-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 20 May 2026 21:21:22 +0200
Source: haproxy
Binary: haproxy haproxy-dbgsym
Architecture: armhf
Version: 3.0.11-1+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Vincent Bernat <bernat@debian.org>
Description:
 haproxy    - fast and reliable load balancing reverse proxy
Changes:
 haproxy (3.0.11-1+deb13u3) trixie-security; urgency=high
 .
   [ Salvatore Bonaccorso ]
   * BUG/MAJOR: h3: check body size with content-length on empty FIN
     (CVE-2026-33555)
 .
   [ Vincent Bernat ]
   * BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as
     well
   * BUG/MAJOR: http-htx: Store new host in a chunk for scheme-based
     normalization
   * BUG/MAJOR: mux-h1: Deal with true 64-bits integer to emit chunks size
   * BUG/MAJOR: mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in
     h2c_dec_hdrs()
   * BUG/MAJOR: slz: always make sure to limit fixed output to less than
     worst case literals
   * BUG/MAJOR: http: forbid comma character in authority value
   * BUG/MEDIUM: h1: Skip all h2c values from Upgrade headers during
     parsing
Checksums-Sha1:
 756be15319f13381d4634e8d0f0a8a720bdfc698 6907444 haproxy-dbgsym_3.0.11-1+deb13u3_armhf.deb
 d79b546aae597d00e8591bdc71db3dc2ed9c1251 7891 haproxy_3.0.11-1+deb13u3_armhf-buildd.buildinfo
 6c061b321430ab9abc8fe193caaeeea8747e2a1b 2559780 haproxy_3.0.11-1+deb13u3_armhf.deb
Checksums-Sha256:
 32f3b4cb233c3e6dde86835ddcc6c90bbb59ef04f5a2141e707144d15624d4b0 6907444 haproxy-dbgsym_3.0.11-1+deb13u3_armhf.deb
 e476c01fe8af2e22c699e2535d9ce25ca015216a14b7cbcd1d3c6a5ff6bacad0 7891 haproxy_3.0.11-1+deb13u3_armhf-buildd.buildinfo
 14d6cee4ea00c4f1747a1583151ecfe15cb163480d6ff61b425ad5c7ebad847e 2559780 haproxy_3.0.11-1+deb13u3_armhf.deb
Files:
 fe2f755710e95edd564333ddbf8c090f 6907444 debug optional haproxy-dbgsym_3.0.11-1+deb13u3_armhf.deb
 067ad7d2b2a8958209e55352d69415b6 7891 net optional haproxy_3.0.11-1+deb13u3_armhf-buildd.buildinfo
 db840fab797c1f24b2d5962468e4ad87 2559780 net optional haproxy_3.0.11-1+deb13u3_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=zAil
-----END PGP SIGNATURE-----