Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package haproxy for openSUSE:Factory checked in at 2024-02-27 22:47:47 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/haproxy (Old) and /work/SRC/openSUSE:Factory/.haproxy.new.1770 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "haproxy" Tue Feb 27 22:47:47 2024 rev:141 rq:1151945 version:2.9.6+git0.9eafce5dc Changes: -------- --- /work/SRC/openSUSE:Factory/haproxy/haproxy.changes 2024-01-25 18:41:02.838318940 +0100 +++ /work/SRC/openSUSE:Factory/.haproxy.new.1770/haproxy.changes 2024-02-27 22:47:49.633397591 +0100 @@ -1,0 +2,99 @@ +Mon Feb 26 19:55:05 UTC 2024 - mrueck...@suse.de + +- Update to version 2.9.6+git0.9eafce5dc: + * [RELEASE] Released version 2.9.6 + * BUG/MAJOR: ssl/ocsp: crash with ocsp when old process exit or using ocsp CLI + * BUG/MAJOR: promex: fix crash on deleted server + +------------------------------------------------------------------- +Mon Feb 26 19:54:49 UTC 2024 - mrueck...@suse.de + +- Update to version 2.9.5+git0.260dbb8a6: + * [RELEASE] Released version 2.9.5 + * BUG/MEDIUM: mux-h2: Don't report error on SE for closed H2 streams + * BUG/MEDIUM: mux-h2: Don't report error on SE if error is only pending on H2C + * BUG/MEDIUM: mux-h2: Only Report H2C error on read error if demux buffer is empty + * BUG/MEDIUM: mux-h2: Switch pending error to error if demux buffer is empty + * MINOR: muxes/applet: Simplify checks on options to disable zero-copy forwarding + * BUG/MAJOR: stconn: Check support for zero-copy forwarding on both sides + * MINOR: muxes: Announce support for zero-copy forwarding on consumer side + * MINOR: stconn: Add SE flag to announce zero-copy forwarding on consumer side + * MINOR: stconn: Rename SE_FL_MAY_FASTFWD and reorder bitfield + * CLEANUP: stconn: Move SE flags set by app layer at the end of the bitfield + * BUG/MEDIUM: stconn: Don't check pending shutdown to wake an applet up + * BUG/MEDIUM: stconn: Allow expiration update when READ/WRITE event is pending + * MINOR: quic: Add a counter for reordered packets + * MINOR: quic: Dynamic packet reordering threshold + * MINOR: quic: Update K CUBIC calculation (RFC 9438) + * BUG/MEDIUM: quic: Wrong K CUBIC calculation. + * BUG/MEDIUM: ssl: Fix crash when calling "update ssl ocsp-response" when an update is ongoing + * BUG/MEDIUM: pool: fix rare risk of deadlock in pool_flush() + * BUILD: address a few remaining calloc(size, n) cases + * CI: Update to actions/cache@v4 + * BUG/MEDIUM: cli: fix once for all the problem of missing trailing LFs + * BUG/MINOR: vars/cli: fix missing LF after "get var" output + * DOC: internal: update missing data types in peers-v2.0.txt + * DOC: config: fix misplaced "bytes_{in,out}" + * DOC: config: fix typos for "bytes_{in,out}" + * DOC: config: fix misplaced "txn.conn_retries" + * DOC: install: recommend pcre2 + * REGTESTS: ssl: Add OCSP related tests + * REGTESTS: ssl: Fix empty line in cli command input + * BUG/MINOR: ssl: Reenable ocsp auto-update after an "add ssl crt-list" + * BUG/MINOR: ssl: Destroy ckch instances before the store during deinit + * BUG/MEDIUM: ocsp: Separate refcount per instance and per store + * MINOR: ssl: Use OCSP_CERTID instead of ckch_store in ckch_store_build_certid + * BUG/MINOR: ssl: Clear the ckch instance when deleting a crt-list line + * BUG/MINOR: ssl: Duplicate ocsp update mode when dup'ing ckch + * MINOR: debug: make BUG_ON() catch build errors even without DEBUG_STRICT + * BUILD: debug: remove leftover parentheses in ABORT_NOW() + * MINOR: debug: make ABORT_NOW() store the caller's line number when using abort + * MINOR: debug: make sure calls to ha_crash_now() are never merged + * MINOR: compiler: add a new DO_NOT_FOLD() macro to prevent code folding + * MINOR: quic: Stop using 1024th of a second. + * BUG/MINOR: quic: fix possible integer wrap around in cubic window calculation + * CLEANUP: quic: Code clarifications for QUIC CUBIC (RFC 9438) + * BUG/MINOR: ssl: Fix error message after ssl_sock_load_ocsp call + * BUILD: quic: Variable name typo inside a BUG_ON(). + * BUG/MINOR: quic: Wrong ack ranges handling when reaching the limit. + * BUG/MINOR: diag: run the final diags before quitting when using -c + * BUG/MINOR: diag: always show the version before dumping a diag warning + +------------------------------------------------------------------- +Mon Feb 26 19:54:25 UTC 2024 - mrueck...