Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package haproxy for openSUSE:Factory checked
in at 2021-08-23 10:07:40
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/haproxy (Old)
and /work/SRC/openSUSE:Factory/.haproxy.new.1899 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "haproxy"
Mon Aug 23 10:07:40 2021 rev:106 rq:912851 version:2.4.3+git0.4dd5a5a6c
Changes:
--------
--- /work/SRC/openSUSE:Factory/haproxy/haproxy.changes 2021-07-12
01:24:44.757365380 +0200
+++ /work/SRC/openSUSE:Factory/.haproxy.new.1899/haproxy.changes
2021-08-23 10:07:51.520268171 +0200
@@ -1,0 +2,54 @@
+Tue Aug 17 15:50:01 UTC 2021 - mrueck...@suse.de
+
+- Update to version 2.4.3+git0.4dd5a5a6c:
+ CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
+ (boo#1189366 boo#1189548 boo#1189549)
+ * [RELEASE] Released version 2.4.3
+ * REGTESTS: add a test to prevent h2 desync attacks
+ * BUG/MEDIUM: h2: give :authority precedence over Host
+ * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
+ * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
+ * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid
syntax
+ * MINOR: http: add a new function http_validate_scheme() to validate a scheme
+ * DOC/MINOR: fix typo in management document
+ * CLEANUP: assorted typo fixes in the code and comments
+ * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config
check
+ * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are
queued
+ * DOC: config: Fix 'http-response send-spoe-group' documentation
+ * DOC: Improve the lua documentation
+ * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
+ * BUG/MINOR: buffer: fix buffer_dump() formatting
+ * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is
released
+ * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
+ * ADMIN: dyncookie: implement a simple dynamic cookie calculator
+ * MINOR: server: unmark deprecated on enable health/agent cli
+ * BUG/MINOR: server: update last_change on maint->ready transitions too
+ * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
+ * BUILD: opentracing: fixed build when using pkg-config utility
+ * DOC: internals: document the FD takeover process
+ * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
+ * BUG/MINOR: pollers: always program an update for migrated FDs
+ * BUG/MINOR: poll: fix abnormally high skip_fd counter
+ * BUG/MINOR: select: fix excess number of dead/skip reported
+ * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
+ * BUG/MEDIUM: connection: close a rare race between idle conn close and
takeover
+ * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
+ * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
+ * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is
called
+ * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
+ * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
+ * BUG/MINOR: systemd: must check the configuration using -Ws
+ * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers
tree
+ * BUG/MINOR: check: fix the condition to validate a port-less server
+ * BUG/MINOR: stats: Add missing agent stats on servers
+ * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
+ * BUILD/MINOR: memprof fix macOs build.
+ * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
+ * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
+ * BUILD: lua: silence a build warning with TCC
+ * BUILD: add detection of missing important CFLAGS
+ * BUG/MINOR: ssl: Default-server configuration ignored by server
+ * MINOR: mux_h2: define config to disable h2 websocket support
+ * BUILD: http_htx: fix ci compilation error with isdigit for Windows
+
+-------------------------------------------------------------------
Old:
----
haproxy-2.4.2+git0.553dee326.tar.gz
New:
----
haproxy-2.4.3+git0.4dd5a5a6c.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ haproxy.spec ++++++
--- /var/tmp/diff_new_pack.npGd6f/_old 2021-08-23 10:07:52.300267262 +0200
+++ /var/tmp/diff_new_pack.npGd6f/_new 2021-08-23 10:07:52.304267257 +0200
@@ -53,7 +53,7 @@
%endif
Name: haproxy
-Version: 2.4.2+git0.553dee326
+Version: 2.4.3+git0.4dd5a5a6c
Release: 0
#
#
++++++ _service ++++++
--- /var/tmp/diff_new_pack.npGd6f/_old 2021-08-23 10:07:52.340267215 +0200
+++ /var/tmp/diff_new_pack.npGd6f/_new 2021-08-23 10:07:52.344267210 +0200
@@ -6,7 +6,7 @@
<param name="versionformat">@PARENT_TAG@+git@TAG_OFFSET@.%h</param>
<param name="versionrewrite-pattern">v(.*)</param>
<param name="versionrewrite-replacement">\1</param>
- <param name="revision">v2.4.2</param>
+ <param name="revision">v2.4.3</param>
<param name="changesgenerate">enable</param>
</service>
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.npGd6f/_old 2021-08-23 10:07:52.364267187 +0200
+++ /var/tmp/diff_new_pack.npGd6f/_new 2021-08-23 10:07:52.364267187 +0200
@@ -1,6 +1,6 @@
<servicedata>
<service name="tar_scm">
<param name="url">http://git.haproxy.org/git/haproxy-2.4.git</param>
- <param
name="changesrevision">553dee32630347e78cc3a33001c40d26d4245d23</param>
+ <param
name="changesrevision">4dd5a5a6cb7f865f897bf945fba30b2498207520</param>
</service>
</servicedata>
\ No newline at end of file
++++++ haproxy-2.4.2+git0.553dee326.tar.gz ->
haproxy-2.4.3+git0.4dd5a5a6c.tar.gz ++++++
++++ 2282 lines of diff (skipped)
