-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 20 May 2026 21:21:22 +0200 Source: haproxy Binary: haproxy haproxy-dbgsym Architecture: s390x Version: 3.0.11-1+deb13u3 Distribution: trixie-security Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Vincent Bernat Description: haproxy - fast and reliable load balancing reverse proxy Changes: haproxy (3.0.11-1+deb13u3) trixie-security; urgency=high . [ Salvatore Bonaccorso ] * BUG/MAJOR: h3: check body size with content-length on empty FIN (CVE-2026-33555) . [ Vincent Bernat ] * BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as well * BUG/MAJOR: http-htx: Store new host in a chunk for scheme-based normalization * BUG/MAJOR: mux-h1: Deal with true 64-bits integer to emit chunks size * BUG/MAJOR: mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in h2c_dec_hdrs() * BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals * BUG/MAJOR: http: forbid comma character in authority value * BUG/MEDIUM: h1: Skip all h2c values from Upgrade headers during parsing Checksums-Sha1: 143d6f35bb336ccdd73eb2a57a37230438d75070 6814216 haproxy-dbgsym_3.0.11-1+deb13u3_s390x.deb 1c07fdc28b315ee6d2d2a0a98bb5c6edc3e02f81 7887 haproxy_3.0.11-1+deb13u3_s390x-buildd.buildinfo 185d783b2942e859689fd0193eb982c260faa484 2653636 haproxy_3.0.11-1+deb13u3_s390x.deb Checksums-Sha256: e2edbf690bf70aba62aee477e6ed46f38a4f46085d2ed8c2ca13c35972699321 6814216 haproxy-dbgsym_3.0.11-1+deb13u3_s390x.deb 3183b5a353035fab898f49ee9eb0becb935397894c4884d41fbbf970276e5111 7887 haproxy_3.0.11-1+deb13u3_s390x-buildd.buildinfo 78b1e5883238cd4723a658690f791d417822b01f001c4430bc2fa73fbee1a6a9 2653636 haproxy_3.0.11-1+deb13u3_s390x.deb Files: c46070493906cbf02c02acc6a4872796 6814216 debug optional haproxy-dbgsym_3.0.11-1+deb13u3_s390x.deb 4e187c554c8241a1bc4d733584353f20 7887 net optional haproxy_3.0.11-1+deb13u3_s390x-buildd.buildinfo 898057d0d0d0ad7254fcf6142453c45f 2653636 net optional haproxy_3.0.11-1+deb13u3_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmoOsgYACgkQkaCrxAR3 BY2twBAAl/SGYi/WcRzPDlLFKxKcY3IL4BjR8fuTYA0fm0YDRmstybmZ5faJCkAp 3KYxiCyfNm3Ha4wkCrBVhDiOiKqMCY4891UXcbGrgM44Nhau96J6brmEkZkjWs5K FDWPiiSyhUTj6cQKeZbng+v2HcG5nG1sBBDvxGhjH/rcRpwLGTEcRTR7G/QsjBDK lwTJQqHy9nhcFvBWflzwcv1/D2Ql0ZvMIxXLUt+8z/gKghwwJ5zT1S1ArOPPmBCa jR0oLkWWcUlYbcaqRQjtBKBVRI1ZXFSAZ0Jx7r9u0DF4D7iIa51QltrwLNPTxdoG XrtoZAVmZEDI89+a5ZrIxr9t4CirrPxZf/c08Of+zcrg9XIdptsW5kNXOn3NMAJu UIqJrQaTS1js3Lqgpjjz90yRtmj8rzxN7izT0V5EfUIoxrraHqcbZHybBYmINxuB qWfJ+nnGs6aw8/iFcUIuHg+guu2fjkgPiq5snulw99mllrHtc6vO7Yxi5nRQQ5D/ pSTNPNUR/r20KkNj7bdfPAWZdGAJRbkk1WfzsMOxit5CT5MjSAgxn1Y81Ftzn0YE 1WeHnZA3TOKSR5RqfWALJG0hRd1WIfFnYci1b6I3HwjLcs8sRP68Vyc3CH4bsin1 AKkWUVoJ3J80mrSYH9L8f/TNvF3Zi/i60EOffUMzu2hlfpteM94= =uOfr -----END PGP SIGNATURE-----