SHA256
1
0
forked from pool/haproxy
Commit Graph

72 Commits

Author SHA256 Message Date
b6784f8e37 - Update to version 2.3.10+git0.4764f0e4e:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=243
2021-04-23 20:36:22 +00:00
6cbf653a6b - Update to version 2.3.9+git1.afb63bc04:
* BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=242
2021-03-30 17:49:45 +00:00
e43173f9d3 - Update to version 2.3.8+git0.e572195c7:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=241
2021-03-25 15:52:05 +00:00
4ccae67e36 - Update to version 2.3.7+git0.2d39ce334:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=240
2021-03-16 15:27:56 +00:00
76f82709a9 - Update to version 2.3.6+git0.7851701ed:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=239
2021-03-03 15:17:37 +00:00
65765c3a3c - Update to version 2.3.5+git0.5902ad99b:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=238
2021-02-06 16:38:44 +00:00
3e2d4a99ea - Update to version 2.3.4+git0.10189c965:
* [RELEASE] Released version 2.3.4
  * MINOR: contrib/prometheus-exporter: use fill_info for process dump
  * MINOR: contrib/prometheus-exporter: avoid connection close header
  * BUG/MINOR: init: enforce strict-limits when using master-worker
  * BUG/MINOR: check: Don't perform any check on servers defined in a frontend
  * BUG/MINOR: sample: Memory leak of sample_expr structure in case of error
  * Revert "BUG/MINOR: dns: SRV records ignores duplicated AR records"
  * MINOR: reg-tests: add base prometheus test
  * BUG/MINOR: reg-tests: fix service dependency script
  * BUG/MINOR: sample: check alloc_trash_chunk return value in concat()
  * MINOR: reg-tests: add a way to add service dependency

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=236
2021-01-13 16:08:00 +00:00
b04f7f04e3 - Update to version 2.3.3+git0.9233c2143:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=235
2021-01-08 21:12:25 +00:00
9ca0f86db4 - Update to version 2.3.2+git0.d522db763:
* [RELEASE] Released version 2.3.2
  * BUG/MINOR: http-fetch: Fix smp_fetch_body() when called from a health-check
  * DOC: config: Move req.hdrs and req.hdrs_bin in L7 samples fetches section
  * BUG/MAJOR: tcpcheck: Allocate input and output buffers from the buffer pool
  * MINOR: tcpcheck: Don't handle anymore in-progress send rules in tcpcheck_main
  * BUG/MINOR: tcpcheck: Don't forget to reset tcp-check flags on new kind of check
  * DOC: Clarify %HP description in log-format
  * DOC: better document the config file format and escaping/quoting rules
  * BUG/MAJOR: peers: fix partial message decoding
  * BUG/MEDIUM: http_act: Restore init of log-format list
  * BUILD: Show the value of DEBUG= in haproxy -vv
  * BUILD: Make DEBUG part of .build_opts
  * MINOR: http_act: Add -m flag for del-header name matching method
  * REGTESTS: converter: add url_dec test
  * REGTESTS: Add sample_fetches/cook.vtc
  * DOC: cache: Add new caching limitation information
  * MEDIUM: cache: Change caching conditions
  * BUG/MAJOR: filters: Always keep all offsets up to date during data filtering
  * DOC: better describes how to configure a fallback crt
  * BUG/MINOR: http_htx: Fix searching headers by substring
  * BUG/MAJOR: connection: reset conn->owner when detaching from session list
  * CLEANUP: connection: do not use conn->owner when the session is known
  * DOC: clarify how to create a fallback crt
  * BUILD: makefile: enable crypt(3) for OpenBSD
  * BUG/MEDIUM: ssl/crt-list: fix error when no file found
  * BUG/MINOR: ssl/crt-list: load bundle in crt-list only if activated
  * BUG/MEDIUM: ssl: error when no certificate are found
  * BUG/MEDIUM: ssl/crt-list: bundle support broken in crt-list
  * BUG/MEDIUM: http-ana: Don't eval http-after-response ruleset on empty messages

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=234
2020-11-30 17:04:26 +00:00
c933930574 - Update to version 2.3.1+git0.bdd7178b8:
* [RELEASE] Released version 2.3.1
  * REGTEST: make ssl_client_samples and ssl_server_samples require to 2.2
  * MINOR: peers: Add traces to peer_treat_updatemsg().
  * REGTEST: ssl: mark reg-tests/ssl/ssl_crt-list_filters.vtc as broken
  * REGTEST: ssl: test wildcard and multi-type + exclusions
  * MINOR: cfgparse: tighten the scope of newnameserver variable, free it on error.
  * MINOR: config/mux-h2: Return ERR_ flags from init_h2() instead of a status
  * MINOR: init: Fix the prototype for per-thread free callbacks
  * BUG/MINOR: tcpcheck: Don't warn on unused rules if check option is after
  * MINOR: spoe: Don't close connection in sync mode on processing timeout
  * BUG/MAJOR: spoe: Be sure to remove all references on a released spoe applet
  * BUG/MINOR: http-htx: Handle warnings when parsing http-error and http-errors
  * MINOR: check: report error on incompatible connect proto
  * MINOR: check: report error on incompatible proto
  * BUG/MEDIUM: check: reuse srv proto only if using same mode
  * BUG/MINOR: http-fetch: Fix calls w/o parentheses of the cookie sample fetches
  * BUG/MINOR: http-fetch: Extract cookie value even when no cookie name
  * BUG/MEDIUM: peers: fix decoding of multi-byte length in stick-table messages
  * BUG/MINOR: peers: Missing TX cache entries reset.
  * BUG/MINOR: peers: Do not ignore a protocol error for dictionary entries.
  * BUG/MINOR: stats: free dynamically stats fields/lines on shutdown
  * BUG/MINOR: lua: set buffer size during map lookups
  * BUG/MINOR: pattern: a sample marked as const could be written

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=233
2020-11-13 22:16:32 +00:00
b714a11eec - Update to version 2.3.0+git4.689d98154:
* BUG/MEDIUM: ssl/crt-list: correctly insert crt-list line if crt already loaded

