-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 20 May 2026 21:21:22 +0200 Source: haproxy Binary: haproxy haproxy-dbgsym Architecture: riscv64 Version: 3.0.11-1+deb13u3 Distribution: trixie-security Urgency: high Maintainer: riscv64 Build Daemon (rv-osuosl-01) Changed-By: Vincent Bernat Description: haproxy - fast and reliable load balancing reverse proxy Changes: haproxy (3.0.11-1+deb13u3) trixie-security; urgency=high . [ Salvatore Bonaccorso ] * BUG/MAJOR: h3: check body size with content-length on empty FIN (CVE-2026-33555) . [ Vincent Bernat ] * BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as well * BUG/MAJOR: http-htx: Store new host in a chunk for scheme-based normalization * BUG/MAJOR: mux-h1: Deal with true 64-bits integer to emit chunks size * BUG/MAJOR: mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in h2c_dec_hdrs() * BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals * BUG/MAJOR: http: forbid comma character in authority value * BUG/MEDIUM: h1: Skip all h2c values from Upgrade headers during parsing Checksums-Sha1: 755f07dc53e072772606f56dd76cc9bd4c46170f 6411092 haproxy-dbgsym_3.0.11-1+deb13u3_riscv64.deb 7eb7f719e8c028bf0c68c7e765ac0193384cff9c 7969 haproxy_3.0.11-1+deb13u3_riscv64-buildd.buildinfo a67e16c53393138453e1b2cf70117ac1cc8ca1f2 2723372 haproxy_3.0.11-1+deb13u3_riscv64.deb Checksums-Sha256: 4d5fa783039ce58c973d338a916354da740b0bcf7368b20f473a968bc03285ac 6411092 haproxy-dbgsym_3.0.11-1+deb13u3_riscv64.deb 279f37b16c5693364cf468535f062883116b4219d7bd1cb86ed9bbde574c8be5 7969 haproxy_3.0.11-1+deb13u3_riscv64-buildd.buildinfo 5f866ba9677ee7d6f84646972fbd3be962287ee4b0ec863af4236c9dc6c7e60b 2723372 haproxy_3.0.11-1+deb13u3_riscv64.deb Files: 317fec5e7bac6a421d40bce978da4b41 6411092 debug optional haproxy-dbgsym_3.0.11-1+deb13u3_riscv64.deb 7ce507176b59dcca835979c4642bbc1a 7969 net optional haproxy_3.0.11-1+deb13u3_riscv64-buildd.buildinfo fead4d0013991c8be432608403dcc874 2723372 net optional haproxy_3.0.11-1+deb13u3_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3smN1vgomTkXJcrkIhSPlPtgqxkFAmoOuocACgkQIhSPlPtg qxn/bg/8D1MDVYxvaTZH0DJUpiqYKCpfwH+rl3ovduxwi8RK5Kjy1CJ9JSD6/7Ty YXkO8Grkgv5XeVWbamBFL/vQk5raj6UTvWMCXiH+UGsbrGCJrVc5pzw5/dGWrCYQ JSLdHd7p8ayiAJWWEEATKLxA1S2VFSHa3xd4+O2u7JLp7zWLuoK4sdzmt8DbJLk/ Mg2r4PHyE87VsXX9ggP7WXze6QMV3CXMiq1puNyc/Ej8CUliFXjO9z8ySG5ilWNL WBSOlwY8mz7N+g+3QQuzXGERzmz45eM6ATyIcSGJiXADRZGM2riSO+G1+qwcFs7N pEaT1XpWN6HaDY1CUfiYAv7fisrvF8PJM+h6GWwSrta3C2ztqH0+EgNdQKhlkAd0 njqyLOKbH9U4Hj03s+a1bYGFZM64xbvqzKXQ5TMNv+2hLeoNmBsimUxr/lUVgJFi leJ4oJyI9dzUGO8XBiitOI0By+a36Na+RBvLqIo0nh5PZ4Mo5nN0y5SZiwmt9/Ie Kl7L7zHUgGp3wHU/hdZXq1fSWwMcEveBue9PDSU7qTTrxw7pZJ2cu9b+YbHVKGkl ONHHMLhXtgUgyb66YejqT343EGLM3+kVoRN/NBfAt7ZT3MwEiTW9jZ0Q0MvWHaj9 WMEtoKI6cpu8ZNGH4+ozqC4pT3qHbhq11E7idjWIhICAd+1hvuQ= =Jkwb -----END PGP SIGNATURE-----