-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 20 May 2026 21:21:22 +0200 Source: haproxy Binary: haproxy haproxy-dbgsym Architecture: arm64 Version: 3.0.11-1+deb13u3 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-ubc-01) Changed-By: Vincent Bernat Description: haproxy - fast and reliable load balancing reverse proxy Changes: haproxy (3.0.11-1+deb13u3) trixie-security; urgency=high . [ Salvatore Bonaccorso ] * BUG/MAJOR: h3: check body size with content-length on empty FIN (CVE-2026-33555) . [ Vincent Bernat ] * BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as well * BUG/MAJOR: http-htx: Store new host in a chunk for scheme-based normalization * BUG/MAJOR: mux-h1: Deal with true 64-bits integer to emit chunks size * BUG/MAJOR: mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in h2c_dec_hdrs() * BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals * BUG/MAJOR: http: forbid comma character in authority value * BUG/MEDIUM: h1: Skip all h2c values from Upgrade headers during parsing Checksums-Sha1: 515f1ec4f092e79e161ef55b07164bf4d9d9d406 6783468 haproxy-dbgsym_3.0.11-1+deb13u3_arm64.deb da249e576e77b5c8e8cf048e26a289a708d7c234 8009 haproxy_3.0.11-1+deb13u3_arm64-buildd.buildinfo 51e30f46f9b54bfd77f5947262823de9b353c4f2 2503084 haproxy_3.0.11-1+deb13u3_arm64.deb Checksums-Sha256: bb5f76b29557bcd9b73444c305bdf4a65d75145795db02dd0de8a2a12e25fb9b 6783468 haproxy-dbgsym_3.0.11-1+deb13u3_arm64.deb 7caa2c7a48f695e1a1d05cb6f591296ae10de09ef6d7496c0d521a172230fe83 8009 haproxy_3.0.11-1+deb13u3_arm64-buildd.buildinfo b9d04d9721446a435ce680b11f77c0fc282938ab7223f64a0ba62e9e674351e2 2503084 haproxy_3.0.11-1+deb13u3_arm64.deb Files: c65d19b128f029a7c53a6cec8b2268b6 6783468 debug optional haproxy-dbgsym_3.0.11-1+deb13u3_arm64.deb 7dee72d8eca9aeed4b2988bdf079f1f0 8009 net optional haproxy_3.0.11-1+deb13u3_arm64-buildd.buildinfo c6a43ba0635e75a9996f90b9673cb7ea 2503084 net optional haproxy_3.0.11-1+deb13u3_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0Ha//LlsGOpbQ/H4xqCFmsOWgoYFAmoOsp4ACgkQxqCFmsOW gob/TA/8D4TQF/+3lFSFYfvEyAkG6MBo9mNYcCNS+QYmB7avWnCKimQq/0WWaSK2 mWWxNpr8afeVku+yCA+VWZL6SZbTww4D1RQVfu5pT15WyX56vYy6sxWPEOxepDqp suC7eWbGFLgo8TqhTXXtXardAWoGqyXUhEgieeKODlUtB9evu/BPwAExwkiviXt0 mUfF5KFTX0Fznx2JhikVLO6BplPj+UKoIyy4waheUheLcVPwxM/J5NlaHnsYu48s 1jbeKMuDTPB6zg1Ej+Riy7CJ5+2GRWhyag1UVUYaxszp9TPDOZPIzc8bis78MN3S RvgTpjWj79V+C6Giil0PlK6m1YP3k6DgKLVQm7EBVjNZ9yEy605HKrRSgj29+aQW ocIZ6HCgN3OTd2+91+5Gd11Nek6zCRtrkKoXUS3j8zOfZzVGM5/Ys1s5KDYZ7SoO uX1zZVuSn+VlMrCbFLz6tEPu1Wu871bzgAzXBGOGalp3q9AcmKczsb8dPdSjhs4h Kk6Vtuslj3Y46Th+93NQYpPKdqyXu+NaSUNdITxUJhqqd/5l2Hd6X1JgNtVP40Ru uE3QIFQIAlnq6UU5/+yLy+Dz6j4mMRsYt70KYYZhv/19vhclxtH/QxuhavFREuKM CjLWYak7uOqRR6hUF+DTWHJwt7e1FzGdm8kO7dHe4A7WtKZDJl8= =7Tj1 -----END PGP SIGNATURE-----