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=232
2020-11-06 16:14:41 +00:00
eefc8dcd32 - Update to version 2.3.0+git3.7a50763d1:
* DOC: config: Fix a typo on ssl_c_chain_der
  * MINOR: http-htx: Add understandable errors for the errorfiles parsing
  * BUG/MINOR: ssl: don't report 1024 bits DH param load error when it's higher

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=231
2020-11-06 13:16:47 +00:00
4e594d7360 - Update to version 2.3.0+git0.1c0a722a8:
https://www.haproxy.com/blog/announcing-haproxy-2-3/
  for all the details see
  /usr/share/doc/packages/haproxy/CHANGELOG

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=229
2020-11-05 18:10:17 +00:00
7119023647 - Update to version 2.2.5+git0.34b2b1066:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=228
2020-11-05 14:49:36 +00:00
6202e19018 - use parallel build
- Update to version 2.2.4+git0.de456726d:

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=225
2020-10-02 14:39:10 +00:00
c8fd09fbbd - Update to version 2.2.3+git0.0e58a340d:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=224
2020-09-08 15:06:47 +00:00
d045cdaa69 - Update to version 2.2.2+git0.b8a2763d5:
* [RELEASE] Released version 2.2.2
  * BUG/MEDIUM: tcp-checks: always attach the transport before installing the mux
  * BUG/MEDIUM: backend: always attach the transport before installing the mux
  * SCRIPTS: announce-release: add the link to the wiki in the announce messages
  * MINOR: stream-int: Be sure to have a mux to do sends and receives
  * MINOR: connection: Preinstall the mux for non-ssl connect
  * BUG/MEDIUM: connection: Be sure to always install a mux for sync connect
  * BUG/MINOR: tcp-rules: Set the inspect-delay when a tcp-response action yields
  * BUG/MINOR: tcp-rules: Preserve the right filter analyser on content eval abort
  * BUG/MINOR: lua: Abort execution of actions that yield on a final evaluation
  * BUG/MEDIUM: dns: Don't yield in do-resolve action on a final evaluation
  * MEDIUM: lua: Add support for the Lua 5.4
  * BUG/MAJOR: dns: don't treat Authority records as an error
  * BUG/MAJOR: dns: fix null pointer dereference in snr_update_srv_status
  * BUG/MINOR: debug: Don't dump the lua stack if it is not initialized
  * BUILD: tools: fix build with static only toolchains
  * BUG/MINOR: mux-fcgi: Don't url-decode the QUERY_STRING parameter anymore

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=223
2020-07-31 11:01:08 +00:00
328e32a1d6 - Update to version 2.2.1+git0.0ef71a557:
* [RELEASE] Released version 2.2.1
  * BUG/MEDIUM: http-ana: Only set CF_EXPECT_MORE flag on data filtering
  * BUG/MEDIUM: stream-int: Don't set MSG_MORE flag if no more data are expected
  * BUG/MINOR: htx: add two missing HTX_FL_EOI and remove an unexpected one
  * MEDIUM: htx: Add a flag on a HTX message when no more data are expected
  * BUG/MEDIUM: dns: Release answer items when a DNS resolution is freed
  * BUG/MAJOR: dns: Make the do-resolve action thread-safe
  * BUG/MAJOR: tasks: don't requeue global tasks into the local queue
  * BUG/MEDIUM: resolve: fix init resolving for ring and peers section.
  * BUG/MEDIUM: arg: empty args list must be dropped
  * DOC: ssl: req_ssl_sni needs implicit TLS
  * BUILD: config: fix again bugs gcc warnings on calloc
  * BUG/MAJOR: tasks: make sure to always lock the shared wait queue if needed
  * BUILD: config: address build warning on raspbian+rpi4
  * BUG/MEDIUM: channel: Be aware of SHUTW_NOW flag when output data are peeked
  * BUG/MEDIUM: server: fix possibly uninitialized state file on close
  * BUG/MEDIUM: server: resolve state file handle leak on reload
  * BUG/MEDIUM: fcgi-app: fix memory leak in fcgi_flt_http_headers
  * BUG/MEDIUM: log: issue mixing sampled to not sampled log servers.
  * BUG/MINOR: mux-fcgi: Set flags on the right stream field for empty FCGI_STDOUT
  * BUG/MINOR: mux-fcgi: Set conn state to RECORD_P when skipping the record padding
  * BUG/MINOR: mux-fcgi: Handle empty STDERR record
  * BUG/MEDIUM: mux-h1: Continue to process request when switching in tunnel mode
  * BUG/MEDIUM: mux-fcgi: Don't add private connections in available connection list
  * BUG/MEDIUM: mux-h2: Don't add private connections in available connection list
  * CONTRIB: da: fix memory leak in dummy function da_atlas_open()
  * BUG/MEDIUM: lists: add missing store barrier in MT_LIST_ADD/MT_LIST_ADDQ
  * BUG/MEDIUM: lists: add missing store barrier on MT_LIST_BEHEAD()
  * BUG/MINOR: sample: Free str.area in smp_check_const_meth

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=222
2020-07-23 15:02:58 +00:00
c9287944c3 - Update to version 2.2.0+git0.3a00c915f:
https://www.haproxy.com/blog/announcing-haproxy-2-2/
  * [RELEASE] Released version 2.2.0
  * MINOR: version: mention that it's an LTS release now
  * DOC: minor update to coding style file
  * DOC: update INSTALL with new compiler versions
  * CLEANUP: ssl: remove unrelevant comment in smp_fetch_ssl_x_keylog()
  * DOC: configuration: remove obsolete mentions of H2 being converted to HTTP/1.x
  * BUG/MINOR: connection: See new connection as available only on reuse always
  * BUG/MEDIUM: connection: Don't consider new private connections as available
  * BUG/MINOR: backend: Remove CO_FL_SESS_IDLE if a client remains on the last server
  * MINOR: mux-h1: Improve traces about the splicing
- refreshed patches to apply cleanly again:
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
- track series file in source rpm

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=221
2020-07-07 15:27:17 +00:00
1207c16689 - Update to version 2.1.7+git0.8bebf80fb:
* [RELEASE] Released version 2.1.7

