HAProxy 1.8.27 was released on 2020/11/06. It added 44 new commits after
version 1.8.26. Every 1.8 users are encouraged to upgrade as it
contains several bug fixes.

This release contains some fixes also present on higher versions. Most
notably a fix on the h2 multiplexer, a thread-safety bug on
load-balancer algorithms, a design issue on SPOE and the skipping of
disabled proxies for filters. Also there is the possibility now to
update the server-state file without crashing haproxy. You can look the
detailled reports for them on 2.2.5 announce.

In addition, the following changes have been made :

The h2 multiplexer is more robust thanks to Christopher and Willy. First
it is now able to parse incomplete chunk formatting. An issue has also
been raised due to a certain combination of frame type and flags which
haproxy interprets wrongly as invalid and is now fixed.

Some improvement on the ssl have been made by William. Notably, a better
algorithm to choose a certificate when using wildcards with respect to
the supported encryption algorithm.

The lua engine now prevents to load map at runtime, which should never
have been permitted. There is also additional checks on arguments when
doing ip address manipulation.

A nasty bug has fixed by Willy, triggered when using multi processes
with expose-fd. In short, the "disable frontend" command had the
side-effect of pausing other process socket file-descriptors. Now this
case is properly handled, the other listeners are not impacted.

There is also a list of smaller fixes. Again, look at 2.2.5 announce that
summarizes them for more info.

Thanks to everyone for this release. Enjoy !

Please find the usual URLs below :
   Site index       : http://www.haproxy.org/
   Discourse        : http://discourse.haproxy.org/
   Slack channel    : https://slack.haproxy.org/
   Issue tracker    : https://github.com/haproxy/haproxy/issues
   Wiki             : https://github.com/haproxy/wiki/wiki
   Sources          : http://www.haproxy.org/download/1.8/src/
   Git repository   : http://git.haproxy.org/git/haproxy-1.8.git/
   Git Web browsing : http://git.haproxy.org/?p=haproxy-1.8.git
   Changelog        : http://www.haproxy.org/download/1.8/src/CHANGELOG
   Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/

Complete changelog :
Amaury Denoyelle (6):
      BUG/MINOR: config: Fix memory leak on config parse listen
      MINOR: counters: fix a typo in comment
      BUG/MINOR: stats: fix validity of the json schema
      BUG/MINOR: server: fix srv downtime calcul on starting
      BUG/MINOR: server: fix down_time report for stats
      BUG/MINOR: lua: initialize sample before using it

Christopher Faulet (13):
      BUG/MEDIUM: mux-h2: Don't fail if nothing is parsed for a legacy chunk 
      BUG/MEDIUM: map/lua: Return an error if a map is loaded during runtime
      BUG/MINOR: lua: Check argument type to convert it to IPv4/IPv6 arg 
      BUG/MINOR: lua: Check argument type to convert it to IP mask in arg 
      BUG/MEDIUM: pattern: Renew the pattern expression revision when it is 
      MINOR: hlua: Display debug messages on stderr only in debug mode
      BUG/MEDIUM: spoe: Unset variable instead of set it if no data provided
      BUG/MEDIUM: lb: Always lock the server when calling 
      BUG/MAJOR: mux-h2: Don't try to send data if we know it is no longer 
      BUG/MEDIUM: filters: Don't try to init filters for disabled proxies
      BUG/MINOR: server: Set server without addr but with dns in RMAINT on 
      MINOR: server: Copy configuration file and line for server templates
      BUG/MINOR: filters: Skip disabled proxies during startup only

Dragan Dosen (1):
      BUG/MEDIUM: pattern: fix memory leak in regex pattern functions

Lukas Tribus (1):
      BUG/MINOR: dns: ignore trailing dot

Remi Tricot-Le Breton (1):
      BUG/MINOR: cache: Inverted variables in http_calc_maxage function

Tim Duesterhus (2):
      MINOR: Commit .gitattributes
      CLEANUP: Update .gitignore

William Dauchy (1):
      DOC: agent-check: fix typo in "fail" word expected reply

William Lallemand (5):
      BUG/MINOR: startup: haproxy -s cause 100% cpu
      BUG/MEDIUM: ssl: check OCSP calloc in ssl_sock_load_ocsp()
      BUG/MEDIUM: ssl: does not look for all SNIs before chosing a certificate
      BUG/MINOR: ssl: verifyhost is case sensitive
      DOC: ssl: crt-list negative filters are only a hint

Willy Tarreau (14):
      BUG/MINOR: stats: use strncmp() instead of memcmp() on health states
      BUG/MINOR: reload: do not fail when no socket is sent
      BUG/MINOR: threads: work around a libgcc_s issue with chrooting
      BUILD: thread: limit the libgcc_s workaround to glibc only
      BUILD: threads: better workaround for late loading of libgcc_s
      BUG/MEDIUM: h2: report frame bits only for handled types
      BUG/MEDIUM: listeners: do not pause foreign listeners
      REGTESTS: add a few load balancing tests
      REGTEST: fix host part in balance-uri-path-only.vtc
      REGTEST: make abns_socket.vtc require 1.8
      REGTEST: make map_regm_with_backref require 1.7
      BUG/MINOR: queue: properly report redistributed connections
      BUG/MEDIUM: server: support changing the slowstart value from state-file
      BUG/MINOR: extcheck: add missing checks on extchk_setenv()

Amaury Denoyelle

Reply via email to