Commit Graph

  • 4b73053dfd add issue references Marcus Rueckert 2022-02-24 13:59:18 +0000
  • d6dc3f675d - Update to version 2.5.3+git0.abf078b15: Marcus Rueckert 2022-02-18 21:47:48 +0000
  • d5b8d4c52e Accepting request 952090 from server:http Dominique Leuenberger 2022-02-09 19:38:31 +0000
  • 9c6dee7c39 Accepting request 951547 from home:gmbr3:Active Thorsten Kukuk 2022-02-07 10:37:58 +0000
  • 6b891986f0 Accepting request 945628 from server:http Dominique Leuenberger 2022-01-12 23:22:08 +0000
  • beaec7a986 - Update to version 2.5.1+git0.86b093a51: Marcus Rueckert 2022-01-11 17:22:09 +0000
  • 63c60381ee Accepting request 934760 from server:http Dominique Leuenberger 2021-12-01 19:46:26 +0000
  • 35ad665cc8 - Update to version 2.5.0+git0.f2e0833f1: https://www.mail-archive.com/haproxy@formilux.org/msg41508.html - refreshed patches to apply cleanly again haproxy-1.6.0-sec-options.patch haproxy-1.6.0_config_haproxy_user.patch lua54.patch Marcus Rueckert 2021-11-23 16:47:06 +0000
  • e368c09966 Accepting request 929060 from server:http Dominique Leuenberger 2021-11-06 17:13:25 +0000
  • 8bb11b8817 - Update to version 2.4.8+git0.d1f8d41e0: Marcus Rueckert 2021-11-03 16:42:10 +0000
  • e370a22381 Accepting request 923022 from server:http Dominique Leuenberger 2021-10-11 13:30:40 +0000
  • 375ea722aa - Update to version 2.4.7+git0.b5e51a5e2: * [RELEASE] Released version 2.4.7 * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule Marcus Rueckert 2021-10-04 13:18:40 +0000
  • b389c9324c - Update to version 2.4.6+git0.d83fd76a1: * [RELEASE] Released version 2.4.6 * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release Marcus Rueckert 2021-10-04 10:25:16 +0000
  • aaa5f3bebd - Update to version 2.4.5+git0.e74a1b34b: Marcus Rueckert 2021-10-01 16:45:41 +0000
  • 930171265e Accepting request 917318 from server:http Dominique Leuenberger 2021-09-13 14:24:10 +0000
  • 67809aa6e7 - Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877) * [RELEASE] Released version 2.4.4 * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive" * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer * CLEANUP: htx: remove comments about "must be < 256 MB" * BUG/MINOR: config: reject configs using HTTP with bufsize >= 256 MB * DOC: configuration: remove wrong tcp-request examples in tcp-response * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser * CLEANUP: Add missing include guard to signal.h * BUG/MINOR: tools: Fix loop condition in dump_text() * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long * MINOR: time: add report_idle() to report process-wide idle time * BUG/MINOR: time: fix idle time computation for long sleeps * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords * MINOR: compiler: implement an ONLY_ONCE() macro * BUG/MINOR: base64: base64urldec() ignores padding in output size check * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec} * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions * MINOR: hlua: take the global Lua lock inside a global function * REGTESTS: abortonclose: after retries, 503 is expected, not close * REGTESTS: http_upgrade: fix incorrect expectation on TCP->H1->H2 * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path Marcus Rueckert 2021-09-07 15:46:15 +0000
  • f43a8942e7 Accepting request 912851 from server:http Dominique Leuenberger 2021-08-23 08:07:40 +0000
  • 426c2a43da add new bugnumbers and CVEs Marcus Rueckert 2021-08-18 08:40:45 +0000
  • a34696f427 - Update to version 2.4.3+git0.4dd5a5a6c: (boo#1189366) Marcus Rueckert 2021-08-17 16:02:03 +0000
