< back to search

gpp_maybe Security update for haproxy

SUSE-SLE-Micro-5.4-2026-2651

This update for haproxy fixes the following issues - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-2026-55204: null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c (bsc#1268558).

Release Date

Jun 26 2026
References

Bugzilla: 1268557, 1268558
CVEs: CVE-2026-55203, CVE-2026-55204
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Micro 5.4 aarch64

Packages

haproxy
The Reliable, High Performance TCP/HTTP Load Balancer

2.4.22+git0.f8e3218e2-150400.3.28.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.4 x86_64

Packages

haproxy
The Reliable, High Performance TCP/HTTP Load Balancer

2.4.22+git0.f8e3218e2-150400.3.28.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.4 s390x

Packages

haproxy
The Reliable, High Performance TCP/HTTP Load Balancer

2.4.22+git0.f8e3218e2-150400.3.28.1 lock rpm lock src