-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 20 May 2026 21:21:22 +0200
Source: haproxy
Binary: haproxy haproxy-dbgsym
Architecture: amd64
Version: 3.0.11-1+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Vincent Bernat <bernat@debian.org>
Description:
 haproxy    - fast and reliable load balancing reverse proxy
Changes:
 haproxy (3.0.11-1+deb13u3) trixie-security; urgency=high
 .
   [ Salvatore Bonaccorso ]
   * BUG/MAJOR: h3: check body size with content-length on empty FIN
     (CVE-2026-33555)
 .
   [ Vincent Bernat ]
   * BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as
     well
   * BUG/MAJOR: http-htx: Store new host in a chunk for scheme-based
     normalization
   * BUG/MAJOR: mux-h1: Deal with true 64-bits integer to emit chunks size
   * BUG/MAJOR: mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in
     h2c_dec_hdrs()
   * BUG/MAJOR: slz: always make sure to limit fixed output to less than
     worst case literals
   * BUG/MAJOR: http: forbid comma character in authority value
   * BUG/MEDIUM: h1: Skip all h2c values from Upgrade headers during
     parsing
Checksums-Sha1:
 bf44521f77e5018315d58142087fd22bfee8c7a9 6844172 haproxy-dbgsym_3.0.11-1+deb13u3_amd64.deb
 b16300218cdb81b477ed57af24665373e86b85b8 8025 haproxy_3.0.11-1+deb13u3_amd64-buildd.buildinfo
 1e1351b505a441690680131681290628a06aa510 2628520 haproxy_3.0.11-1+deb13u3_amd64.deb
Checksums-Sha256:
 f8d723532fe14749f22e59dd411d1ca368eac75631a3d0f7fe77c17cb011ab07 6844172 haproxy-dbgsym_3.0.11-1+deb13u3_amd64.deb
 3dcffd48cea883b320cb6af066f520cdcef3ce2b48529498ab13e9b318062c72 8025 haproxy_3.0.11-1+deb13u3_amd64-buildd.buildinfo
 9a0b662b6cb63167af33864f90f29c3ef66b0aeee8d213e5b635a7bab25d51d8 2628520 haproxy_3.0.11-1+deb13u3_amd64.deb
Files:
 278621e2f9d5615f94c5cdd785025ea7 6844172 debug optional haproxy-dbgsym_3.0.11-1+deb13u3_amd64.deb
 85d1d6fb952bbdd23cca79b86967fe7a 8025 net optional haproxy_3.0.11-1+deb13u3_amd64-buildd.buildinfo
 1339fad38a097c6ccff48fba28813849 2628520 net optional haproxy_3.0.11-1+deb13u3_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=L9mC
-----END PGP SIGNATURE-----