Packages / openSUSE Tumbleweed / Source / Productivity/Networking/Web/Proxy / haproxy

Source Package: haproxy (3.4.4+git0.7f03ae65c-1.1)

The Reliable, High Performance TCP/HTTP Load Balancer

The following binary packages are built from this source package:

haproxy
The Reliable, High Performance TCP/HTTP Load Balancer

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE Severity Version impact

CVE	Severity	Version impact
[CVE-2022-0711] Published: Mar 2, 2022, 12:00:00 AM UTC haproxy: CVE-2022-0711	High(7.5)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:21:30 PM UTC Details (1) `3.4.4+git0.7f03ae65c-1.1` · x86_64 · tumbleweed Fixed · Fixed: `2.5.4+git0.e55ab4208-1.1` dsa · haproxy · opensuse · tumbleweed
[CVE-2018-11469] Published: May 25, 2018, 12:00:00 AM UTC haproxy: CVE-2018-11469	High(7.5)	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:33:43 PM UTC Details (1) `3.4.4+git0.7f03ae65c-1.1` · x86_64 · tumbleweed Fixed · Fixed: `2.4.4+git0.acb1d0bea-1.2` dsa · haproxy · opensuse · tumbleweed
[CVE-2013-1912] Published: Apr 9, 2013, 6:07:00 PM UTC haproxy: CVE-2013-1912	Medium	Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:07:32 PM UTC Details (1) `3.4.4+git0.7f03ae65c-1.1` · x86_64 · tumbleweed Fixed · Fixed: `1.7.0-1.1` dsa · haproxy · opensuse · tumbleweed

[CVE-2022-0711]

Published: Mar 2, 2022, 12:00:00 AM UTC

haproxy: CVE-2022-0711

High(7.5)

Unknown

Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:21:30 PM UTC

Details (1)

3.4.4+git0.7f03ae65c-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 2.5.4+git0.e55ab4208-1.1
dsa · haproxy · opensuse · tumbleweed

[CVE-2018-11469]

Published: May 25, 2018, 12:00:00 AM UTC

haproxy: CVE-2018-11469

High(7.5)

Unknown

Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:33:43 PM UTC

Details (1)

3.4.4+git0.7f03ae65c-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 2.4.4+git0.acb1d0bea-1.2
dsa · haproxy · opensuse · tumbleweed

[CVE-2013-1912]

Published: Apr 9, 2013, 6:07:00 PM UTC

haproxy: CVE-2013-1912

Medium

Unknown

Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:07:32 PM UTC

Details (1)

3.4.4+git0.7f03ae65c-1.1 · x86_64 · tumbleweed
Fixed · Fixed: 1.7.0-1.1
dsa · haproxy · opensuse · tumbleweed

Fixed and unaffected versions (7)

CVE	Severity	Version impact
[CVE-2026-55203] Published: Jun 18, 2026, 4:05:20 PM UTC HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers. When contentLe	Critical(9)	Fixed Details (1) `3.4.4+git0.7f03ae65c-1.1` · x86_64 · tumbleweed Fixed · Fixed: `3.4.0+git31.fc300e9f2-1.1` nvd · haproxy · opensuse · tumbleweed
[CVE-2026-33555] Published: Apr 13, 2026, 12:00:00 AM UTC An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length when the stream is closed via a frame with	Medium(4)	Fixed Details (1) `3.4.4+git0.7f03ae65c-1.1` · x86_64 · tumbleweed Fixed · Fixed: `3.3.6+git91.af5637e93-1.1` nvd · haproxy · opensuse · tumbleweed
[CVE-2026-26081] Published: Feb 12, 2026, 12:00:00 AM UTC HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.	High(7.5)	Fixed Details (1) `3.4.4+git0.7f03ae65c-1.1` · x86_64 · tumbleweed Fixed · Fixed: `3.3.3+git0.465d8e2fc-1.1` nvd · haproxy · opensuse · tumbleweed
[CVE-2025-11230] Published: Oct 2, 2025, 12:00:00 AM UTC HAProxy vulnerability	High(7.5)	Fixed Details (1) `3.4.4+git0.7f03ae65c-1.1` · x86_64 · tumbleweed Fixed · Fixed: `3.2.6+git0.81568b2d1-1.1` usn · haproxy · opensuse · tumbleweed
[CVE-2025-32464] Published: Apr 8, 2025, 10:00:00 PM UTC HAProxy vulnerability	Medium(6.8)	Fixed Details (1) `3.4.4+git0.7f03ae65c-1.1` · x86_64 · tumbleweed Fixed · Fixed: `3.2.0+git0.e134140d2-2.1` usn · haproxy · opensuse · tumbleweed
[CVE-2024-49214] Published: Oct 13, 2024, 10:00:00 PM UTC haproxy: CVE-2024-49214	Medium(5.3)	Fixed Details (1) `3.4.4+git0.7f03ae65c-1.1` · x86_64 · tumbleweed Fixed · Fixed: `3.0.5+git0.8e879a52e-2.1` dsa · haproxy · opensuse · tumbleweed
[CVE-2024-45506] Published: Sep 3, 2024, 10:00:00 PM UTC haproxy: CVE-2024-45506	High(7.5)	Fixed Details (1) `3.4.4+git0.7f03ae65c-1.1` · x86_64 · tumbleweed Fixed · Fixed: `3.0.4+git0.7a59afa93-1.1` dsa · haproxy · opensuse · tumbleweed

Last synced: Oct 28, 2026, 1:40:02 AM UTC

[CVE catalog]

Sources

openSUSE Tumbleweed OSSSep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Repository-signature verification record
Signed object
https://download.opensuse.org/tumbleweed/repo/oss/repodata/repomd.xml
Signed-object SHA-256
4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Signer fingerprint
AD485664E901B867051AB15F35A2F86E29B700A4
Keyring revision
opensuse-project-signing-key.asc
SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable