Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package haproxy for openSUSE:Factory checked 
in at 2026-08-28 19:47:17
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/haproxy (Old)
 and      /work/SRC/openSUSE:Factory/.haproxy.new.1265 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "haproxy"

Fri Aug 28 19:47:17 2026 rev:191 rq:1374105 version:3.4.4+git0.7f03ae65c

Changes:
--------
--- /work/SRC/openSUSE:Factory/haproxy/haproxy.changes  2026-07-31 
16:08:03.021979954 +0200
+++ /work/SRC/openSUSE:Factory/.haproxy.new.1265/haproxy.changes        
2026-08-28 19:47:56.585152477 +0200
@@ -1,0 +2,187 @@
+Thu Aug 27 15:38:18 UTC 2026 - Marcus Rueckert <[email protected]>
+
+- Update to version 3.4.4+git0.7f03ae65c:
+  * [RELEASE] Released version 3.4.4
+
+-------------------------------------------------------------------
+Thu Aug 27 00:51:28 UTC 2026 - Marcus Rueckert <[email protected]>
+
+- Update to version 3.4.3+git88.24ec4c12d:
+  * BUG/MEDIUM: sink: do not create one implicit ring per logger copy
+  * BUG/MEDIUM: sink: initialize the settings of the implicit log server
+  * BUG/MINOR: flt-http-comp: Don't read next block to detect end of data
+  * BUG/MINOR: fcgi-app: allow explicit filter declaration with 
non-cache/non-compression filters
+  * BUG/MEDIUM: cache: ignore cache on redundant origin/referer
+  * REGTESTS: converters: use connection: close in the has_ctl() test
+  * MINOR: debug: check the match count in __BUG_ON_ONCE() and not in 
complain()
+  * MINOR: sample: add new converter has_ctl() to detect control characters
+  * DOC: haterm: add a missing 'haterm' build target on an example
+  * BUG/MEDIUM: sink: do not hold the sft lock around ring_dispatch_messages()
+  * BUG/MEDIUM: connection: fix an infinite loop in the fc_pp_tlv() fetch
+  * MEDIUM: mux-h2: don't report EOM on a short content-length message
+  * BUG/MEDIUM: mux-h1: close the connection on a short content-length
+
+-------------------------------------------------------------------
+Tue Aug 25 11:18:54 UTC 2026 - Marcus Rueckert <[email protected]>
+
+- Update to version 3.4.3+git75.84be0a8bd:
+  * BUILD: ssl: avoid a potential null-dereference warning on OpenSSL 1.0.2
+  * BUG/MINOR: hbuf: treat unexpected escape sequences as literals
+  * BUG/MINOR: ech: fix label at end of compound statement
+  * BUG/MEDIUM: mux-fcgi: check the room left before appending the index
+  * BUG/MEDIUM: sink: pre-initialize the implicit log forwarding server
+  * BUG/MINOR: resolvers: accept fields at the response boundary
+  * BUG/MINOR: ssl/cli: fix frontend-not-found detection in 'show ssl sni -f'
+  * BUG/MINOR: haproxy: fix out-of-scope tmpdir usage in do_chroot()
+  * BUG/MEDIUM: ssl: isolate TLS session resumption per authentication policy
+  * BUG/MINOR: ssl: isolate TLS session resumption per crt-list filter
+  * BUG/MEDIUM: ssl: isolate TLS session resumption per X509 server certificate
+  * BUILD: ssl: disable the TLS1.3 session timeout clamp on wolfSSL
+  * BUG/MINOR: ssl: apply tune.ssl.lifetime to TLS1.3 sessions on 
BoringSSL/AWS-LC
+  * BUG/MEDIUM: ssl: enforce tune.ssl.lifetime across TLS1.3 session renewals
+  * BUG/MEDIUM: ssl: Fix unprotected 'ssl_sock_choose_sni_ctx' calls
+  * BUG/MINOR: ssl: release the previous client cert reference at depth > 0
+  * BUG/MINOR: ssl: Fix leak of X509_NAME in traces
+  * BUG/MINOR: conn: Do not check 'sess_el' list on frontend connections in 
__trace_enabled
+  * BUG/MINOR: mux-h2: harden h2_dump_h2s_info() against potentially null 
h2s->sd
+  * BUG/MINOR: log: fix double-free error when error in parse_loger occurs
+  * BUG/MINOR: qpack: missing shift count check in qpack_get_varint() (UB)
+  * BUG/MINOR: spoe: check snprintf() return value in 
spoe_set_var/spoe_unset_var
+  * BUG/MINOR: payload: fix handshake length off-by-4 in ssl_hello_sni/alpn
+  * BUG/MEDIUM: bwlim: fix a stick-table entry leak in shared mode
+  * DOC: security: clarify that only up-to-date versions may get securty 
reports
+  * BUG/MEDIUM: http: fix authority parsing for absolute-form URI with empty 
path
+  * BUG/MINOR: server: fix off-by-one error when parsing and copying source 