  • 656be1403a Accepting request 904653 from server:http Dominique Leuenberger 2021-07-11 23:24:40 +0000
  • 341822f8b5 - Update to version 2.4.2+git0.553dee326: Marcus Rueckert 2021-07-07 23:32:24 +0000
  • 7c76eefdc5 Accepting request 900627 from server:http Dominique Leuenberger 2021-06-24 16:21:58 +0000
  • debd37458a - Update to version 2.4.1+git0.1ce7d4925: Marcus Rueckert 2021-06-17 16:39:25 +0000
  • 7760d2cd73 Accepting request 894761 from server:http Dominique Leuenberger 2021-05-23 21:30:32 +0000
  • ecc24395b9 - Update to version 2.4.0+git0.6cbbecf09: https://www.haproxy.com/blog/announcing-haproxy-2-4/ Marcus Rueckert 2021-05-14 10:30:30 +0000
  • 39d1486a51 Accepting request 889644 from server:http Dominique Leuenberger 2021-05-02 16:35:18 +0000
  • b6784f8e37 - Update to version 2.3.10+git0.4764f0e4e: Marcus Rueckert 2021-04-23 20:36:22 +0000
  • a44e5c2043 Accepting request 882208 from server:http Richard Brown 2021-04-06 15:29:34 +0000
  • 6cbf653a6b - Update to version 2.3.9+git1.afb63bc04: * BUILD: backend: fix build breakage in idle conn locking fix * [RELEASE] Released version 2.3.9 * BUG/MEDIUM: time: make sure to always initialize the global tick * BUG/MINOR: stats: Apply proper styles in HTML status page. * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent Marcus Rueckert 2021-03-30 17:49:45 +0000
  • e43173f9d3 - Update to version 2.3.8+git0.e572195c7: Marcus Rueckert 2021-03-25 15:52:05 +0000
  • ac61b01798 Accepting request 879452 from server:http Richard Brown 2021-03-19 15:39:44 +0000
  • 4ccae67e36 - Update to version 2.3.7+git0.2d39ce334: Marcus Rueckert 2021-03-16 15:27:56 +0000
  • 90cf671721 Accepting request 876563 from server:http Dominique Leuenberger 2021-03-08 14:14:44 +0000
  • 76f82709a9 - Update to version 2.3.6+git0.7851701ed: Marcus Rueckert 2021-03-03 15:17:37 +0000
  • ea473019e8 Accepting request 869992 from server:http Dominique Leuenberger 2021-02-11 11:45:24 +0000
  • 65765c3a3c - Update to version 2.3.5+git0.5902ad99b: Marcus Rueckert 2021-02-06 16:38:44 +0000
  • c54990bb01 Accepting request 868970 from server:http Dominique Leuenberger 2021-02-04 19:23:49 +0000
  • 4b9536a493 Accepting request 867553 from home:gmbr3:Lua Marcus Rueckert 2021-02-03 15:00:09 +0000
  • 4a6baf55c4 Accepting request 862941 from server:http Dominique Leuenberger 2021-01-15 18:45:09 +0000
  • 3e2d4a99ea - Update to version 2.3.4+git0.10189c965: * [RELEASE] Released version 2.3.4 * MINOR: contrib/prometheus-exporter: use fill_info for process dump * MINOR: contrib/prometheus-exporter: avoid connection close header * BUG/MINOR: init: enforce strict-limits when using master-worker * BUG/MINOR: check: Don't perform any check on servers defined in a frontend * BUG/MINOR: sample: Memory leak of sample_expr structure in case of error * Revert "BUG/MINOR: dns: SRV records ignores duplicated AR records" * MINOR: reg-tests: add base prometheus test * BUG/MINOR: reg-tests: fix service dependency script * BUG/MINOR: sample: check alloc_trash_chunk return value in concat() * MINOR: reg-tests: add a way to add service dependency Marcus Rueckert 2021-01-13 16:08:00 +0000
  • b04f7f04e3 - Update to version 2.3.3+git0.9233c2143: Marcus Rueckert 2021-01-08 21:12:25 +0000
  • 50e2caffd3 Accepting request 851927 from server:http Dominique Leuenberger 2020-12-02 12:57:44 +0000
  • 9ca0f86db4 - Update to version 2.3.2+git0.d522db763: * [RELEASE] Released version 2.3.2 * BUG/MINOR: http-fetch: Fix smp_fetch_body() when called from a health-check * DOC: config: Move req.hdrs and req.hdrs_bin in L7 samples fetches section * BUG/MAJOR: tcpcheck: Allocate input and output buffers from the buffer pool * MINOR: tcpcheck: Don't handle anymore in-progress send rules in tcpcheck_main * BUG/MINOR: tcpcheck: Don't forget to reset tcp-check flags on new kind of check * DOC: Clarify %HP description in log-format * DOC: better document the config file format and escaping/quoting rules * BUG/MAJOR: peers: fix partial message decoding * BUG/MEDIUM: http_act: Restore init of log-format list * BUILD: Show the value of DEBUG= in haproxy -vv * BUILD: Make DEBUG part of .build_opts * MINOR: http_act: Add -m flag for del-header name matching method * REGTESTS: converter: add url_dec test * REGTESTS: Add sample_fetches/cook.vtc * DOC: cache: Add new caching limitation information * MEDIUM: cache: Change caching conditions * BUG/MAJOR: filters: Always keep all offsets up to date during data filtering * DOC: better describes how to configure a fallback crt * BUG/MINOR: http_htx: Fix searching headers by substring * BUG/MAJOR: connection: reset conn->owner when detaching from session list * CLEANUP: connection: do not use conn->owner when the session is known * DOC: clarify how to create a fallback crt * BUILD: makefile: enable crypt(3) for OpenBSD * BUG/MEDIUM: ssl/crt-list: fix error when no file found * BUG/MINOR: ssl/crt-list: load bundle in crt-list only if activated * BUG/MEDIUM: ssl: error when no certificate are found * BUG/MEDIUM: ssl/crt-list: bundle support broken in crt-list * BUG/MEDIUM: http-ana: Don't eval http-after-response ruleset on empty messages Marcus Rueckert 2020-11-30 17:04:26 +0000
  • c933930574 - Update to version 2.3.1+git0.bdd7178b8: * [RELEASE] Released version 2.3.1 * REGTEST: make ssl_client_samples and ssl_server_samples require to 2.2 * MINOR: peers: Add traces to peer_treat_updatemsg(). * REGTEST: ssl: mark reg-tests/ssl/ssl_crt-list_filters.vtc as broken * REGTEST: ssl: test wildcard and multi-type + exclusions * MINOR: cfgparse: tighten the scope of newnameserver variable, free it on error. * MINOR: config/mux-h2: Return ERR_ flags from init_h2() instead of a status * MINOR: init: Fix the prototype for per-thread free callbacks * BUG/MINOR: tcpcheck: Don't warn on unused rules if check option is after * MINOR: spoe: Don't close connection in sync mode on processing timeout * BUG/MAJOR: spoe: Be sure to remove all references on a released spoe applet * BUG/MINOR: http-htx: Handle warnings when parsing http-error and http-errors * MINOR: check: report error on incompatible connect proto * MINOR: check: report error on incompatible proto * BUG/MEDIUM: check: reuse srv proto only if using same mode * BUG/MINOR: http-fetch: Fix calls w/o parentheses of the cookie sample fetches * BUG/MINOR: http-fetch: Extract cookie value even when no cookie name * BUG/MEDIUM: peers: fix decoding of multi-byte length in stick-table messages * BUG/MINOR: peers: Missing TX cache entries reset. * BUG/MINOR: peers: Do not ignore a protocol error for dictionary entries. * BUG/MINOR: stats: free dynamically stats fields/lines on shutdown * BUG/MINOR: lua: set buffer size during map lookups * BUG/MINOR: pattern: a sample marked as const could be written Marcus Rueckert 2020-11-13 22:16:32 +0000
  • 0d44384f14 Accepting request 846512 from server:http Dominique Leuenberger 2020-11-10 12:39:10 +0000
  • b714a11eec - Update to version 2.3.0+git4.689d98154: * BUG/MEDIUM: ssl/crt-list: correctly insert crt-list line if crt already loaded Marcus Rueckert 2020-11-06 16:14:41 +0000
  • eefc8dcd32 - Update to version 2.3.0+git3.7a50763d1: * DOC: config: Fix a typo on ssl_c_chain_der * MINOR: http-htx: Add understandable errors for the errorfiles parsing * BUG/MINOR: ssl: don't report 1024 bits DH param load error when it's higher Marcus Rueckert 2020-11-06 13:16:47 +0000
  • 06d388183d - apparmor: do not limit to tcp sockets. haproxy can do udp as well. Marcus Rueckert 2020-11-05 18:56:32 +0000
  • 4e594d7360 - Update to version 2.3.0+git0.1c0a722a8: https://www.haproxy.com/blog/announcing-haproxy-2-3/ for all the details see /usr/share/doc/packages/haproxy/CHANGELOG Marcus Rueckert 2020-11-05 18:10:17 +0000
  • 7119023647 - Update to version 2.2.5+git0.34b2b1066: Marcus Rueckert 2020-11-05 14:49:36 +0000
  • 45919cb461 Accepting request 845120 from server:http Dominique Leuenberger 2020-11-03 14:15:45 +0000
  • 11e00851c5 - apparmor profile: - we need net_admin capability for non local bind and setting "source" for server entries. Marcus Rueckert 2020-11-02 13:16:23 +0000
  • bdec498733 - apparmor profile fixes: - include abstractions that give access to the openssl config, ssl certs and ssl keys - include local configs only with "if exists" so they do not have to exist. - move local files to %ghost Marcus Rueckert 2020-10-24 01:23:11 +0000
  • 93864ed8f3 Accepting request 839173 from server:http Dominique Leuenberger 2020-10-08 11:07:38 +0000
  • 6202e19018 - use parallel build Marcus Rueckert 2020-10-02 14:39:10 +0000
  • 6984675dc8 Accepting request 833032 from server:http Dominique Leuenberger 2020-09-14 10:00:33 +0000
  • c8fd09fbbd - Update to version 2.2.3+git0.0e58a340d: Marcus Rueckert 2020-09-08 15:06:47 +0000
  • ad365afa25 Accepting request 823717 from server:http Dominique Leuenberger 2020-08-03 12:12:25 +0000
  • d045cdaa69 - Update to version 2.2.2+git0.b8a2763d5: * [RELEASE] Released version 2.2.2 * BUG/MEDIUM: tcp-checks: always attach the transport before installing the mux * BUG/MEDIUM: backend: always attach the transport before installing the mux * SCRIPTS: announce-release: add the link to the wiki in the announce messages * MINOR: stream-int: Be sure to have a mux to do sends and receives * MINOR: connection: Preinstall the mux for non-ssl connect * BUG/MEDIUM: connection: Be sure to always install a mux for sync connect * BUG/MINOR: tcp-rules: Set the inspect-delay when a tcp-response action yields * BUG/MINOR: tcp-rules: Preserve the right filter analyser on content eval abort * BUG/MINOR: lua: Abort execution of actions that yield on a final evaluation * BUG/MEDIUM: dns: Don't yield in do-resolve action on a final evaluation * MEDIUM: lua: Add support for the Lua 5.4 * BUG/MAJOR: dns: don't treat Authority records as an error * BUG/MAJOR: dns: fix null pointer dereference in snr_update_srv_status * BUG/MINOR: debug: Don't dump the lua stack if it is not initialized * BUILD: tools: fix build with static only toolchains * BUG/MINOR: mux-fcgi: Don't url-decode the QUERY_STRING parameter anymore Marcus Rueckert 2020-07-31 11:01:08 +0000
  • affdcf53c3 Accepting request 822445 from server:http Dominique Leuenberger 2020-07-26 14:16:06 +0000