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=220
2020-06-09 20:28:10 +00:00
653b7eeee0 - Update to version 2.1.6+git1.661c88907:
* BUG/MAJOR: http-htx: Don't forget to copy error messages from defaults sections

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=219
2020-06-08 22:05:55 +00:00
2a02a5d671 - Update to version 2.1.6+git0.34db76106:
* [RELEASE] Released version 2.1.6
  * BUG/MINOR: mworker: fix a memleak when execvp() failed
  * BUG/MINOR: ssl: fix a trash buffer leak in some error cases
  * BUG/MEDIUM: mworker: fix the reload with an -- option
  * BUG/MINOR: init: -S can have a parameter starting with a dash
  * BUG/MINOR: init: -x can have a parameter starting with a dash
  * BUG/MEDIUM: mworker: fix the copy of options in copy_argv()
  * BUG/MEDIUM: contrib/prometheus-exporter: Properly set flags to dump metrics
  * BUG/MEDIUM: hlua: Lock pattern references to perform set/add/del operations
  * BUG/MEDIUM: http-htx: Duplicate error messages as raw data instead of string
  * BUG/MEDIUM: lua: Reset analyse expiration timeout before executing a lua action
  * BUG/MINOR: peers: fix internal/network key type mapping.
  * SCRIPTS: publish-release: pass -n to gzip to remove timestamp
  * Revert "BUG/MEDIUM: connections: force connections cleanup on server changes"

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=218
2020-06-08 22:01:42 +00:00
aa43442e9e - Update to version 2.1.5+git0.36e14bd31:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=217
2020-05-29 11:31:18 +00:00
ba3ebe78ca - Update to version 2.1.4+git0.3cfc2f1d9: (boo#1168023) CVE-2020-11100
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=214
2020-04-02 13:29:08 +00:00
051439ae93 - Update to version 2.1.3+git0.5c020bbdd:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=212
2020-02-12 15:42:47 +00:00
fbc8186248 - Update to version 2.1.2+git0.d5b6759b5:
* [RELEASE] Released version 2.1.2
  * BUILD: ssl: improve SSL_CTX_set_ecdh_auto compatibility
  * BUG/MEDIUM: stream: Be sure to never assign a TCP backend to an HTX stream
  * BUG/MINOR: state-file: do not leak memory on parse errors
  * BUG/MINOR: state-file: do not store duplicates in the global tree
  * BUG/MEDIUM: state-file: do not allocate a full buffer for each server entry
  * BUG/MINOR: ssl: openssl-compat: Fix getm_ defines
  * BUG/MEDIUM: fd/threads: fix a concurrency issue between add and rm on the same fd
  * MINOR: fd/threads: make _GET_NEXT()/_GET_PREV() use the volatile attribute
  * BUG/MEDIUM: ssl: Revamp the way early data are handled.
  * BUG/MAJOR: task: add a new TASK_SHARED_WQ flag to fix foreing requeuing
  * MINOR: task: only check TASK_WOKEN_ANY to decide to requeue a task
  * MINOR: http: add a new "replace-path" action
  * MINOR: debug: support logging to various sinks
  * BUG/MEDIUM: ssl: Don't set the max early data we can receive too early.
  * MINOR: sample: Validate the number of bits for the sha2 converter
  * BUG/MINOR: sample: always check converters' arguments
  * BUG/MINOR: sample: fix the closing bracket and LF in the debug converter
  * DOC: clarify the fact that replace-uri works on a full URI

- drop the udev buildrequires completely

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=211
2020-02-07 12:48:28 +00:00
daef8935ae - Update to version 2.1.1+git0.4ae521379:
* [RELEASE] Released version 2.1.1
  * BUILD/MINOR: unix sockets: silence an absurd gcc warning about strncpy()
  * BUG/MINOR: listener: fix off-by-one in state name check
  * BUG/MINOR: server: make "agent-addr" work on default-server line
  * BUG/MINOR: listener: do not immediately resume on transient error
  * BUG/MINOR: mworker: properly pass SIGTTOU/SIGTTIN to workers
  * BUG/MINOR: log: fix minor resource leaks on logformat error path
  * DOC: remove references to the outdated architecture.txt
  * DOC: proxies: HAProxy only supports 3 connection modes
  * BUG/MINOR: tasks: only requeue a task if it was already in the queue
  * DOC: listeners: add a few missing transitions

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=209
2019-12-11 17:08:16 +00:00
9541e980ce - Update to version 2.1.0+git33.8e4a62508:
* BUG/MEDIUM: proto_udp/threads: recv() and send() must not be exclusive.
  * BUG/MAJOR: dns: add minimalist error processing on the Rx path
  * BUG/MEDIUM: kqueue: Make sure we report read events even when no data.
  * DOC: document the listener state transitions
  * BUG/MEDIUM: listener/threads: fix a remaining race in the listener's accept()
  * BUG/MINOR: listener: also clear the error flag on a paused listener
  * BUG/MINOR: listener/threads: always use atomic ops to clear the FD events
  * BUG/MINOR: proxy: make soft_stop() also close FDs in LI_PAUSED state
  * BUG/MEDIUM: mux-fcgi: Handle cases where the HTX EOM block cannot be inserted
  * BUG/MINOR: mux-h1: Be sure to set CS_FL_WANT_ROOM when EOM can't be added

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=208
2019-12-10 19:29:45 +00:00
3e55266962 - Update to version 2.1.0+git23.e77b108cd:
* BUG/MEDIUM: checks: Make sure we set the task affinity just before connecting.
  * BUG/MEDIUM: tasks: Make sure we switch wait queues in task_set_affinity().

