-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 11 Feb 2023 11:40:49 +0100
Source: haproxy
Architecture: source
Version: 2.2.9-2+deb11u4
Distribution: bullseye-security
Urgency: high
Maintainer: Debian HAProxy Maintainers <team+hapr...@tracker.debian.org>
Changed-By: Salvatore Bonaccorso <car...@debian.org>
Changes:
haproxy (2.2.9-2+deb11u4) bullseye-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
(CVE-2023-0056)
* BUG/CRITICAL: http: properly reject empty http header field names
(CVE-2023-25725)
Checksums-Sha1:
afacd557b653e7804c7e918213c959a9b0a9a082 2470 haproxy_2.2.9-2+deb11u4.dsc
df54402b351d054d9bfda9435b5a74bc05a82216 83396
haproxy_2.2.9-2+deb11u4.debian.tar.xz
57cd0296622b7edc9621b4cc0b967881a578be15 7096
haproxy_2.2.9-2+deb11u4_source.buildinfo
Checksums-Sha256:
761b9bfa4744425e3ad44a98248f577203110f555043224e394378b2b05134f8 2470
haproxy_2.2.9-2+deb11u4.dsc
828595dcbdac409d7e31b358779cffb874118cb3f9d17811c12c57bb8076298f 83396
haproxy_2.2.9-2+deb11u4.debian.tar.xz
f75297f62960775de414f6786658edfba5c58ee6e9dbdd0c2274a21f2f5724f6 7096
haproxy_2.2.9-2+deb11u4_source.buildinfo
Files:
71e1f3217c3fb4ecb06ee20d8b9b2e81 2470 net optional haproxy_2.2.9-2+deb11u4.dsc
2924dd010bd57d2ea500c3eedf219a59 83396 net optional
haproxy_2.2.9-2+deb11u4.debian.tar.xz
e5ceea071a11e3efb9c6dc3f3b60804a 7096 net optional
haproxy_2.2.9-2+deb11u4_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=9Kyz
-----END PGP SIGNATURE-----