  • 328e32a1d6 - Update to version 2.2.1+git0.0ef71a557: * [RELEASE] Released version 2.2.1 * BUG/MEDIUM: http-ana: Only set CF_EXPECT_MORE flag on data filtering * BUG/MEDIUM: stream-int: Don't set MSG_MORE flag if no more data are expected * BUG/MINOR: htx: add two missing HTX_FL_EOI and remove an unexpected one * MEDIUM: htx: Add a flag on a HTX message when no more data are expected * BUG/MEDIUM: dns: Release answer items when a DNS resolution is freed * BUG/MAJOR: dns: Make the do-resolve action thread-safe * BUG/MAJOR: tasks: don't requeue global tasks into the local queue * BUG/MEDIUM: resolve: fix init resolving for ring and peers section. * BUG/MEDIUM: arg: empty args list must be dropped * DOC: ssl: req_ssl_sni needs implicit TLS * BUILD: config: fix again bugs gcc warnings on calloc * BUG/MAJOR: tasks: make sure to always lock the shared wait queue if needed * BUILD: config: address build warning on raspbian+rpi4 * BUG/MEDIUM: channel: Be aware of SHUTW_NOW flag when output data are peeked * BUG/MEDIUM: server: fix possibly uninitialized state file on close * BUG/MEDIUM: server: resolve state file handle leak on reload * BUG/MEDIUM: fcgi-app: fix memory leak in fcgi_flt_http_headers * BUG/MEDIUM: log: issue mixing sampled to not sampled log servers. * BUG/MINOR: mux-fcgi: Set flags on the right stream field for empty FCGI_STDOUT * BUG/MINOR: mux-fcgi: Set conn state to RECORD_P when skipping the record padding * BUG/MINOR: mux-fcgi: Handle empty STDERR record * BUG/MEDIUM: mux-h1: Continue to process request when switching in tunnel mode * BUG/MEDIUM: mux-fcgi: Don't add private connections in available connection list * BUG/MEDIUM: mux-h2: Don't add private connections in available connection list * CONTRIB: da: fix memory leak in dummy function da_atlas_open() * BUG/MEDIUM: lists: add missing store barrier in MT_LIST_ADD/MT_LIST_ADDQ * BUG/MEDIUM: lists: add missing store barrier on MT_LIST_BEHEAD() * BUG/MINOR: sample: Free str.area in smp_check_const_meth Marcus Rueckert 2020-07-23 15:02:58 +0000
  • 5f89a36b21 Accepting request 819260 from server:http Dominique Leuenberger 2020-07-15 09:24:59 +0000
  • c9287944c3 - Update to version 2.2.0+git0.3a00c915f: https://www.haproxy.com/blog/announcing-haproxy-2-2/ * [RELEASE] Released version 2.2.0 * MINOR: version: mention that it's an LTS release now * DOC: minor update to coding style file * DOC: update INSTALL with new compiler versions * CLEANUP: ssl: remove unrelevant comment in smp_fetch_ssl_x_keylog() * DOC: configuration: remove obsolete mentions of H2 being converted to HTTP/1.x * BUG/MINOR: connection: See new connection as available only on reuse always * BUG/MEDIUM: connection: Don't consider new private connections as available * BUG/MINOR: backend: Remove CO_FL_SESS_IDLE if a client remains on the last server * MINOR: mux-h1: Improve traces about the splicing - refreshed patches to apply cleanly again: haproxy-1.6.0-makefile_lib.patch haproxy-1.6.0-sec-options.patch - track series file in source rpm Marcus Rueckert 2020-07-07 15:27:17 +0000
  • 066da5afcd Accepting request 813045 from server:http Dominique Leuenberger 2020-06-11 07:58:13 +0000
  • 1207c16689 - Update to version 2.1.7+git0.8bebf80fb: * [RELEASE] Released version 2.1.7 Marcus Rueckert 2020-06-09 20:28:10 +0000
  • 653b7eeee0 - Update to version 2.1.6+git1.661c88907: * BUG/MAJOR: http-htx: Don't forget to copy error messages from defaults sections Marcus Rueckert 2020-06-08 22:05:55 +0000
  • 2a02a5d671 - Update to version 2.1.6+git0.34db76106: * [RELEASE] Released version 2.1.6 * BUG/MINOR: mworker: fix a memleak when execvp() failed * BUG/MINOR: ssl: fix a trash buffer leak in some error cases * BUG/MEDIUM: mworker: fix the reload with an -- option * BUG/MINOR: init: -S can have a parameter starting with a dash * BUG/MINOR: init: -x can have a parameter starting with a dash * BUG/MEDIUM: mworker: fix the copy of options in copy_argv() * BUG/MEDIUM: contrib/prometheus-exporter: Properly set flags to dump metrics * BUG/MEDIUM: hlua: Lock pattern references to perform set/add/del operations * BUG/MEDIUM: http-htx: Duplicate error messages as raw data instead of string * BUG/MEDIUM: lua: Reset analyse expiration timeout before executing a lua action * BUG/MINOR: peers: fix internal/network key type mapping. * SCRIPTS: publish-release: pass -n to gzip to remove timestamp * Revert "BUG/MEDIUM: connections: force connections cleanup on server changes" Marcus Rueckert 2020-06-08 22:01:42 +0000