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=207
2019-12-06 15:44:20 +00:00
4b2faccf62 - Update to version 2.1.0+git21.67ff2112b:
* BUG/MINOR: mux-h1: Fix conditions to know whether or not we may receive data
  * BUG/MINOR: mux-h1: Don't rely on CO_FL_SOCK_RD_SH to set H1C_F_CS_SHUTDOWN
  * BUG/MEDIUM: mux-h1: Never reuse H1 connection if a shutw is pending
  * BUG/MINOR: ssl: certificate choice can be unexpected with openssl >= 1.1.1
  * BUG/MEDIUM: listener/thread: fix a race when pausing a listener
  * BUG/MINOR: ssl/cli: don't overwrite the filters variable
  * BUG/MINOR: stream-int: avoid calling rcv_buf() when splicing is still possible
  * BUG/MEDIUM: stream-int: don't subscribed for recv when we're trying to flush data
  * DOC: move the "group" keyword at the right place
  * DOC: Fix ordered list in summary

- switch to the 2.1 branch
  https://www.haproxy.com/blog/haproxy-2-1/
  https://www.mail-archive.com/haproxy@formilux.org/msg35491.html

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=206
2019-12-05 15:50:30 +00:00
a3cff431a4 - Update to version 2.0.10+git14.7caf150a:
* BUG/MINOR: mux-h1: Fix conditions to know whether or not we may receive data
  * BUG/MINOR: mux-h1: Don't rely on CO_FL_SOCK_RD_SH to set H1C_F_CS_SHUTDOWN
  * BUG/MEDIUM: mux-h1: Never reuse H1 connection if a shutw is pending
  * BUG/MINOR: ssl: certificate choice can be unexpected with openssl >= 1.1.1
  * BUG/MEDIUM: listener/thread: fix a race when pausing a listener
  * BUG/MINOR: stream-int: avoid calling rcv_buf() when splicing is still possible
  * BUG/MEDIUM: stream-int: don't subscribed for recv when we're trying to flush data
  * DOC: move the "group" keyword at the right place
  * DOC: clarify matching strings on binary fetches
  * DOC: Clarify behavior of server maxconn in HTTP mode

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=205
2019-12-05 15:38:20 +00:00
b5054175fe - Update to version 2.0.10+git4.6d9a455d:
* BUG/MINOR: http-htx: Don't make http_find_header() fail if the value is empty

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=204
2019-11-29 13:44:34 +00:00
792a076089 - Update to version 2.0.10+git3.200c6215:
* BUG/MINOR: contrib/prometheus-exporter: decode parameter and value only

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=203
2019-11-28 16:08:41 +00:00
576cb54390 - Update to version 2.0.10+git2.3a00e5fc:
* BUG/MINOR: contrib/prometheus-exporter: Use HTX errors and not legacy ones
  * BUG/MINOR: stream: init variables when the list is empty

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=202
2019-11-27 11:53:27 +00:00
2f7b766fc1 - Update to version 2.0.10+git0.ac198b92:
* [RELEASE] Released version 2.0.10
  * SCRIPTS: git-show-backports: add "-s" to proposed cherry-pick commands
  * SCRIPTS: create-release: show the correct origin name in suggested commands
  * BUG/MAJOR: mux-h2: don't try to decode a response HEADERS frame in idle state
  * BUG/MAJOR: h2: make header field name filtering stronger
  * BUG/MAJOR: h2: reject header values containing invalid chars
  * MINOR: ist: add ist_find_ctl()
  * BUG/MINOR: ssl: fix curve setup with LibreSSL
  * BUG/MINOR: cli: fix out of bounds in -S parser
  * DOC: Add documentation about the use-service action
  * DOC: Add missing stats fields in the management manual
  * BUG/MINOR: mux-h1: Adjust header case when chunked encoding is add to a message
  * BUG/MINOR: mux-h1: Fix a UAF in cfg_h1_headers_case_adjust_postparser()
  * MEDIUM: mux-h1: Add the support of headers adjustment for bogus HTTP/1 apps
  * REGTEST: vtest can now enable mcli with its own flag
  * MINOR: stats: Report max times in addition of the averages for sessions
  * BUG/MINOR: stream-int: Fix si_cs_recv() return value
  * MINOR: contrib/prometheus-exporter: Add a param to ignore servers in maintenance
  * MINOR: contrib/prometheus-exporter: filter exported metrics by scope
  * MINOR: contrib/prometheus-exporter: report the number of idle conns per server
  * BUG/MINOR: contrib/prometheus-exporter: Rename some metrics
  * MINOR: contrib/prometheus-exporter: Report metrics about max times for sessions
  * MINOR: counters: Add fields to store the max observed for {q,c,d,t}_time
  * MINOR: stream: Remove the lock on the proxy to update time stats
  * MINOR: freq_ctr: Make the sliding window sums thread-safe
  * BUG/MINOR: http-ana: Properly catch aborts during the payload forwarding
  * BUG/MINOR: mux-h1: Fix tunnel mode detection on the response path
  * BUILD: debug: Avoid warnings in dev mode with -02 because of some BUG_ON tests
  * BUG/MEDIUM: stream-int: Don't loose events on the CS when an EOS is reported
  * BUILD/MINOR: ssl: fix compiler warning about useless statement
  * BUG/MINOR: peers: "peer alive" flag not reset when deconnecting.
  * BUG/MEDIUM: mworker: don't fill the -sf argument with -1 during the reexec

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=201
2019-11-25 20:12:37 +00:00
86577882a0 - Update to version 2.0.9+git6.26b7b800:
* BUG/MINOR: ssl: fix crt-list neg filter for openssl < 1.1.1
  * BUG/MINOR: peers: Wrong null "server_name" data field handling.
  * MINOR: peers: Add debugging information to "show peers".
  * MINOR: peers: Add TX/RX heartbeat counters.
  * MINOR: peers: Alway show the table info for disconnected peers.

