-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 Jun 2026 20:37:40 +0200 Source: haproxy Architecture: source Version: 3.2.20-1 Distribution: unstable Urgency: medium Maintainer: Debian HAProxy Maintainers <team+haproxy@tracker.debian.org> Changed-By: Vincent Bernat <bernat@debian.org> Closes: 1140430 Changes: haproxy (3.2.20-1) unstable; urgency=medium . * New upstream release. * Closes: #1140430: - CVE-2026-55203: integer overflow when parsing FCGI header. - CVE-2026-55204: add missing NULL check in HTTP/2 header compression. Checksums-Sha1: bc1f662d5fc02ea6f1bb2074322ae1d0398ff994 2438 haproxy_3.2.20-1.dsc 0d928329f0dcaf17c73a6264f73fe008065b97e8 5158781 haproxy_3.2.20.orig.tar.gz a13cc1d01d07e46d0fa0c5cc15959a9aadcb1306 85000 haproxy_3.2.20-1.debian.tar.xz 754c8ec0fd29bec1451322fe2b6d2242fa15b774 9853 haproxy_3.2.20-1_amd64.buildinfo Checksums-Sha256: 75b90757a81be88122c2db8ab5050443fb1662bafc4395a87acbbd445f88798d 2438 haproxy_3.2.20-1.dsc 8eef76e3d3f731ae6d9bf57594c52f29c38c9be7987c5b46a96a13bad1a88666 5158781 haproxy_3.2.20.orig.tar.gz c0ebaecca28f04725f527b2e0c06401ba0707a52904a81206adb20eb210e2342 85000 haproxy_3.2.20-1.debian.tar.xz 8646cd15c214eb9de92f32bdf582482bb91bbd4b20ef992124d425ee05b66da6 9853 haproxy_3.2.20-1_amd64.buildinfo Files: 7cd26d2568e295536102a7b64e796231 2438 net optional haproxy_3.2.20-1.dsc f39309cc9fbdcaae7c870274792fb3ce 5158781 net optional haproxy_3.2.20.orig.tar.gz d2c5e8d693ee1e62646ace7c3e968db3 85000 net optional haproxy_3.2.20-1.debian.tar.xz a7b06851d01994505ce12a6564467091 9853 net optional haproxy_3.2.20-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEErvI0h2bzccaJpzYAlaQv6DU1JfkFAmo+x6YSHGJlcm5hdEBk ZWJpYW4ub3JnAAoJEJWkL+g1NSX5jXsQAIKSGnRSHVxnNT2G4D+cQr76E0ZK7WOi KdgXOVQ17E0XWOPTjOOZW+JIWpc9RnniLYXIAcTp3483YkaTbKXE7KK9AU4eB1uQ qAtvQ19D+5ITM0NS8a80cGqM/vvvaj/d4D9og8cFmXE/VwKYD5R+00MSPeo8RBTz W17zjPvWtlm0oZ+tBSqphCZHbIr3Ybna5JCtsBGrtBQs6quPbQzHe/Ku9G/aDAu7 odxnDQrnVhYBmqoCqc80yV323/QfC5/g74bdp8GLc8+siOe0unHc9fr5bBZzBjma cGDzr62Zhr7PXTLTL96+W2aJ+bpjTAS0JpfkdrB0MYK3ymbsVrecO/IuGcxdB2ts vEBWtiNu5uG30FssLKy1bhismVi6TXIgTUvoTGSMRVGggm5s6HuITuwmuvbgjEsp bFF4b+BwVsBuFntV6O+d70Hy1c2LXCeLlrMw4EZeBt85i5PZljJAij6p4IKQiPKb UIixXlzS/EmNPPBXIxsC9Jun0Xss3RPA+YIujNDZCvIiprLfgCdGE8iXSWT+KMvK 2jRadPfu+WxAkCRcwBuxlh7sDMCPdEcMGj7UXcIQQEh/XQKZCyxP6Rf2NuBoiuOx k2N710u/KD+kkElmWR0lTkbwg/pGH08LSaos54oAal4gnSloDM6nx3hMsPHoxOlb Tizgbmo9sEbw =nG2O -----END PGP SIGNATURE-----