[ubuntu/questing-proposed] haproxy 3.0.12-0ubuntu0.25.10.1 (Accepted)

Athos Ribeiro athos at ubuntu.com
Thu Jan 8 20:10:42 UTC 2026


haproxy (3.0.12-0ubuntu0.25.10.1) questing; urgency=medium

  * New upstream version (LP: #2127664)
    - The API for the lua HTTPMessage "class" was improved to be able to
      change the body length. It was mandatory to be able to write a lua
      filter altering the message payload. HTTPMessage:set_body_len() can now
      be used for this purpose
    - Still in lua, The HTTP client is not supposed to be used to process
      several requests but there was nothing to prevent this usage. An error
      is now triggered in that case
    - The "ssl_bc_sni" sample fetch function was backported. It can be useful
      during debugging sessions to know what SNI was configured on a
      connection going to a server, for example to match it against what the
      server saw or to detect cases where a server would route on SNI instead
      of Host.
    - For further information, see the upstream release notes:
      + https://www.mail-archive.com/haproxy@formilux.org/msg45931.html
      + https://www.mail-archive.com/haproxy@formilux.org/msg46205.html
  * d/p/CVE-2025-11230.patch: drop patch fixed upstream in 3.0.12

Date: Mon, 01 Dec 2025 10:53:47 -0300
Changed-By: Athos Ribeiro <athos at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Athos Ribeiro <athos.ribeiro at canonical.com>
https://launchpad.net/ubuntu/+source/haproxy/3.0.12-0ubuntu0.25.10.1
-------------- next part --------------
Format: 1.8
Date: Mon, 01 Dec 2025 10:53:47 -0300
Source: haproxy
Built-For-Profiles: noudeb
Architecture: source
Version: 3.0.12-0ubuntu0.25.10.1
Distribution: questing
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Athos Ribeiro <athos at ubuntu.com>
Launchpad-Bugs-Fixed: 2127664
Changes:
 haproxy (3.0.12-0ubuntu0.25.10.1) questing; urgency=medium
 .
   * New upstream version (LP: #2127664)
     - The API for the lua HTTPMessage "class" was improved to be able to
       change the body length. It was mandatory to be able to write a lua
       filter altering the message payload. HTTPMessage:set_body_len() can now
       be used for this purpose
     - Still in lua, The HTTP client is not supposed to be used to process
       several requests but there was nothing to prevent this usage. An error
       is now triggered in that case
     - The "ssl_bc_sni" sample fetch function was backported. It can be useful
       during debugging sessions to know what SNI was configured on a
       connection going to a server, for example to match it against what the
       server saw or to detect cases where a server would route on SNI instead
       of Host.
     - For further information, see the upstream release notes:
       + https://www.mail-archive.com/haproxy@formilux.org/msg45931.html
       + https://www.mail-archive.com/haproxy@formilux.org/msg46205.html
   * d/p/CVE-2025-11230.patch: drop patch fixed upstream in 3.0.12
Checksums-Sha1:
 d55122cc13b40b0c4c0d3180e353a0723c688c1a 2522 haproxy_3.0.12-0ubuntu0.25.10.1.dsc
 b5457dd37dfdf32b7fdeea9e70748b5f63fb8088 4745984 haproxy_3.0.12.orig.tar.gz
 3ee72d2beb0c1ed04a27fea66e4ce4ea66720733 86504 haproxy_3.0.12-0ubuntu0.25.10.1.debian.tar.xz
 791d2f8e64da16ffc889f96265c5dab5e8c142e3 8593 haproxy_3.0.12-0ubuntu0.25.10.1_source.buildinfo
Checksums-Sha256:
 4f34ed25952f610a8c714053b33a96e0549f54f9c99fd834806f2bfb467066bf 2522 haproxy_3.0.12-0ubuntu0.25.10.1.dsc
 cd2bade59a7e2d61f2d62be7c6c4cfc0e2b3a90431023720cae7c43843b0570b 4745984 haproxy_3.0.12.orig.tar.gz
 1c1d272be622d20c7bd1ef5cab188ea0c1ff8018fac24504999386609acbb667 86504 haproxy_3.0.12-0ubuntu0.25.10.1.debian.tar.xz
 629be43fe8663e62b307f6ae48d3466cabb03331fbf0533bcc8a66af825eaa1e 8593 haproxy_3.0.12-0ubuntu0.25.10.1_source.buildinfo
Files:
 274150b160ca1c83080ca663b6633509 2522 net optional haproxy_3.0.12-0ubuntu0.25.10.1.dsc
 87a27c0308f78ed78cb517563ed29373 4745984 net optional haproxy_3.0.12.orig.tar.gz
 07a0c475498fcac9f59a1c2db0bcc614 86504 net optional haproxy_3.0.12-0ubuntu0.25.10.1.debian.tar.xz
 4fd8b92c5aa81326ef92933637a1371f 8593 net optional haproxy_3.0.12-0ubuntu0.25.10.1_source.buildinfo
Original-Maintainer: Debian HAProxy Maintainers <team+haproxy at tracker.debian.org>
Vcs-Git: https://git.launchpad.net/~athos/ubuntu/+source/haproxy
Vcs-Git-Commit: 173810bbc3ac6eea2fc8325244e43f9a36f6f019
Vcs-Git-Ref: refs/heads/MRE-questing-3.0.12


More information about the Questing-changes mailing list