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=196
2019-11-19 14:18:27 +00:00
590a165c90 - Update to version 2.0.9+git1.caf02113:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=195
2019-11-19 13:57:11 +00:00
Marguerite Su
452ad474ed Accepting request 735623 from home:KGronlund:branches:server:http
Update to 2.0.7

OBS-URL: https://build.opensuse.org/request/show/735623
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=194
2019-10-07 08:34:05 +00:00
Kristoffer Gronlund
04b5e98275 Accepting request 731948 from home:KGronlund:branches:server:http
- Update to version 2.0.6+git0.58706ab4:
  * [RELEASE] Released version 2.0.6
  * MINOR: sample: Add UUID-fetch
  * BUG/MINOR: Missing stat_field_names (since f21d17bb)
  * BUG/MINOR: backend: Fix a possible null pointer dereference
  * BUG/MINOR: acl: Fix memory leaks when an ACL expression is parsed
  * BUG/MINOR: filters: Properly set the HTTP status code on analysis error
  * BUG/MEDIUM: http: also reject messages where "chunked" is missing from transfer-enoding
  * BUG/MINOR: ssl: always check for ssl connection before getting its XPRT context
  * BUG/MINOR: listener: Fix a possible null pointer dereference
  * MINOR: stats: report the number of idle connections for each server
  * BUG/MEDIUM: connection: don't keep more idle connections than ever needed
  * BUG/MAJOR: ssl: ssl_sock was not fully initialized.
  * BUG/MINOR: lb/leastconn: ignore the server weights for empty servers
  * MINOR: contrib/prometheus-exporter: Report DRAIN/MAINT/NOLB status for servers
  * BUG/MINOR: checks: do not uselessly poll for reads before the connection is up
  * BUG/MINOR: checks: make __event_chk_srv_r() report success before closing
  * BUG/MINOR: checks: start sending the request right after connect()
  * BUG/MINOR: checks: stop polling for write when we have nothing left to send
  * BUG/MEDIUM: cache: Don't cache objects if the size of headers is too big
  * BUG/MEDIUM: cache: Properly copy headers splitted on several shctx blocks
  * BUG/MINOR: mux-h1: Be sure to update the count before adding EOM after trailers
  * BUG/MINOR: mux-h1: Don't stop anymore input processing when the max is reached
  * BUG/MINOR: mux-h1: Fix size evaluation of HTX messages after headers parsing
  * BUG/MINOR: h1: Properly reset h1m when parsing is restarted
  * BUG/MINOR: http-ana: Reset response flags when 1xx messages are handled
  * BUG/MEDIUM: peers: local peer socket not bound.
  * BUG/MEDIUM: proto-http: Always start the parsing if there is no outgoing data
  * BUG/MEDIUM: url32 does not take the path part into account in the returned hash.
  * BUG/MEDIUM: listener/threads: fix an AB/BA locking issue in delete_listener()

OBS-URL: https://build.opensuse.org/request/show/731948
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=193
2019-09-19 12:20:44 +00:00
0852a3b9d8 - Update to version 2.0.5+git0.d905f49a:
* [RELEASE] Released version 2.0.5
  * BUG/MEDIUM: mux_pt: Don't call unsubscribe if we did not subscribe.
  * MINOR: fd: make sure to mark the thread as not stuck in fd_update_events()
  * BUG/MINOR: stats: Wait the body before processing POST requests
  * BUG/MEDIUM: lua: Fix test on the direction to set the channel exp timeout
  * BUG/MEDIUM: mux_h1: Don't bother subscribing in recv if we're not connected.
  * BUG/MINOR: Fix prometheus '# TYPE' and '# HELP' headers
  * BUG/MINOR: lua: fix setting netfilter mark
  * BUG/MEDIUM: proxy: Don't use cs_destroy() when freeing the conn_stream.
  * BUG/MEDIUM: proxy: Don't forget the SF_HTX flag when upgrading TCP=>H1+HTX.
  * BUG/MINOR: buffers/threads: always clear a buffer's head before releasing it
  * MINOR: ssl: ssl_fc_has_early should work for BoringSSL
  * BUG/MINOR: ssl: fix 0-RTT for BoringSSL
  * BUG/MEDIUM: stick-table: Wrong stick-table backends parsing.
  * [RELEASE] Released version 2.0.4
  * BUG/MEDIUM: checks: make sure to close nicely when we're the last to speak
  * BUG/MINOR: mux-h2: always reset rcvd_s when switching to a new frame
  * BUG/MINOR: mux-h2: always send stream window update before connection's
  * BUG/MEDIUM: mux-h2: do not recheck a frame type after a state transition
  * BUG/MINOR: mux-h2: do not send REFUSED_STREAM on aborted uploads
  * BUG/MINOR: mux-h2: use CANCEL, not STREAM_CLOSED in h2c_frt_handle_data()
  * BUG/MINOR: mux-h2: don't refrain from sending an RST_STREAM after another one
  * BUG/MEDIUM: fd: Always reset the polled_mask bits in fd_dodelete().
  * BUG/MEDIUM: proxy: Make sure to destroy the stream on upgrade from TCP to H2
  * BUG/MEDIUM: mux-h2: split the stream's and connection's window sizes
  * BUG/MEDIUM: mux-h2: unbreak receipt of large DATA frames
  * BUG/MINOR: stream-int: also update analysers timeouts on activity
  * BUG/MAJOR: http/sample: use a static buffer for raw -> htx conversion
  * BUG/MEDIUM: lb-chash: Ensure the tree integrity when server weight is increased

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=189
2019-08-20 14:02:26 +00:00
Kristoffer Gronlund
52b33deb58 Accepting request 719829 from home:KGronlund:branches:server:http
- Update to version 2.0.3+git14.0ff395c1 (bsc#1142529) (CVE-2019-14241):
  * BUG/MAJOR: queue/threads: avoid an AB/BA locking issue in process_srv_queue()
  * BUG/MINOR: htx: Fix free space addresses calculation during a block expansion
  * BUG/MINOR: hlua: Only execute functions of HTTP class if the txn is HTTP ready
  * MINOR: hlua: Add a flag on the lua txn to know in which context it can be used
  * MINOR: hlua: Don't set request analyzers on response channel for lua actions
  * BUG/MEDIUM: hlua: Check the calling direction in lua functions of the HTTP class
  * BUG/MINOR: hlua/htx: Reset channels analyzers when txn:done() is called
  * DOC: improve the wording in CONTRIBUTING about how to document a bug fix
  * BUG/MINOR: log: make sure writev() is not interrupted on a file output
  * BUG/MEDIUM: streams: Don't switch the SI to SI_ST_DIS if we have data to send.
  * BUG/MEDIUM: lb-chash: Fix the realloc() when the number of nodes is increased
  * BUILD: threads: add the definition of PROTO_LOCK
  * BUG/MINOR: proxy: always lock stop_proxy()
  * BUG/MEDIUM: protocols: add a global lock for the init/deinit stuff
  * [RELEASE] Released version 2.0.3
  * BUG/CRITICAL: http_ana: Fix parsing of malformed cookies which start by a delimiter
  * BUG/MINOR: http_htx: Support empty errorfiles
  * BUG/MINOR: http_ana: Be sure to have an allocated buffer to generate an error
  * BUG/MEDIUM: tcp-checks: do not dereference inexisting conn_stream
  * BUG/MINOR: mux-h1: Close server connection if input data remains in h1_detach()
  * BUG/MEDIUM: mux-h1: Trim excess server data at the end of a transaction
  * BUG/MINOR: checks: do not exit tcp-checks from the middle of the loop
  * BUG/MINOR: session: Send a default HTTP error if accept fails for a H1 socket
  * BUG/MINOR: session: Emit an HTTP error if accept fails only for H1 connection
  * BUG/MINOR: debug: Remove flags CO_FL_SOCK_WR_ENA/CO_FL_SOCK_RD_ENA
  * DOC: htx: Update comments in HTX files
  * BUG/MINOR: hlua: Make the function txn:done() HTX aware
  * BUG/MINOR: cache/htx: Make maxage calculation HTX aware
  * BUG/MINOR: http_htx: Initialize HTX error messages for TCP proxies