  • 6d8bc015e5 Accepting request 810208 from server:http Dominique Leuenberger 2020-06-03 18:29:36 +0000
  • aa43442e9e - Update to version 2.1.5+git0.36e14bd31: Marcus Rueckert 2020-05-29 11:31:18 +0000
  • e9462799c6 Accepting request 794395 from server:http Dominique Leuenberger 2020-04-17 22:27:40 +0000
  • 9b71bf8c52 - use the "profile profilename /path/to/binary" syntax to make "ps aufxZ" more readable Marcus Rueckert 2020-04-15 23:11:37 +0000
  • 554dadd8f5 Accepting request 791753 from server:http Dominique Leuenberger 2020-04-07 08:21:37 +0000
  • 0bd83e4d76 add bugnumbers that werent added to the devel project Marcus Rueckert 2020-04-06 11:31:12 +0000
  • 8ef101d465 Accepting request 790908 from server:http Dominique Leuenberger 2020-04-04 10:20:54 +0000
  • ba3ebe78ca - Update to version 2.1.4+git0.3cfc2f1d9: (boo#1168023) CVE-2020-11100 Marcus Rueckert 2020-04-02 13:29:08 +0000
  • e54ac01865 Accepting request 774671 from server:http Dominique Leuenberger 2020-02-19 11:41:00 +0000
  • 01a99e5686 Accepting request 774367 from home:kukuk:container Marguerite Su 2020-02-16 08:10:04 +0000
  • 051439ae93 - Update to version 2.1.3+git0.5c020bbdd: Marcus Rueckert 2020-02-12 15:42:47 +0000
  • fbc8186248 - Update to version 2.1.2+git0.d5b6759b5: * [RELEASE] Released version 2.1.2 * BUILD: ssl: improve SSL_CTX_set_ecdh_auto compatibility * BUG/MEDIUM: stream: Be sure to never assign a TCP backend to an HTX stream * BUG/MINOR: state-file: do not leak memory on parse errors * BUG/MINOR: state-file: do not store duplicates in the global tree * BUG/MEDIUM: state-file: do not allocate a full buffer for each server entry * BUG/MINOR: ssl: openssl-compat: Fix getm_ defines * BUG/MEDIUM: fd/threads: fix a concurrency issue between add and rm on the same fd * MINOR: fd/threads: make _GET_NEXT()/_GET_PREV() use the volatile attribute * BUG/MEDIUM: ssl: Revamp the way early data are handled. * BUG/MAJOR: task: add a new TASK_SHARED_WQ flag to fix foreing requeuing * MINOR: task: only check TASK_WOKEN_ANY to decide to requeue a task * MINOR: http: add a new "replace-path" action * MINOR: debug: support logging to various sinks * BUG/MEDIUM: ssl: Don't set the max early data we can receive too early. * MINOR: sample: Validate the number of bits for the sha2 converter * BUG/MINOR: sample: always check converters' arguments * BUG/MINOR: sample: fix the closing bracket and LF in the debug converter * DOC: clarify the fact that replace-uri works on a full URI Marcus Rueckert 2020-02-07 12:48:28 +0000
  • 10ce703ea7 Accepting request 766597 from server:http Dominique Leuenberger 2020-01-26 23:21:21 +0000
  • 65d319ff40 Accepting request 766595 from home:dimstar:Factory Marguerite Su 2020-01-23 13:14:40 +0000
  • 633d83d76f Accepting request 757905 from server:http Dominique Leuenberger 2019-12-23 21:39:22 +0000
