-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 17 Oct 2026 19:17:39 +0200
Source: haproxy
Architecture: source
Version: 2.6.12-1+deb12u4
Distribution: bookworm-security
Urgency: high
Maintainer: Debian HAProxy Maintainers <team+haproxy@tracker.debian.org>
Changed-By: Vincent Bernat <bernat@debian.org>
Changes:
haproxy (2.6.12-1+deb12u4) bookworm-security; urgency=high
.
* BUG/MAJOR: mux-h2: properly handle short reads on PING frames
* BUG/MAJOR: h1-htx: report an error on a too long chunk-size line
* BUG/MAJOR: h3: check body size with content-length on empty FIN
(CVE-2026-33555)
Checksums-Sha1:
fc6aa05bfd0b9e11df4232a8cc337ee77baf0c91 2399 haproxy_2.6.12-1+deb12u4.dsc
d12745cff8fbcdd82d4d6fe1fc679d3bdb871c4c 4060878 haproxy_2.6.12.orig.tar.gz
77f8829593d8423671dfdc76f30ad44538597dd9 91240 haproxy_2.6.12-1+deb12u4.debian.tar.xz
Checksums-Sha256:
0397de4cd917406bb710246fb0d0416b88f2105eb65454cb273b4ae78977333c 2399 haproxy_2.6.12-1+deb12u4.dsc
58f9edb26bf3288f4b502658399281cc5d6478468bd178eafe579c8f41895854 4060878 haproxy_2.6.12.orig.tar.gz
d866e51792b3ce48641156da306faa9edd08a64df3ce9649e57500341f02f1af 91240 haproxy_2.6.12-1+deb12u4.debian.tar.xz
Files:
6eca000ea8cccc4832fb833d0df3cef7 2399 net optional haproxy_2.6.12-1+deb12u4.dsc
215f5c315e5881f19b974c1d48581098 4060878 net optional haproxy_2.6.12.orig.tar.gz
ca4c9ee2d1a5fd4b49d5fa53d24bf7e6 91240 net optional haproxy_2.6.12-1+deb12u4.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=sHwl
-----END PGP SIGNATURE-----