port range
+  * BUG/MINOR: quic: avoid a division by zero in the BBR pacing interval
+  * BUG/MINOR: ssl: reject an embedded NUL in the full-DN ssl_*_dn() fetches
+  * BUG/MINOR: ssl: reject an embedded NUL in the ssl_*_dn(entry) fetches
+  * BUG/MINOR: wurfl: fix memory leak of information list and patch strings at 
deinit
+  * BUG/MEDIUM: cache: do not release an entry under the cache read lock
+  * BUG/MEDIUM: cache: retain the primary or secondary entry only when 
detaching its row
+  * DOC: config: clarify req.ssl_sni
+  * BUG/MEDIUM: hlua_fcn: ensure systematic bref cleanup for patref list 
iterator
+  * BUG/MEDIUM: lua: resume Channel:send() from the unsent part of the string
+  * BUG/MINOR: quic: drop multiple Retry on same connection
+  * BUG/MEDIUM: quic: prevent out-of-bound read on wrapping CRYPTO content
+  * BUG/MINOR: mux-h2: strip the userinfo when deriving :authority for a server
+  * BUG/MINOR: debug: only dump the trace once in __BUG_ON_ONCE()
+  * BUG/MINOR: lb-chash: bound the walk when the saved cursor changed tree
+  * BUG/MEDIUM: session: don't release a reversed connection twice on error
+  * BUG/MINOR: connection: reserve the whole CRC32C TLV before saving its 
pointer
+  * BUG/MINOR: acme: restrict the permissions of the generated account key
+  * BUG/MINOR: ssl: reject server certificate names containing a NUL byte
+  * BUG/MEDIUM: acme: don't delete a NULL token from the map
+  * BUG/MEDIUM: ssl: require a full-length AEAD tag when decrypting with 
AES-GCM
+  * BUG/MINOR: jwt: don't take an extra reference on the certificate public key
+  * BUG/MEDIUM: jwe: validate the secret length against the algorithm of the 
token
+  * BUG/MEDIUM: log: always reserve room for trailing 0 when using CBOR 
encoding helpers
+  * MINOR: log/tools: fix ambiguous comments for some log encoding helpers
+  * BUG/MINOR: mux-fcgi: sanitize the STDERR records before logging them
+  * BUG/MEDIUM: http-ana: check the cookie rewrite result before moving the 
offsets
+  * BUG/MEDIUM: sock: bound the recvmsg() length when receiving old sockets
+  * BUG/MEDIUM: stick-tables: use the same bucket for string keys with a NUL
+  * BUG/MEDIUM: http-ana: don't crash on "keep-query" in a response redirect
+  * BUG/MINOR: mux-fcgi: don't call fcgi_strm_destroy() on a NULL stream
+  * BUG/MEDIUM: spoe: clear the applet pointer when the applet fails to start
+  * DEV: haring: bound the ring geometry to the size of the file
+  * BUG/MINOR: hlua: use a local buffer to format the socket addresses
+  * BUG/MINOR: stats-file: reject tgid 0 when preloading shm objects
+  * BUG/MEDIUM: hpack: encode long methods and schemes using the long form
+  * REGTESTS: proxy: complete "del backend" test
+  * BUG/MINOR: proxy: release watcher in various commands on CLI abort
+  * DOC: explain better that named defaults are preserved
+  * MINOR: proxy: implement unpublished backend keyword
+  * BUG/MINOR: proxy: fix default-server leak on post-parsing cleanup
+  * BUG/MINOR: server: check strdup return value on server ID
+  * BUG/MEDIUM: filter: Disable auto-close on channel during TCP payload 
filtering
+  * BUG/MEDIUM: counters: preserve shared.tg pointer on 'clear counters all'
+  * BUG/MINOR: ech: reject an ECH store with no usable private key
+  * BUG/MINOR: ech: propagate error from load_echkeys()
+  * BUG/MINOR: cli: do not reject the "/<fd>" form of "show fd"
+  * BUG/MINOR: cli: use the current argument to parse the FD spec in "show fd"
+
+-------------------------------------------------------------------
+Mon Aug 17 09:34:50 UTC 2026 - Marcus Rueckert <[email protected]>
+
+- Update to version 2.2.0+git0.5b29f3f:
+  * VERSION: otel: bumped filter version to 2.2.0
+  * DOC: otel: completed the instrumentation field table
+  * MINOR: otel: added the 'noflush' instrumentation option
+  * BUG/MAJOR: otel: guarded the span whose creation failed before ending it
+  * BUG/MEDIUM: otel: bounded the time the CLI 'flush' command may block
+  * BUG/MINOR: otel: escaped the runtime error text written to the log
+  * BUG/MEDIUM: otel: skipped the header whose name is only the extract prefix