@suse.de + +- Update to version 2.9.4+git0.4e071ad92: + * [RELEASE] Released version 2.9.4 + * BUG/MEDIUM: h1: always reject the NUL character in header values + * BUG/MINOR: h1-htx: properly initialize the err_pos field + * DOC: httpclient: add dedicated httpclient section + * BUG/MEDIUM: h1: Don't support LF only to mark the end of a chunk size + * BUG/MINOR: h1: Don't support LF only at the end of chunks + * BUG/MEDIUM: quic: fix crash on invalid qc_stream_buf_free() BUG_ON + * BUG/MEDIUM: qpack: allow 6xx..9xx status codes + * BUG/MEDIUM: h3: do not crash on invalid response status code + * MINOR: h3: add traces for stream sending function + * BUG/MAJOR: ssl_sock: Always clear retry flags in read/write functions + * DOC: configuration: clarify http-request wait-for-body + * BUG/MEDIUM: quic: remove unsent data from qc_stream_desc buf + * MINOR: quic: extract qc_stream_buf free in a dedicated function + * MINOR: quic: Stop hardcoding a scale shifting value (CUBIC_BETA_SCALE_FACTOR_SHIFT) + * CLEANUP: quic: Remove unused CUBIC_BETA_SCALE_FACTOR_SHIFT macro. + * BUG/MINOR: quic: newreno QUIC congestion control algorithm no more available + * BUG/MEDIUM: cache: Fix crash when deleting secondary entry + * BUG/MINOR: hlua: fix uninitialized var in hlua_core_get_var() + * BUG/MINOR: jwt: fix jwt_verify crash on 32-bit archs + * BUG/MEDIUM: cli: some err/warn msg dumps add LR into CSV output on stat's CLI + * MINOR: mux-h2/traces: add a missing trace on connection WU with negative inc + * BUG/MEDIUM: mux-h2: refine connection vs stream error on headers + * DOC: configuration: fix set-dst in actions keywords matrix + * BUG/MINOR: h3: fix checking on NULL Tx buffer + +------------------------------------------------------------------- +Sun Feb 4 22:52:43 UTC 2024 - Georg Pfuetzenreuter <georg.pfuetzenreu...@suse.com> + +- Set /run/haproxy as the default PID file and socket location + Adds haproxy-service.patch +- Allow custom stats socket names + +------------------------------------------------------------------- Old: ---- haproxy-2.9.3+git0.de3ab549a.tar.gz New: ---- haproxy-2.9.6+git0.9eafce5dc.tar.gz haproxy-service.patch haproxy-tmpfiles.conf BETA DEBUG BEGIN: New:- Set /run/haproxy as the default PID file and socket location Adds haproxy-service.patch - Allow custom stats socket names BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ haproxy.spec ++++++ --- /var/tmp/diff_new_pack.EWqcpH/_old 2024-02-27 22:47:50.925444091 +0100 +++ /var/tmp/diff_new_pack.EWqcpH/_new 2024-02-27 22:47:50.925444091 +0100 @@ -1,7 +1,7 @@ # # spec file for package haproxy # -# Copyright (c) 2019 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -12,7 +12,7 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via http://bugs.opensuse.org/ +# Please submit bugfixes or comments via https://bugs.opensuse.org/ %bcond_with quic %if 0%{?suse_version} >= 1230 @@ -46,12 +46,14 @@ %if 0%{?suse_version} >= 1500 %bcond_without sysusers +%bcond_without tmpfiles %else %bcond_with sysusers +%bcond_with tmpfiles %endif Name: haproxy -Version: 2.9.3+git0.de3ab549a +Version: 2.9.6+git0.9eafce5dc Release: 0 # # @@ -96,9 +98,11 @@ Source3: local.usr.sbin.haproxy.apparmor Source4: haproxy.cfg Source5: haproxy-user.conf +Source6: haproxy-tmpfiles.conf Patch1: haproxy-1.6.0_config_haproxy_user.patch Patch2: haproxy-1.6.0-makefile_lib.patch Patch3: haproxy-1.6.0-sec-options.patch +Patch4: haproxy-service.patch # Source98: series