-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 20 May 2026 21:21:22 +0200
Source: haproxy
Architecture: source
Version: 3.0.11-1+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: Debian HAProxy Maintainers <team+haproxy@tracker.debian.org>
Changed-By: Vincent Bernat <bernat@debian.org>
Changes:
 haproxy (3.0.11-1+deb13u3) trixie-security; urgency=high
 .
   [ Salvatore Bonaccorso ]
   * BUG/MAJOR: h3: check body size with content-length on empty FIN
     (CVE-2026-33555)
 .
   [ Vincent Bernat ]
   * BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as
     well
   * BUG/MAJOR: http-htx: Store new host in a chunk for scheme-based
     normalization
   * BUG/MAJOR: mux-h1: Deal with true 64-bits integer to emit chunks size
   * BUG/MAJOR: mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in
     h2c_dec_hdrs()
   * BUG/MAJOR: slz: always make sure to limit fixed output to less than
     worst case literals
   * BUG/MAJOR: http: forbid comma character in authority value
   * BUG/MEDIUM: h1: Skip all h2c values from Upgrade headers during
     parsing
Checksums-Sha1:
 cbfcc73d6d86b3aca9ae2b6f8a047135b9b5ae5f 2462 haproxy_3.0.11-1+deb13u3.dsc
 3a632c7af55cc189807811a5cb9076ba3d734622 4738655 haproxy_3.0.11.orig.tar.gz
 8dda124e1a2545497b3d8bf2d87086929564d56b 101172 haproxy_3.0.11-1+deb13u3.debian.tar.xz
 63a166396e0bac97d636e345ea2863fa3596a51e 8886 haproxy_3.0.11-1+deb13u3_amd64.buildinfo
Checksums-Sha256:
 11e6fc6750be89dbe61e9ab2b338254957a2724d1f2b5d0b9ea707556a9ebb1f 2462 haproxy_3.0.11-1+deb13u3.dsc
 a133e2d550c5fd9a849b5c7ab17bb945bcdad209ca140d41f45ebf31943ae783 4738655 haproxy_3.0.11.orig.tar.gz
 3c038b0a9f488a846d723aed4cc24f36b12c3cb846deece50e506386a8dbe6b7 101172 haproxy_3.0.11-1+deb13u3.debian.tar.xz
 fb527eeaab61651e68df5689dd663c801c4d50018b9c2361185cd16962b9a185 8886 haproxy_3.0.11-1+deb13u3_amd64.buildinfo
Files:
 063c726077024a4a2c37d465a8e4de80 2462 net optional haproxy_3.0.11-1+deb13u3.dsc
 daa269dc9a9b49318b22ad7676ebea5c 4738655 net optional haproxy_3.0.11.orig.tar.gz
 16e99ccddb2fa1e51ffd787515d3dd24 101172 net optional haproxy_3.0.11-1+deb13u3.debian.tar.xz
 5479da054b176e6e06d9953aa98cb10b 8886 net optional haproxy_3.0.11-1+deb13u3_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=+4Y3
-----END PGP SIGNATURE-----