  • daef8935ae - Update to version 2.1.1+git0.4ae521379: * [RELEASE] Released version 2.1.1 * BUILD/MINOR: unix sockets: silence an absurd gcc warning about strncpy() * BUG/MINOR: listener: fix off-by-one in state name check * BUG/MINOR: server: make "agent-addr" work on default-server line * BUG/MINOR: listener: do not immediately resume on transient error * BUG/MINOR: mworker: properly pass SIGTTOU/SIGTTIN to workers * BUG/MINOR: log: fix minor resource leaks on logformat error path * DOC: remove references to the outdated architecture.txt * DOC: proxies: HAProxy only supports 3 connection modes * BUG/MINOR: tasks: only requeue a task if it was already in the queue * DOC: listeners: add a few missing transitions Marcus Rueckert 2019-12-11 17:08:16 +0000
  • d93710a12c Accepting request 754451 from server:http Dominique Leuenberger 2019-12-11 11:02:32 +0000
  • 9541e980ce - Update to version 2.1.0+git33.8e4a62508: * BUG/MEDIUM: proto_udp/threads: recv() and send() must not be exclusive. * BUG/MAJOR: dns: add minimalist error processing on the Rx path * BUG/MEDIUM: kqueue: Make sure we report read events even when no data. * DOC: document the listener state transitions * BUG/MEDIUM: listener/threads: fix a remaining race in the listener's accept() * BUG/MINOR: listener: also clear the error flag on a paused listener * BUG/MINOR: listener/threads: always use atomic ops to clear the FD events * BUG/MINOR: proxy: make soft_stop() also close FDs in LI_PAUSED state * BUG/MEDIUM: mux-fcgi: Handle cases where the HTX EOM block cannot be inserted * BUG/MINOR: mux-h1: Be sure to set CS_FL_WANT_ROOM when EOM can't be added Marcus Rueckert 2019-12-10 19:29:45 +0000
  • 3e55266962 - Update to version 2.1.0+git23.e77b108cd: * BUG/MEDIUM: checks: Make sure we set the task affinity just before connecting. * BUG/MEDIUM: tasks: Make sure we switch wait queues in task_set_affinity(). Marcus Rueckert 2019-12-06 15:44:20 +0000
  • 4b2faccf62 - Update to version 2.1.0+git21.67ff2112b: * BUG/MINOR: mux-h1: Fix conditions to know whether or not we may receive data * BUG/MINOR: mux-h1: Don't rely on CO_FL_SOCK_RD_SH to set H1C_F_CS_SHUTDOWN * BUG/MEDIUM: mux-h1: Never reuse H1 connection if a shutw is pending * BUG/MINOR: ssl: certificate choice can be unexpected with openssl >= 1.1.1 * BUG/MEDIUM: listener/thread: fix a race when pausing a listener * BUG/MINOR: ssl/cli: don't overwrite the filters variable * BUG/MINOR: stream-int: avoid calling rcv_buf() when splicing is still possible * BUG/MEDIUM: stream-int: don't subscribed for recv when we're trying to flush data * DOC: move the "group" keyword at the right place * DOC: Fix ordered list in summary Marcus Rueckert 2019-12-05 15:50:30 +0000
  • a3cff431a4 - Update to version 2.0.10+git14.7caf150a: * BUG/MINOR: mux-h1: Fix conditions to know whether or not we may receive data * BUG/MINOR: mux-h1: Don't rely on CO_FL_SOCK_RD_SH to set H1C_F_CS_SHUTDOWN * BUG/MEDIUM: mux-h1: Never reuse H1 connection if a shutw is pending * BUG/MINOR: ssl: certificate choice can be unexpected with openssl >= 1.1.1 * BUG/MEDIUM: listener/thread: fix a race when pausing a listener * BUG/MINOR: stream-int: avoid calling rcv_buf() when splicing is still possible * BUG/MEDIUM: stream-int: don't subscribed for recv when we're trying to flush data * DOC: move the "group" keyword at the right place * DOC: clarify matching strings on binary fetches * DOC: Clarify behavior of server maxconn in HTTP mode Marcus Rueckert 2019-12-05 15:38:20 +0000
  • b5054175fe - Update to version 2.0.10+git4.6d9a455d: * BUG/MINOR: http-htx: Don't make http_find_header() fail if the value is empty Marcus Rueckert 2019-11-29 13:44:34 +0000
  • 792a076089 - Update to version 2.0.10+git3.200c6215: * BUG/MINOR: contrib/prometheus-exporter: decode parameter and value only Marcus Rueckert 2019-11-28 16:08:41 +0000
  • 576cb54390 - Update to version 2.0.10+git2.3a00e5fc: * BUG/MINOR: contrib/prometheus-exporter: Use HTX errors and not legacy ones * BUG/MINOR: stream: init variables when the list is empty Marcus Rueckert 2019-11-27 11:53:27 +0000
  • 77c488d77c Accepting request 750840 from server:http Dominique Leuenberger 2019-11-26 16:01:56 +0000
  • 2f7b766fc1 - Update to version 2.0.10+git0.ac198b92: * [RELEASE] Released version 2.0.10 * SCRIPTS: git-show-backports: add "-s" to proposed cherry-pick commands * SCRIPTS: create-release: show the correct origin name in suggested commands * BUG/MAJOR: mux-h2: don't try to decode a response HEADERS frame in idle state * BUG/MAJOR: h2: make header field name filtering stronger * BUG/MAJOR: h2: reject header values containing invalid chars * MINOR: ist: add ist_find_ctl() * BUG/MINOR: ssl: fix curve setup with LibreSSL * BUG/MINOR: cli: fix out of bounds in -S parser * DOC: Add documentation about the use-service action * DOC: Add missing stats fields in the management manual * BUG/MINOR: mux-h1: Adjust header case when chunked encoding is add to a message * BUG/MINOR: mux-h1: Fix a UAF in cfg_h1_headers_case_adjust_postparser() * MEDIUM: mux-h1: Add the support of headers adjustment for bogus HTTP/1 apps * REGTEST: vtest can now enable mcli with its own flag * MINOR: stats: Report max times in addition of the averages for sessions * BUG/MINOR: stream-int: Fix si_cs_recv() return value * MINOR: contrib/prometheus-exporter: Add a param to ignore servers in maintenance * MINOR: contrib/prometheus-exporter: filter exported metrics by scope * MINOR: contrib/prometheus-exporter: report the number of idle conns per server * BUG/MINOR: contrib/prometheus-exporter: Rename some metrics * MINOR: contrib/prometheus-exporter: Report metrics about max times for sessions * MINOR: counters: Add fields to store the max observed for {q,c,d,t}_time * MINOR: stream: Remove the lock on the proxy to update time stats * MINOR: freq_ctr: Make the sliding window sums thread-safe * BUG/MINOR: http-ana: Properly catch aborts during the payload forwarding * BUG/MINOR: mux-h1: Fix tunnel mode detection on the response path * BUILD: debug: Avoid warnings in dev mode with -02 because of some BUG_ON tests * BUG/MEDIUM: stream-int: Don't loose events on the CS when an EOS is reported * BUILD/MINOR: ssl: fix compiler warning about useless statement * BUG/MINOR: peers: "peer alive" flag not reset when deconnecting. * BUG/MEDIUM: mworker: don't fill the -sf argument with -1 during the reexec Marcus Rueckert 2019-11-25 20:12:37 +0000
  • 8d13208d60 Fix wrong CVE number Ismail Dönmez 2019-11-25 17:33:22 +0000
  • 8938e79583 Merge with maintenance changelog Ismail Dönmez 2019-11-25 16:52:41 +0000
  • 5faa04e97e Accepting request 750309 from server:http Dominique Leuenberger 2019-11-23 23:32:30 +0000
  • 83d316d6e2 - Ismail Dönmez 2019-11-22 13:55:34 +0000
  • 8f23fd1c65 Add missing CVE Ismail Dönmez 2019-11-22 13:54:15 +0000
  • 31b9347df5 Accepting request 749635 from server:http Dominique Leuenberger 2019-11-21 11:57:43 +0000
  • 86577882a0 - Update to version 2.0.9+git6.26b7b800: * BUG/MINOR: ssl: fix crt-list neg filter for openssl < 1.1.1 * BUG/MINOR: peers: Wrong null "server_name" data field handling. * MINOR: peers: Add debugging information to "show peers". * MINOR: peers: Add TX/RX heartbeat counters. * MINOR: peers: Alway show the table info for disconnected peers. Marcus Rueckert 2019-11-19 14:18:27 +0000