OBS-URL: https://build.opensuse.org/request/show/719829
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=188
2019-07-30 14:49:53 +00:00
f088b3cf73 clean up servicedata
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=187
2019-07-09 11:53:39 +00:00
dd9924b71b Accepting request 714216 from home:KGronlund:branches:server:http
- Update to version 2.0.1+git27.5db881ff:
  * BUG/MINOR: ssl: revert empty handshake detection in OpenSSL <= 1.0.2
  * BUG/MEDIUM: servers: Don't forget to set srv_cs to NULL if we can't reuse it.
  * BUG/MEDIUM: stream-int: Don't rely on CF_WRITE_PARTIAL to unblock opposite si
  * MINOR: stream-int: Factorize processing done after sending data in si_cs_send()
  * BUG/MINOR: mux-h1: Don't process input or ouput if an error occurred
  * BUG/MEDIUM: mux-h1: Handle TUNNEL state when outgoing messages are formatted
  * BUG/MEDIUM: lb_fas: Don't test the server's lb_tree from outside the lock
  * BUG/MEDIUM: http/applet: Finish request processing when a service is registered
  * MINOR: action: Add the return code ACT_RET_DONE for actions
  * BUG/MINOR: contrib/prometheus-exporter: Don't try to add empty data blocks
  * MINOR: server: Add "no-tfo" option.
  * BUG/MEDIUM: sessions: Don't keep an extra idle connection in sessions.
  * BUG/MEDIUM: servers: Authorize tfo in default-server.
  * BUG/MEDIUM: connections: Make sure we're unsubscribe before upgrading the mux.
  * BUG/MINOR: contrib/prometheus-exporter: Respect the reserve when data are sent
  * BUG/MINOR: hlua/htx: Respect the reserve when HTX data are sent
  * BUG/MEDIUM: channel/htx: Use the total HTX size in channel_htx_recv_limit()
  * BUG/MINOR: hlua: Don't use channel_htx_recv_max()
  * BUG/MINOR: contrib/prometheus-exporter: Don't use channel_htx_recv_max()
  * BUG/MEDIUM: checks: Make sure the tasklet won't run if the connection is closed.
  * BUG/MEDIUM: connections: Always call shutdown, with no linger.
  * BUG/MINOR: mux-h1: Don't return the empty chunk on HEAD responses
  * BUG/MINOR: mux-h1: Skip trailers for non-chunked outgoing messages
  * BUG/MEDIUM: checks: unblock signals in external checks
  * BUG/MEDIUM: mux-h1: Always release H1C if a shutdown for writes was reported
  * BUG/MEDIUM: ssl: Don't attempt to set alpn if we're not using SSL.
  * BUG/MINOR: mworker/cli: don't output a \n before the response
  * BUG/MINOR: mux-h1: Make format errors during output formatting fatal
  * BUG/MEDIUM: mux-h1: Use buf_room_for_htx_data() to detect too large messages

OBS-URL: https://build.opensuse.org/request/show/714216
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=186
2019-07-09 11:52:16 +00:00
4a51530556 - Update to version 2.0.0~git6.41dc8432:
* BUG/MEDIUM: htx: Fully update HTX message when the block value is changed
  * MINOR: htx: Add the function htx_change_blk_value_len()
  * BUG/MEDIUM: compression: Set Vary: Accept-Encoding for compressed responses
  * BUG/MINOR: mux-h1: Add the header connection in lower case in outgoing messages
  * BUG/MINOR: lua/htx: Make txn.req_req_* and txn.res_rep_* HTX aware
  * BUG/MEDIUM: h2/htx: Update data length of the HTX when the cookie list is built

OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=183
2019-06-18 12:07:56 +00:00
d7f112bb8f Accepting request 710358 from home:KGronlund:branches:server:http
- Update to version 2.0.0~git0.ba23630a:
  - new internal native HTTP representation called HTX, was already in 1.9
    and is now enabled by default in 2.0 ;
  - end-to-end HTTP/2 support including trailers and continuation frames,
    as needed for gRPC ; HTTP/2 may also be upgraded from HTTP/1.1 using
    the H2 preface;
  - server connection pooling and more advanced reuse, with ALPN protocol
    negotiation (already in 1.9) ;
  - layer 7 retries, allowing to use 0-RTT and TCP Fast Open to the servers
    as well as on the frontend ;
  - much more scalable multi-threading, which is even enabled by default on
    platforms where it was successfully tested ; by default, as many threads
    are started as the number of CPUs haproxy is allowed to run on. This
    removes a lot of configuration burden in VMs and containers ;
  - automatic maxconn setting for the process and the frontends, directly
    based on the number of available FDs (easier configuration in containers
    and with systemd) ;
  - logging to stdout for use in containers and systemd (already in 1.9).
    Logs can now provide micro-second resolution for some events ;
  - peers now support SSL, declaration of multiple stick-tables directly in
    the peers section, and synchronization of server names, not just IDs ;
  - In master-worker mode, the master process now exposes its own CLI and
    can communicate with all other processes (including the stopping ones),
    even allowing to connect to their CLI and check their state. It is also
    possible to start some sidecar programs and monitor them from the master,
    and the master can automatically kill old processes that survived too
    many reloads ;
  - the incoming connections are load-balanced between all threads depending
    on their load to minimize the processing time and maximize the capacity
    (already in 1.9) ;
  - the SPOE connection load-balancing was significantly improved in order
    to reduce high percentiles of SPOA response time (already in 1.9) ;
  - the "random" load balancing algorithm and a power-of-two-choices variant
    were introduced ;
  - statistics improvements with per-thread counters for certain things, and
    a prometheus exporter for all our statistics;
  - lots of debugging help, it's easier to produce a core dump, there are
    new commands on the CLI to control various things, there is a watchdog
    to fail cleanly when a thread deadlock or a spinning task are detected,
    so overall it should provide a better experience in field and less
    round trips between users and developers (hence less stress during an
    incident).
  - all 3 device detection engines are now compatible with multi-threading
    and can be build-tested without any external dependencies ;
  - "do-resolve" http-request action to perform a DNS resolution on any,
    sample, and resolvers now support relying on /etc/resolv.conf to match
    the local resolver ;
  - log sampling and balancing : it's now possible to send 1 log every 10
    to a server, or to spread the logging load over multiple log servers;
  - a new SPOA agent (spoa_server) allows to interface haproxy with Python
    and Lua programs ;
  - support for Solaris' event ports (equivalent of kqueue or epoll) which
    will significantly improve the performance there when dealing with
    numerous connections ;
  - some warnings are now reported for some deprecated options that will
    be removed in 2.1. Since 2.0 is long term supported, there's no
    emergency to convert them, however if you see these warnings, you
    need to understand that you're among their extremely rare users and
    just because of this you may be taking risks by keeping them ;
  - A new SOCKS4 server-side layer was provided ; it allows outgoing
    connections to be forwarded through a SOCKS4 proxy (such as ssh -D).
  - priority- and latency- aware server queues : it is possible now to
    assign priorities to certain requests and/or to give them a time
    bonus or penalty to refine control of the traffic and be able to
    engage on SLAs.
  - internally the architecture was significantly redesigned to allow to
    further improve performance and make it easier to implement protocols
    that span over multiple layers (such as QUIC). This work started in
    1.9 and will continue with 2.1.
  - the I/O, applets and tasks now share the same multi-threaded scheduler,
    giving a much better responsiveness and fairness between all tasks as
    is visible with the CLI which always responds instantly even under
    extreme loads (started in 1.9) ;
  - the internal buffers were redesigned to ease zero-copy operations, so
    that it is possible to sustain a high bandwidth even when forwarding
    HTTP/1 to/from HTTP/2 (already in 1.9) ;

OBS-URL: https://build.opensuse.org/request/show/710358
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=182
2019-06-17 17:09:24 +00:00
Kristoffer Gronlund
5ba20d6b58 Accepting request 700384 from home:KGronlund:branches:server:http
- Update to version 1.8.20~git0.6fb9fadc:
  * [RELEASE] Released version 1.8.20
  * BUG/MINOR: spoe: Don't systematically wakeup SPOE stream in the applet handler
  * BUG/MINOR: da: Get the request channel to call CHECK_HTTP_MESSAGE_FIRST()
  * BUG/MINOR: 51d: Get the request channel to call CHECK_HTTP_MESSAGE_FIRST()
  * BUG/MEDIUM: thread/http: Add missing locks in set-map and add-acl HTTP rules
  * BUG/MINOR: acl: properly detect pattern type SMP_T_ADDR
  * BUG/MEDIUM: maps: only try to parse the default value when it's present
  * BUG/MAJOR: http_fetch: Get the channel depending on the keyword used
  * MINOR: skip get_gmtime where tm is unused
  * BUILD/MINOR: listener: Silent a few signedness warnings.
  * BUG/MEDIUM: listener: make sure the listener never accepts too many conns
  * BUG/MEDIUM: listener: use a self-locked list for the dequeue lists
  * MAJOR: listener: do not hold the listener lock in listener_accept()
  * BUG/MEDIUM: list: fix incorrect pointer unlocking in LIST_DEL_LOCKED()
  * BUG/MEDIUM: list: fix again LIST_ADDQ_LOCKED
  * BUG/MEDIUM: list: correct fix for LIST_POP_LOCKED's removal of last element
  * MINOR: list: make the delete and pop operations idempotent
  * BUG/MEDIUM: list: add missing store barriers when updating elements and head
  * BUG/MEDIUM: list: fix LIST_POP_LOCKED's removal of the last pointer
  * BUG/MEDIUM: list: fix the rollback on addq in the locked liss
  * BUG/MEDIUM: lists: Properly handle the case we're removing the first elt.
  * MINOR: lists: Implement locked variations.
  * BUG/MINOR: threads: fix the process range of thread masks
  * BUG/MEDIUM: spoe: Return an error if nothing is encoded for fragmented messages
  * BUG/MEDIUM: spoe: Queue message only if no SPOE applet is attached to the stream
  * BUG/MEDIUM: pattern: assign pattern IDs after checking the config validity
  * BUILD: connection: fix naming of ip_v field
  * BUILD: use inttypes.h instead of stdint.h
  * BUG/MEDIUM: peers: fix a case where peer session is not cleanly reset on release.