+  * MINOR: otel: unified the repeated message strings into macro definitions
+  * DOC: otel: refreshed the error-handling and shutdown documentation
+  * MINOR: otel: freed the CLI messages on the defensive NULL-appctx path
+  * MINOR: otel: validated the OpenTelemetry YAML at configuration parse time
+  * MINOR: otel: rejected non-regular configuration files
+  * BUILD: otel: adapted the HTTP header addition to HAProxy 3.2
+  * BUILD: otel: guarded the descriptor name release on older HAProxy
+  * BUILD: otel: adapted the ACL condition conflict check to HAProxy 3.2
+
+-------------------------------------------------------------------
+Thu Aug 13 02:59:26 UTC 2026 - Marcus Rueckert <[email protected]>
+
+- Update to version 2.1.2+git0.004afd6:
+  * VERSION: otel: bumped filter version to 2.1.2
+  * MINOR: otel: completed and hardened the structure dump macros
+  * BUG/MINOR: otel: corrected invalid or misleading debug output
+  * BUG/MINOR: otel: rejected non-string context variables in extraction
+  * BUG/MINOR: otel: fixed the truncated debug level in the status dump
+  * DOC: otel: described the by-name grouping of span 'event' lines
+  * MINOR: otel: resolved minor parser inconsistencies
+  * BUG/MINOR: otel: validated the first character of a variable name
+  * BUG/MEDIUM: otel: rejected keyword lines with no open section object
+  * MINOR: otel: skipped the instrument evaluation on attribute failure
+  * CLEANUP: otel: removed the unused flt_otel_pool_strndup() helper
+  * BUG/MINOR: otel: cleared the bounds pointer on a failed allocation
+  * BUG/MEDIUM: otel: iterated the ctx tracking buffer from a private copy
+  * BUG/MEDIUM: otel: released the variable-name copy that vars_check_arg() 
allocates
+
+-------------------------------------------------------------------
+Tue Aug 11 14:47:44 UTC 2026 - Marcus Rueckert <[email protected]>
+
+- Update to version 2.1.1+git0.4403cec:
+  * VERSION: otel: bumped filter version to 2.1.1
+  * MINOR: otel: initialized the output value in the sample conversion
+  * BUG/MINOR: otel: freed the context tracking buffer only when it was ours
+  * BUG/MINOR: otel: guarded the debug variable dump by the sample type
+  * BUG/MEDIUM: otel: guarded the require-context check on a missing instr
+  * DOC: otel: documented response-event and soft-error behavior
+  * BUG/MINOR: otel: stopped sample evaluation on a conversion error
+  * BUILD: otel: added a build-only stand-in for the OTel C wrapper
+
+-------------------------------------------------------------------
+Tue Aug 11 14:47:43 UTC 2026 - Marcus Rueckert <[email protected]>
+
+- Update to version 3.4.3+git1.bf9b7dad1:
+  * BUG/MEDIUM: proxy: fix crash on delete first backend
+
+-------------------------------------------------------------------
+Wed Aug 05 20:43:44 UTC 2026 - Marcus Rueckert <[email protected]>
+
+- Update to version 2.1.0+git0.91fd1ba:
+  * VERSION: otel: bumped filter version to 2.1.0
+  * MINOR: otel: polished the CLI status dump formatting
+  * MINOR: otel: added a lifetime total of suppressed log lines
+  * MINOR: otel: allowed repeated creates of a metric instrument name
+  * MINOR: otel: added a 'require-context' option
+  * MINOR: otel: added optional @<filter> target token to the CLI commands
+  * BUG/MEDIUM: otel: made the CLI dump commands iterative io_handlers
+  * BUG/MINOR: otel: closed the message quote in the default id warning
+
+-------------------------------------------------------------------
+Thu Jul 30 15:18:17 UTC 2026 - Marcus Rueckert <[email protected]>
+
+- Update to version 2.0.2+git0.ebc9c6f:
+  * VERSION: otel: bumped filter version to 2.0.2
+  * BUILD: otel: adapted the proxy list iteration to HAProxy 3.5
+  * VERSION: otel: bumped filter version to 2.0.1
+  * BUG/MINOR: otel: freed the instrumentation loggers with free_logger()
+  * MINOR: otel: aborted the variable extraction scan fully on error
+  * BUG/MEDIUM: otel: guarded HTTP header operations on a non-HTX channel
+  * BUG/MINOR: otel: rejected a log-record event id of zero
+  * BUG/MINOR: otel: freed the partial state after a failed library init
+
+-------------------------------------------------------------------

