Hi, HAProxy 2.2.4 was released on 2020/09/30. It added 25 new commits after version 2.2.3.
For once there's nothing really important, it's just a pipe flush, so most users might be encouraged to have a look at it and consider an update when they have nothing better to do on a rainy day. The main fixes are a rework of my ugly workaround for libgcc_s crashes that broke 2.2.3 on armv7, an issue by which updating maps on the CLI could sometimes leave dangling entries accessible from the pattern cache, a problem with the way multi-process listeners are paused and resumed in failed attempts at a soft-reload (a socket not bound on all process may never be able to recover), and a risk of crash when using SSL crypto engines. There are a few other pretty minor ones such as parser leaks, crtlist parsing issues, and an undesired case sensitivity in verifyhost. The "path-only" option to "balance uri" was backported from 2.3 as too many users were experiencing trouble with inconsistent hashing of HTTP/1.1 and HTTP/2 URIs. That's roughly all. No rush, if you're not facing any bug, it's unlikely to make your life better. But it may save you from keeping a patch or two in your local tree, which is always appreciated. Please find the usual URLs below : Site index : http://www.haproxy.org/ Discourse : http://discourse.haproxy.org/ Slack channel : https://slack.haproxy.org/ Issue tracker : https://github.com/haproxy/haproxy/issues Wiki : https://github.com/haproxy/wiki/wiki Sources : http://www.haproxy.org/download/2.2/src/ Git repository : http://git.haproxy.org/git/haproxy-2.2.git/ Git Web browsing : http://git.haproxy.org/?p=haproxy-2.2.git Changelog : http://www.haproxy.org/download/2.2/src/CHANGELOG Cyril's HTML doc : http://cbonte.github.io/haproxy-dconv/ Willy --- Complete changelog : Amaury Denoyelle (1): BUG/MINOR: config: Fix memory leak on config parse listen Christopher Faulet (2): BUG/MEDIUM: pattern: Renew the pattern expression revision when it is pruned BUG/MINOR: http-fetch: Don't set the sample type during the htx prefetch Eric Salama (1): BUG/MINOR: Fix memory leaks cfg_parse_peers Ilya Shipitsin (1): REGTESTS: use "command" instead of "which" for better POSIX compatibility Miroslav Zagorac (1): BUILD: trace: include tools.h Olivier Houchard (1): BUG/MEDIUM: ssl: Don't call ssl_sock_io_cb() directly. Tim Duesterhus (1): BUG/MINOR: Fix type passed of sizeof() for calloc() William Dauchy (1): DOC: agent-check: fix typo in "fail" word expected reply William Lallemand (3): BUG/MINOR: ssl: verifyhost is case sensitive BUG/MINOR: ssl/crt-list: crt-list could end without a \n BUG/MINOR: ssl/crt-list: exit on warning out of crtlist_parse_line() Willy Tarreau (13): BUILD: threads: better workaround for late loading of libgcc_s BUG/MINOR: server: report correct error message for invalid port on "socks4" BUG/MINOR: h2/trace: do not display "stream error" after a frame ACK BUG/MEDIUM: h2: report frame bits only for handled types MINOR: h2/trace: also display the remaining frame length in traces MINOR: backend: make the "whole" option of balance uri take only one bit MINOR: backend: add a new "path-only" option to "balance uri" REGTESTS: add a few load balancing tests BUG/MEDIUM: listeners: do not pause foreign listeners REGTEST: fix host part in balance-uri-path-only.vtc REGTEST: make agent-check.vtc require 1.8 REGTEST: make abns_socket.vtc require 1.8 REGTEST: make map_regm_with_backref require 1.7 ---
