-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 20 May 2026 21:21:22 +0200 Source: haproxy Binary: haproxy haproxy-dbgsym Architecture: i386 Version: 3.0.11-1+deb13u3 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Vincent Bernat Description: haproxy - fast and reliable load balancing reverse proxy Changes: haproxy (3.0.11-1+deb13u3) trixie-security; urgency=high . [ Salvatore Bonaccorso ] * BUG/MAJOR: h3: check body size with content-length on empty FIN (CVE-2026-33555) . [ Vincent Bernat ] * BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as well * BUG/MAJOR: http-htx: Store new host in a chunk for scheme-based normalization * BUG/MAJOR: mux-h1: Deal with true 64-bits integer to emit chunks size * BUG/MAJOR: mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in h2c_dec_hdrs() * BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals * BUG/MAJOR: http: forbid comma character in authority value * BUG/MEDIUM: h1: Skip all h2c values from Upgrade headers during parsing Checksums-Sha1: 685fea9e7cffbfe7554455c650c87ea7407ffc77 6664540 haproxy-dbgsym_3.0.11-1+deb13u3_i386.deb fc746f3573f991467ee415e5ce65c93a8b0fd3ad 7926 haproxy_3.0.11-1+deb13u3_i386-buildd.buildinfo 5d013aad73f37c44a9cf213a59599e84b60b6b94 2602068 haproxy_3.0.11-1+deb13u3_i386.deb Checksums-Sha256: 22f81566fa8ba23a2bc7303004dc378f1be850852396786bfcd2c31c063d6fb8 6664540 haproxy-dbgsym_3.0.11-1+deb13u3_i386.deb 825f11f90a5905ac348c33f2a5bfb59461a8e094d194c026ea6113f3c74013be 7926 haproxy_3.0.11-1+deb13u3_i386-buildd.buildinfo cb192d6ee04f5dcc0f5d91356f898b4c864e10a2b6b2b99e02fcb9e5fca27a80 2602068 haproxy_3.0.11-1+deb13u3_i386.deb Files: c29e4feac8c206780ff67f2307e1526a 6664540 debug optional haproxy-dbgsym_3.0.11-1+deb13u3_i386.deb cc81e73246cdf201f95849b4655d9c74 7926 net optional haproxy_3.0.11-1+deb13u3_i386-buildd.buildinfo 9203b1b7d0a8d930b4e5f9ba08eaf876 2602068 net optional haproxy_3.0.11-1+deb13u3_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmoOssQACgkQbheoBegw XLJJzA//QMFoQ4xPzyAVmg8bZzRyt77mefyXl/Ll6dtUOOpQGIrbmYB4WraQJ7jj D2NyXG2Q8roJqqnEZKaFjdgqDdkhc8WAm6i9iXidmT83Ua6KpaLoiuSWNXETWcjQ OzotPePMt3EYUFIn3EkUL5zhOYx/we4RkD1BU1m8R3CoCwcLKexI5LHSa6uxMwNn ofZ4NB/yen26g0IYTKU+ffKwEmgQVi5Qhax1Qrg6Qm0HQ/7kxk3IH8vRBDm+pzd/ nLQpqEv0piOYt/Oe1OOdnqFZFotOMWSeEeaVwhZwFqZvxknYwcVW5nV3DPboKMko 9qhcS3qzHJJn0vXp1RO/sh/gzXOP608sTrT9yjSVC8PWGL6F94O7NEW7/s2bXgvE /C3o/emvjJzbf2Fr1n35HCbwQ4HVfRXywaw4mrvhqZ/P9M4G92Udfp0iENOGc7gT GT49ZJ/hSXUaY+dU1TcXhoyLSAP/bQBC+XrBjLLV2jPIVUm400p0mb5GD/8DOlwR l5AvPRexGdXmR61+KbEyZTh8JBy/028RpR1IUik9xlCva4xYBoFuH+vfEOyz7yKk +TG78bc0gADhitqQGQ4ea4GQ0a81zvu/u+9bFGk+cLQItGkNtlHKThRK2Htbr2NS OJykkuGrI9QsnUKaKGnUbw8Op+a/q8NmREO+niEUVFkfeH/GulA= =73He -----END PGP SIGNATURE-----