Hi, HAProxy 1.9.12 was released on 2019/10/24. It added 39 new commits after version 1.9.11.
This version addresses mostly the same issues as 2.0.8 yesterday. In addition it addresses a failed backport of the H2 connection timeout fix, which can cause some rare crashes if the timeout finally strikes at the exact same moment a new stream is created. Please note that we're reaching a point where 2.0 starts to work better than 1.9. There are still issues being addressed in 2.0 but they are also present in 1.9 and will probably be harder to fix in 1.9 (read "the fixes may be less reliable there"). Given that 1.9 is not supposed to be maintained long, it's worth starting to think about migrating at some point. There's no rush though, but each update should be a reminder that it doesn't require much more work to jump than to stay on the same branch ;-) Please find the usual URLs below : Site index : http://www.haproxy.org/ Discourse : http://discourse.haproxy.org/ Slack channel : https://slack.haproxy.org/ Issue tracker : https://github.com/haproxy/haproxy/issues Sources : http://www.haproxy.org/download/1.9/src/ Git repository : http://git.haproxy.org/git/haproxy-1.9.git/ Git Web browsing : http://git.haproxy.org/?p=haproxy-1.9.git Changelog : http://www.haproxy.org/download/1.9/src/CHANGELOG Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/ Willy --- Complete changelog : Christopher Faulet (8): BUG/MEDIUM: htx: Catch chunk_memcat() failures when HTX data are formatted to h1 BUG/MINOR: chunk: Fix tests on the chunk size in functions copying data BUG/MINOR: mux-h1: Mark the output buffer as full when the xfer is interrupted BUG/MINOR: mux-h1: Capture ignored parsing errors BUG/MINOR: http-htx: Properly set htx flags on error files to support keep-alive BUG/MINOR: tcp: Don't alter counters returned by tcp info fetchers BUG/MINOR: ssl: Fix fd leak on error path when a TLS ticket keys file is parsed BUG/MINOR: stick-table: Never exceed (MAX_SESS_STKCTR-1) when fetching a stkctr Emeric Brun (5): CLEANUP: ssl: make ssl_sock_put_ckch_into_ctx handle errcode/warn CLEANUP: ssl: make ssl_sock_load_dh_params handle errcode/warn CLEANUP: bind: handle warning label on bind keywords parsing. BUG/MEDIUM: ssl: 'tune.ssl.default-dh-param' value ignored with openssl > 1.1.1 BUG/MINOR: ssl: fix memcpy overlap without consequences. Miroslav Zagorac (1): BUG/MINOR: WURFL: fix send_log() function arguments Olivier Houchard (4): BUG/MEDIUM: mux_pt: Make sure we don't have a conn_stream before freeing. Revert e8826ded5fea3593d89da2be5c2d81c522070995. BUG/MEDIUM: mux_pt: Don't destroy the connection if we have a stream attached. BUG/MEDIUM: mux_pt: Only call the wake emthod if nobody subscribed to receive. Tim Duesterhus (2): BUG/MINOR: lua: Properly initialize the buffer's fields for string samples in hlua_lua2(smp|arg) BUG/MINOR: sample: Make the `field` converter compatible with `-m found` William Lallemand (7): BUG/MINOR: ssl: abort on sni allocation failure BUG/MINOR: ssl: free the sni_keytype nodes BUG/MINOR: ssl: abort on sni_keytypes allocation failure BUILD: ssl: wrong #ifdef for SSL engines code BUG/MINOR: mworker/ssl: close openssl FDs unconditionally BUG/MINOR: mworker/cli: reload fail with inherited FD BUG/MINOR: cache: alloc shctx after check config Willy Tarreau (12): MINOR: mux-h2: add a per-connection list of blocked streams BUILD: ebtree: make eb_is_empty() and eb_is_dup() take a const BUG/MEDIUM: mux-h2: do not enforce timeout on long connections BUG/MEDIUM: cache: make sure not to cache requests with absolute-uri DOC: clarify some points around http-send-name-header's behavior MINOR: stats: mention in the help message support for "json" and "typed" BUG/MAJOR: idle conns: schedule the cleanup task on the correct threads CLEANUP: ssl: make ssl_sock_load_cert*() return real error codes BUG/MAJOR: mux-h2: fix incorrect backport of connection timeout fix BUG/MINOR: mux-h2: also make sure blocked legacy connections may expire BUG/MINOR: stick-table: fix an incorrect 32 to 64 bit key conversion BUG/MEDIUM: pattern: make the pattern LRU cache thread-local and lockless ---