7]
92 files changed:
debian/NEWS
debian/changelog
debian/clean
debian/control
debian/copyright
debian/dconv/LICENSE
debian/dconv/NOTICE
debian/dconv/README.md
debian/dconv/css/check.png
debian/dconv/css/cross.png
debian/dconv/css/page.css
debian/dconv/haproxy-dconv.py
debian/dconv/img/logo-med.png
debian/dconv/js/typeahead.bundle.js
debian/dconv/parser/__init__.py
debian/dconv/parser/arguments.py
debian/dconv/parser/example.py
debian/dconv/parser/keyword.py
debian/dconv/parser/seealso.py
debian/dconv/parser/table.py
debian/dconv/parser/underline.py
debian/dconv/templates/parser/arguments.tpl
debian/dconv/templates/parser/example.tpl
debian/dconv/templates/parser/example/comment.tpl
debian/dconv/templates/parser/seealso.tpl
debian/dconv/templates/parser/table.tpl
debian/dconv/templates/parser/table/header.tpl
debian/dconv/templates/parser/table/row.tpl
debian/dconv/templates/parser/underline.tpl
debian/dconv/templates/summary.html
debian/dconv/templates/template.html
debian/dconv/tools/generate-docs.sh
debian/gbp.conf
debian/halog.1
debian/haproxy-doc.doc-base.haproxy
debian/haproxy-doc.doc-base.haproxy-lua
debian/haproxy-doc.docs
debian/haproxy-doc.install
debian/haproxy-doc.links
debian/haproxy-doc.maintscript
debian/haproxy.README.Debian
debian/haproxy.cfg
debian/haproxy.default
debian/haproxy.dirs
debian/haproxy.docs
debian/haproxy.examples
debian/haproxy.init
debian/haproxy.install
debian/haproxy.maintscript
debian/haproxy.manpages
debian/haproxy.postinst
debian/haproxy.postrm
debian/haproxy.tmpfile
debian/haproxy.vim
debian/logrotate.conf
debian/patches/0001-2.0-2.3-BUG-MAJOR-htx-fix-missing-header-name-length-check-i.patch
debian/patches/0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
debian/patches/0001-BUG-MEDIUM-h2-match-absolute-path-not-path-absolute-.patch
debian/patches/0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
debian/patches/0001-BUG-MEDIUM-sample-fix-risk-of-overflow-when-replacin.patch
debian/patches/0001-BUG-MINOR-tcpcheck-Update-.health-threshold-of-agent.patch
debian/patches/0002-Use-dpkg-buildflags-to-build-halog.patch
debian/patches/2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
debian/patches/2.2-0001-MINOR-http-add-a-new-function-http_validate_scheme-t.patch
debian/patches/2.2-0002-BUG-MAJOR-h2-verify-early-that-non-http-https-scheme.patch
debian/patches/2.2-0003-BUG-MAJOR-h2-verify-that-path-starts-with-a-before-c.patch
debian/patches/2.2-0004-BUG-MAJOR-h2-enforce-checks-on-the-method-syntax-bef.patch
debian/patches/2.2-0005-BUG-MEDIUM-h2-give-authority-precedence-over-Host.patch
debian/patches/2.2-BUG-MAJOR-fcgi-Fix-uninitialized-reserved-bytes.patch
debian/patches/BUG-MAJOR-http-reject-any-empty-content-length-heade.patch
debian/patches/BUG-MINOR-h1-do-not-accept-as-part-of-the-URI-compon.patch
debian/patches/BUG-MINOR-h2-reject-more-chars-from-the-path-pseudo-.patch
debian/patches/DOC-clarify-the-handling-of-URL-fragments-in-request.patch
debian/patches/MINOR-h2-pass-accept-invalid-http-request-down-the-r.patch
debian/patches/MINOR-http-add-new-function-http_path_has_forbidden_.patch
debian/patches/MINOR-ist-Add-istend-function-to-return-a-pointer-to.patch
debian/patches/MINOR-ist-add-new-function-ist_find_range-to-find-a-.patch
debian/patches/REGTESTS-http-rules-verify-that-we-block-by-default-.patch
debian/patches/debianize-dconv.patch
debian/patches/haproxy.service-add-documentation.patch
debian/patches/haproxy.service-start-after-syslog.patch
debian/patches/series
debian/rsyslog.conf
debian/rules
debian/source/format
debian/source/include-binaries
debian/tests/cli
debian/tests/control
debian/tests/proxy-localhost
debian/vim-haproxy.install
debian/vim-haproxy.yaml
debian/watch