Source99: haproxy-rpmlintrc @@ -195,6 +199,9 @@ %if %{with sysusers} install -D -m 644 %{SOURCE5} %{buildroot}%{_sysusersdir}/haproxy-user.conf %endif +%if %{with tmpfiles} +install -D -m 644 %{SOURCE6} %{buildroot}%{_tmpfilesdir}/%{name}.conf +%endif %else install -D -m 0755 %{S:1} %{buildroot}%{_sysconfdir}/init.d/%{pkg_name} ln -fs %{_sysconfdir}/init.d/%{pkg_name} %{buildroot}%{_sbindir}/rc%{pkg_name} @@ -224,6 +231,11 @@ %if %{with apparmor} && %{with apparmor_reload} %apparmor_reload /etc/apparmor.d/usr.sbin.haproxy %endif +%if %{with systemd} +%if %{with tmpfiles} +%tmpfiles_create %{_tmpfilesdir}/%{name}.conf +%endif +%endif %service_add_post %{pkg_name}.service %preun @@ -268,6 +280,10 @@ %if %{with sysusers} %{_sysusersdir}/haproxy-user.conf %endif +%if %{with tmpfiles} +%{_tmpfilesdir}/%{name}.conf +%dir %ghost %{_rundir}/%{name} +%endif %else %config(noreplace) %{_sysconfdir}/init.d/%{pkg_name} %endif ++++++ _service ++++++ --- /var/tmp/diff_new_pack.EWqcpH/_old 2024-02-27 22:47:50.953445099 +0100 +++ /var/tmp/diff_new_pack.EWqcpH/_new 2024-02-27 22:47:50.957445243 +0100 @@ -6,6 +6,7 @@ <param name="versionformat">@PARENT_TAG@+git@TAG_OFFSET@.%h</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="versionrewrite-replacement">\1</param> + <param name="revision">v2.9.6</param> <param name="changesgenerate">enable</param> </service> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.EWqcpH/_old 2024-02-27 22:47:50.973445819 +0100 +++ /var/tmp/diff_new_pack.EWqcpH/_new 2024-02-27 22:47:50.977445963 +0100 @@ -1,7 +1,7 @@ <servicedata> <service name="tar_scm"> <param name="url">https://git.haproxy.org/git/haproxy-2.9.git</param> - <param name="changesrevision">de3ab549a598bd3817bd77ae2ea5c03544637c3d</param> + <param name="changesrevision">9eafce5dcb188671be3adf5b217e30c85f2b0cf3</param> </service> </servicedata> (No newline at EOF) ++++++ haproxy-2.9.3+git0.de3ab549a.tar.gz -> haproxy-2.9.6+git0.9eafce5dc.tar.gz ++++++ ++++ 2967 lines of diff (skipped) ++++++ haproxy-service.patch ++++++ --- a/admin/systemd/haproxy.service.in 2024-01-18 15:32:19.000000000 +0100 +++ b/admin/systemd/haproxy.service.in 2024-02-04 23:58:30.873980359 +0100 @@ -6,7 +6,7 @@ [Service] EnvironmentFile=-/etc/default/haproxy EnvironmentFile=-/etc/sysconfig/haproxy -Environment="CONFIG=/etc/haproxy/haproxy.cfg" "PIDFILE=/run/haproxy.pid" "EXTRAOPTS=-S /run/haproxy-master.sock" +Environment="CONFIG=/etc/haproxy/haproxy.cfg" "PIDFILE=/run/haproxy/pid" "EXTRAOPTS=-S /run/haproxy/master.sock" ExecStart=@SBINDIR@/haproxy -Ws -f $CONFIG -p $PIDFILE $EXTRAOPTS ExecReload=@SBINDIR@/haproxy -Ws -f $CONFIG -c $EXTRAOPTS ExecReload=/bin/kill -USR2 $MAINPID ++++++ haproxy-tmpfiles.conf ++++++ D /run/haproxy 0750 root haproxy ++++++ haproxy.cfg ++++++ --- /var/tmp/diff_new_pack.EWqcpH/_old 2024-02-27 22:47:51.721472740 +0100 +++ /var/tmp/diff_new_pack.EWqcpH/_new 2024-02-27 22:47:51.725472883 +0100 @@ -5,7 +5,7 @@ user haproxy group haproxy daemon - stats socket /var/lib/haproxy/stats user haproxy group haproxy mode 0640 level operator + stats socket /run/haproxy/stats.sock user haproxy group haproxy mode 0640 level operator tune.bufsize 32768 tune.ssl.default-dh-param 2048 ssl-default-bind-ciphers ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH ++++++ usr.sbin.haproxy.apparmor ++++++ --- /var/tmp/diff_new_pack.EWqcpH/_old 2024-02-27 22:47:51.765474324 +0100 +++ /var/tmp/diff_new_pack.EWqcpH/_new 2024-02-27 22:47:51.769474467 +0100 @@ -28,11 +28,15 @@ /dev/shm/haproxy_startup_logs_* rwlk, + # old stats socket location, for compatibility /var/lib/haproxy/stats rwl, /var/lib/haproxy/stats.*.bak rwl, /var/lib/haproxy/stats.*.tmp rwl, - /{,var/}run/haproxy.pid rw, - /{,var/}run/haproxy-master.sock* rwlk, + # new stats socket location + /run/haproxy/stats*.sock{,*.{bak,tmp}} rwl, + + /{,var/}run/haproxy/pid rw, + /{,var/}run/haproxy/master.sock* rwlk, /sys/devices/system/node/ r,