haproxy (2.6.12-1+deb12u2) bookworm; urgency=medium
authorAdrian Bunk <bunk@debian.org>
Tue, 29 Apr 2025 13:56:20 +0000 (16:56 +0300)
committerAdrian Bunk <bunk@debian.org>
Tue, 29 Apr 2025 13:56:20 +0000 (16:56 +0300)
commit91e7b5ef87aa4d917ec77c176c7a7200dcb1f90d
treea3706e0d914feb3d2756fb1828a1c3aa79e2ed12
parent9a72692e10d6e4f986f6353204b47ed6b7d89441
parenta87f0ce72c2b84879a63279eef074d3c72486644
haproxy (2.6.12-1+deb12u2) bookworm; urgency=medium

  * Non-maintainer upload.
  * CVE-2025-32464: heap buffer overflow in sample_conv_regsub()
    (Closes: #1102673)

[dgit import unpatched haproxy 2.6.12-1+deb12u2]
88 files changed:
debian/NEWS
debian/changelog
debian/clean
debian/control
debian/copyright
debian/dconv/LICENSE
debian/dconv/NOTICE
debian/dconv/README.md
debian/dconv/css/check.png
debian/dconv/css/cross.png
debian/dconv/css/page.css
debian/dconv/haproxy-dconv.py
debian/dconv/img/logo-med.png
debian/dconv/js/typeahead.bundle.js
debian/dconv/parser/__init__.py
debian/dconv/parser/arguments.py
debian/dconv/parser/example.py
debian/dconv/parser/keyword.py
debian/dconv/parser/seealso.py
debian/dconv/parser/table.py
debian/dconv/parser/underline.py
debian/dconv/templates/parser/arguments.tpl
debian/dconv/templates/parser/example.tpl
debian/dconv/templates/parser/example/comment.tpl
debian/dconv/templates/parser/seealso.tpl
debian/dconv/templates/parser/table.tpl
debian/dconv/templates/parser/table/header.tpl
debian/dconv/templates/parser/table/row.tpl
debian/dconv/templates/parser/underline.tpl
debian/dconv/templates/summary.html
debian/dconv/templates/template.html
debian/dconv/tools/generate-docs.sh
debian/gbp.conf
debian/halog.1
debian/haproxy-doc.doc-base.haproxy
debian/haproxy-doc.doc-base.haproxy-lua
debian/haproxy-doc.docs
debian/haproxy-doc.install
debian/haproxy-doc.links
debian/haproxy-doc.maintscript
debian/haproxy.README.Debian
debian/haproxy.cfg
debian/haproxy.default
debian/haproxy.dirs
debian/haproxy.docs
debian/haproxy.examples
debian/haproxy.init
debian/haproxy.install
debian/haproxy.maintscript
debian/haproxy.manpages
debian/haproxy.postinst
debian/haproxy.postrm
debian/haproxy.tmpfile
debian/haproxy.vim
debian/logrotate.conf
debian/patches/0001-BUG-MEDIUM-sample-fix-risk-of-overflow-when-replacin.patch
debian/patches/BUG-MAJOR-h3-reject-header-values-containing-invalid.patch
debian/patches/BUG-MAJOR-http-reject-any-empty-content-length-heade.patch
debian/patches/BUG-MINOR-h1-do-not-accept-as-part-of-the-URI-compon.patch
debian/patches/BUG-MINOR-h2-reject-more-chars-from-the-path-pseudo-.patch
debian/patches/BUG-MINOR-h3-reject-more-chars-from-the-path-pseudo-.patch
debian/patches/DOC-clarify-the-handling-of-URL-fragments-in-request.patch
debian/patches/MINOR-h2-pass-accept-invalid-http-request-down-the-r.patch
debian/patches/MINOR-http-add-new-function-http_path_has_forbidden_.patch
debian/patches/MINOR-ist-add-new-function-ist_find_range-to-find-a-.patch
debian/patches/REGTESTS-http-rules-add-accept-invalid-http-request-.patch
debian/patches/REGTESTS-http-rules-verify-that-we-block-by-default-.patch
debian/patches/REORG-http-move-has_forbidden_char-from-h2.c-to-http.patch
debian/patches/debianize-dconv.patch
debian/patches/haproxy.service-add-documentation.patch
debian/patches/haproxy.service-make-systemd-bind-dev-log-inside-chroot.patch
debian/patches/haproxy.service-start-after-syslog.patch
debian/patches/reproducible.patch
debian/patches/series
debian/rsyslog.conf
debian/rules
debian/salsa-ci.yml
debian/source/format
debian/source/include-binaries
debian/tests/cli
debian/tests/control
debian/tests/proxy-localhost
debian/tests/proxy-ssl-pass-through
debian/tests/proxy-ssl-termination
debian/tests/utils
debian/vim-haproxy.install
debian/vim-haproxy.yaml
debian/watch