Old:
----
  haproxy-3.4.3+git0.80ea565fd.tar.gz
  haproxy-opentelemetry-2.0.0+git1.99619c2.tar.gz

New:
----
  haproxy-3.4.4+git0.7f03ae65c.tar.gz
  haproxy-opentelemetry-2.2.0+git0.5b29f3f.tar.gz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ haproxy.spec ++++++
--- /var/tmp/diff_new_pack.LrEdOL/_old  2026-08-28 19:47:58.790229553 +0200
+++ /var/tmp/diff_new_pack.LrEdOL/_new  2026-08-28 19:47:58.793229657 +0200
@@ -44,10 +44,10 @@
 %bcond_with opentelemetry
 
 Name:           haproxy
-Version:        3.4.3+git0.80ea565fd
+Version:        3.4.4+git0.7f03ae65c
 Release:        0
 %if %{with opentelemetry}
-%global otel_revision 2.0.0+git1.99619c2
+%global otel_revision 2.2.0+git0.5b29f3f
 %global otel_subdir   haproxy-opentelemetry-%{otel_revision}
 %global otel_additional_source -a9
 %endif
@@ -87,7 +87,7 @@
 BuildRequires:  vim
 BuildRequires:  zlib-devel
 %if %{with opentelemetry}
-BuildRequires:  pkgconfig(opentelemetry-c-wrapper) >= 3.0.0
+BuildRequires:  pkgconfig(opentelemetry-c-wrapper) >= 3.3.0
 %endif
 Provides:       %{name}-doc = %{version}
 Obsoletes:      %{name}-doc < %{version}

++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.LrEdOL/_old  2026-08-28 19:47:59.017237487 +0200
+++ /var/tmp/diff_new_pack.LrEdOL/_new  2026-08-28 19:47:59.028237872 +0200
@@ -1,11 +1,11 @@
 <servicedata>
   <service name="tar_scm">
     <param name="url">http://git.haproxy.org/git/haproxy-3.4.git/</param>
-    <param 
name="changesrevision">80ea565fdefbc34ec82d7374d7d19b0107231379</param>
+    <param 
name="changesrevision">7f03ae65c28605152c7a1a9ba7d9d0bcfb50f8b0</param>
   </service>
   <service name="tar_scm">
     <param 
name="url">https://github.com/haproxytech/haproxy-opentelemetry.git/</param>
-    <param 
name="changesrevision">99619c2eb67bae1404e171e606d8c6ef5b60d00f</param>
+    <param 
name="changesrevision">5b29f3f1eb2788b7a2ebfec1e6f8e9fd738bb426</param>
   </service>
 </servicedata>
 (No newline at EOF)

++++++ haproxy-3.4.3+git0.80ea565fd.tar.gz -> 
haproxy-3.4.4+git0.7f03ae65c.tar.gz ++++++
++++ 4108 lines of diff (skipped)

++++++ haproxy-opentelemetry-2.0.0+git1.99619c2.tar.gz -> 
haproxy-opentelemetry-2.2.0+git0.5b29f3f.tar.gz ++++++
++++ 9046 lines of diff (skipped)

Reply via email to