OBS-URL: https://build.opensuse.org/request/show/700384
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=181
2019-05-06 11:18:23 +00:00
Kristoffer Gronlund
eac5c83514 Accepting request 673401 from home:KGronlund:branches:server:http
- Update to version 1.8.19~git0.ebf033b4:
  * [RELEASE] Released version 1.8.19
  * BUG/MINOR: config: Reinforce validity check when a process number is parsed
  * BUG/MAJOR: stream: avoid double free on unique_id
  * BUG/MAJOR: spoe: Don't try to get agent config during SPOP healthcheck
  * BUG/MEDIUM: server: initialize the idle conns list after parsing the config
  * BUG/MEDIUM: spoe: initialization depending on nbthread must be done last
  * BUG/MINOR: lua: initialize the correct idle conn lists for the SSL sockets
  * BUG/MINOR: spoe: do not assume agent->rt is valid on exit
  * DOC: ssl: Stop documenting ciphers example to use
  * DOC: ssl: Clarify when pre TLSv1.3 cipher can be used
  * [RELEASE] Released version 1.8.18
  * BUG/MINOR: config: make sure to count the error on incorrect track-sc/stick rules
  * BUG/MAJOR: spoe: verify that backends used by SPOE cover all their callers' processes
  * BUG/MAJOR: config: verify that targets of track-sc and stick rules are present
  * BUG/MINOR: config: fix bind line thread mask validation
  * BUG/MEDIUM: stream: Don't forget to free s->unique_id in stream_free().
  * BUG/MEDIUM: mux-h2: do not close the connection on aborted streams
  * MINOR: connstream: have a new flag CS_FL_KILL_CONN to kill a connection
  * MINOR: stream-int: add a new flag to mention that we want the connection to be killed
  * MINOR: stream-int: expand the flags to 32-bit
  * BUG/MEDIUM: mux-h2: wait for the mux buffer to be empty before closing the connection
  * BUG/MEDIUM: mux-h2: make sure never to send GOAWAY on too old streams
  * BUG/MEDIUM: mux-h2: fix two half-closed to closed transitions
  * BUG/MEDIUM: mux-h2: wake up flow-controlled streams on initial window update
  * MINOR: xref: Add missing barriers.
  * BUG/MINOR: stream: don't close the front connection when facing a backend error
  * SCRIPTS: add the issue tracker URL to the announce script
  * SCRIPTS: add the slack channel URL to the announce script
  * BUG/MINOR: deinit: tcp_rep.inspect_rules not deinit, add to deinit

OBS-URL: https://build.opensuse.org/request/show/673401
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=180
2019-02-13 08:21:04 +00:00
Kristoffer Gronlund
18d563cd4b Accepting request 664292 from home:KGronlund:branches:server:http
- Update to version 1.8.17~git0.e89d25b2 (bsc#1121283) (CVE-2018-20615):
  * BUG/CRITICAL: mux-h2: re-check the frame length when PRIORITY is used
  * BUG/MEDIUM: lua: dead lock when Lua tasks are trigerred
  * BUG/MINOR: lua: bad args are returned for Lua actions
  * BUG/MINOR: lua: Return an error if a legacy HTTP applet doesn't send anything
  * BUG/MEDIUM: cli: make "show sess" really thread-safe
  * MINOR: stream/cli: report more info about the HTTP messages on "show sess all"
  * MINOR: stream/cli: fix the location of the waiting flag in "show sess all"
  * MINOR: lb: allow redispatch when using consistent hash
  * BUG/MEDIUM: server: Also copy "check-sni" for server templates.
  * BUG/MEDIUM: mux-h2: mark that we have too many CS once we have more than the max
  * MINOR: mux-h2: only increase the connection window with the first update
  * BUG/MAJOR: stream-int: Update the stream expiration date in stream_int_notify()
  * BUG/MEDIUM: dns: overflowed dns name start position causing invalid dns error
  * BUG/MEDIUM: dns: Don't prevent reading the last byte of the payload in dns_validate_response()
  * BUG/MINOR: logs: leave startup-logs global and not per-thread

OBS-URL: https://build.opensuse.org/request/show/664292
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=179
2019-01-10 08:51:30 +00:00
Kristoffer Gronlund
37083beefe Accepting request 658884 from home:KGronlund:branches:server:http
- Update to version 1.8.15~git0.6b6a350a: (bsc#1119419) (CVE-2018-20103) (VUL-0) (bsc#1119368) (CVE-2018-20102)
  * DOC: Update configuration doc about the maximum number of stick counters.
  * BUG: dns: Fix off-by-one write in dns_validate_dns_response()
  * BUG: dns: Fix out-of-bounds read via signedness error in dns_validate_dns_response()
  * BUG: dns: Prevent out-of-bounds read in dns_validate_dns_response()
  * BUG: dns: Prevent out-of-bounds read in dns_read_name()
  * BUG: dns: Prevent stack-exhaustion via recursion loop in dns_read_name
  * DOC: refer to check-sni in the documentation of sni
  * DOC: clarify that check-sni needs an argument.
  * MINOR: servers: Free [idle|safe|priv]_conns on exit.
  * MINOR: stats: report the number of active jobs and listeners in "show info"
  * BUG/MINOR: mux-h2: advertise a larger connection window size
  * BUG/MINOR: mux-h2: refrain from muxing during the preface
  * BUG/MINOR: hpack: fix off-by-one in header name encoding length calculation
  * BUG/MEDIUM: sample: Don't treat SMP_T_METH as SMP_T_STR.
  * BUG/MINOR: lb-map: fix unprotected update to server's score
  * BUG/MINOR: cfgparse: Fix the call to post parser of the last sections parsed
  * BUG/MINOR: cfgparse: Fix transition between 2 sections with the same name
  * BUG/MINOR: ssl: ssl_sock_parse_clienthello ignores session id
  * BUG/MEDIUM: hpack: fix encoding of "accept-ranges" field
  * BUG/MINOR: config: Copy default error messages when parsing of a backend starts
  * BUG/MEDIUM: Make sure stksess is properly aligned.
  * BUG/MINOR: config: better detect the presence of the h2 pattern in npn/alpn
  * BUG/MEDIUM: auth/threads: use of crypt() is not thread-safe
  * BUG/MAJOR: http: http_txn_get_path() may deference an inexisting buffer
  * BUG/MINOR: only auto-prefer last server if lb-alg is non-deterministic
  * BUG/MINOR: only mark connections private if NTLM is detected
  * DOC: cache: Missing information about "total-max-size"
  * BUG/MINOR: ssl: Wrong usage of shctx_init().
  * BUG/MINOR: cache: Wrong usage of shctx_init().

OBS-URL: https://build.opensuse.org/request/show/658884
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=178
2018-12-17 10:05:47 +00:00
414daf069f - Update to version 1.8.14~git0.52e4d43b:
OBS-URL: https://build.opensuse.org/package/show/server:http/haproxy?expand=0&rev=173
2018-09-20 12:36:21 +00:00