-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 20 May 2026 21:21:22 +0200 Source: haproxy Binary: haproxy haproxy-dbgsym Architecture: armel Version: 3.0.11-1+deb13u3 Distribution: trixie-security Urgency: high Maintainer: armel Build Daemon (arm-ubc-04) Changed-By: Vincent Bernat Description: haproxy - fast and reliable load balancing reverse proxy Changes: haproxy (3.0.11-1+deb13u3) trixie-security; urgency=high . [ Salvatore Bonaccorso ] * BUG/MAJOR: h3: check body size with content-length on empty FIN (CVE-2026-33555) . [ Vincent Bernat ] * BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as well * BUG/MAJOR: http-htx: Store new host in a chunk for scheme-based normalization * BUG/MAJOR: mux-h1: Deal with true 64-bits integer to emit chunks size * BUG/MAJOR: mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in h2c_dec_hdrs() * BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals * BUG/MAJOR: http: forbid comma character in authority value * BUG/MEDIUM: h1: Skip all h2c values from Upgrade headers during parsing Checksums-Sha1: 09313bc78149f14677842add935c78c6362fe014 6869360 haproxy-dbgsym_3.0.11-1+deb13u3_armel.deb 371e62df81fa9921afb1dd3d9c1072c3d34e8c02 7877 haproxy_3.0.11-1+deb13u3_armel-buildd.buildinfo bb53d2560bf7d36e4968c468e152f2e43cecde3b 2549044 haproxy_3.0.11-1+deb13u3_armel.deb Checksums-Sha256: f89b8ce61700c3f9f21596660d319e7296a67876569a5b379584a85e11c085dd 6869360 haproxy-dbgsym_3.0.11-1+deb13u3_armel.deb ba17aa51793c414f4c3b8874ace076110463ca7b9e5492c406ab05db10ccf279 7877 haproxy_3.0.11-1+deb13u3_armel-buildd.buildinfo 1b31ab40853b25ceb58ed84292047d5d7bd08c4d3471c2c06cbbfeb31b8e2a4c 2549044 haproxy_3.0.11-1+deb13u3_armel.deb Files: 72b44ada6d6f497def892fdd410a804a 6869360 debug optional haproxy-dbgsym_3.0.11-1+deb13u3_armel.deb 75d89b0179f268be715d2599a142a7cf 7877 net optional haproxy_3.0.11-1+deb13u3_armel-buildd.buildinfo 16b26758ebdd16d03f01dff19267386f 2549044 net optional haproxy_3.0.11-1+deb13u3_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEECx5fXZYVNP9tMtwlK1PZBedPspoFAmoOsp4ACgkQK1PZBedP spqRAg//cTWlZniewOqNfMS8u3fR2Y0KI3UK+HpWSUlHk4haEVz28TDmVWen6WP4 mmDXvy7nRLyEY136YL6fEWwrN0lUOAx4WKO2kGkKe9Rtr0WPAhXmUYM5Mh+OZXPP uNbLkZ53EHPgpUulxsluoJUt0+ollLqi60FCGnA9nyYKa1u3n7NqFQK4kKjrDBu3 2i+LlxTTA9daTJZ585Wf3muQ7hRKQ6cNKPpbwS2dZbSXd/s0TnyQEw7/bZhjvao/ M5HSrZuwVr0csiisnboOsc0+9P3VKj/J0lQmLakv3oxrqZW5ejenWI/JIqEDIOlC wUDPcBiDXrUTUGPwBErX2ww6XmRcn0l/G5QDL/ramaVrSfiTRp6E0fjmYSG7Pfde zTBFw9N7Kj0X1G+MTgCz6jfy+3kHe6u8KNfO6gCtSE0xgjdAbfZrlWl4pnwaStM5 lcD2LgRw/pVomjCmOsjU/Gf/od4pPQ8dHsU1wnDVJd0IUgQaxkc/dDGMeBzKrs/2 beW+ilFNOUTRN22UZNCioQSE/jvrI6Y0U14nXjEOYZP0O1VDtr8/zw99gwiSjbZh VpJJIcwF+pOES94ox01Buiuj5WODMHIl71RaR16cBnJ2sn8SvBuvbNTz1O9tulyv Zx49ZmS1dKCztO/KxFKTUErCFdisrhCNoSLl6OC75Fn3WA7RYuU= =tX5X -----END PGP SIGNATURE-----