[ubuntu/eoan-proposed] haproxy 2.0.1-1ubuntu1 (Accepted)

Andreas Hasenack andreas at canonical.com
Mon Jul 8 12:35:13 UTC 2019


haproxy (2.0.1-1ubuntu1) eoan; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - d/t/control, d/t/proxy-localhost: simple DEP8 test to actually
      generate traffic through haproxy.
      [Updated to use "service" instead of "systemctl" to match what was
      submitted to Debian.]

haproxy (2.0.1-1) experimental; urgency=medium

  * New upstream version.
    - BUG/MAJOR: sample: Wrong stick-table name parsing in "if/unless" ACL
                 condition.
    - BUG/MAJOR: mux-h1: Don't crush trash chunk area when outgoing
                 message is formatted
  * d/rules: fix crash during reload due to libgcc_s.so missing when
    chrooted.

haproxy (2.0.0-1) experimental; urgency=medium

  * New upstream version.
  * d/watch: update to follow 2.0.
  * d/gbp.conf: update for 2.0 and experimental.
  * d/rules: update to use linux-glibc target.
  * d/rules: enable prometheus exporter.
  * d/patches: refresh patches.
  * d/vim-haproxy.install: update path to vim syntax file.
  * d/README.Debian: remove outdated information.

haproxy (1.9.8-1) experimental; urgency=medium

  * New upstream version.
    - BUG/MAJOR: map/acl: real fix segfault during show map/acl on CLI
    - BUG/MAJOR: mux-h2: do not add a stream twice to the send list

haproxy (1.9.7-1) experimental; urgency=medium

  * New upstream version.
    - BUG/MAJOR: http_fetch: Get the channel depending on the keyword used
    - BUG/MAJOR: lb/threads: fix AB/BA locking issue in round-robin LB
    - BUG/MAJOR: lb/threads: fix insufficient locking on round-robin LB
    - BUG/MAJOR: muxes: Use the HTX mode to find the best mux for HTTP
                 proxies only
    - BUG/MAJOR: task: make sure never to delete a queued task

haproxy (1.9.6-1) experimental; urgency=medium

  * New upstream version.
    - BUG/MAJOR: checks: segfault during tcpcheck_main

haproxy (1.9.5-1) experimental; urgency=medium

  * New upstream version.
    - BUG/MAJOR: cache/htx: Set the start-line offset when a cached object
                 is served
    - BUG/MAJOR: fd/threads, task/threads: ensure all spin locks are
                 unlocked
    - BUG/MAJOR: listener: Make sure the listener exist before using it.
    - BUG/MAJOR: mux-h2: fix race condition between close on both ends
    - BUG/MAJOR: spoe: Don't try to get agent config during SPOP
                 healthcheck
    - BUG/MAJOR: spoe: Fix initialization of thread-dependent fields
    - BUG/MAJOR: stats: Fix how huge POST data are read from the channel
    - BUG/MAJOR: stream: avoid double free on unique_id
    - BUG/MAJOR: tasks: Use the TASK_GLOBAL flag to know if we're in the
                 global rq.

haproxy (1.9.4-1) experimental; urgency=medium

  * New upstream version.
    - BUG/MAJOR: config: verify that targets of track-sc and stick rules
                 are present
    - BUG/MAJOR: htx/backend: Make all tests on HTTP messages compatible
                 with HTX
    - BUG/MAJOR: spoe: verify that backends used by SPOE cover all their
                 callers' processes

haproxy (1.9.3-1) experimental; urgency=medium

  * New upstream version.
    - BUG/MAJOR: mux-h2: don't destroy the stream on failed allocation in
                 h2_snd_buf()
    - BUG/MEDIUM: checks: fix recent regression on agent-check making it
                  crash
    - BUG/MEDIUM: ssl: Fix handling of TLS 1.3 KeyUpdate messages

haproxy (1.9.2-1) experimental; urgency=medium

  * New upstream version.
    - BUG/MAJOR: cache: fix confusion between zero and uninitialized cache
                 key
    - BUG/MEDIUM: checks: Avoid having an associated server for email
                  checks.
    - BUG/MEDIUM: connection: properly unregister the mux on failed
                  initialization
    - BUG/MEDIUM: h1: Get the h1m state when restarting the headers
                  parsing
    - BUG/MEDIUM: h1: Make sure we destroy an inactive connectin that did
                  shutw.
    - BUG/MEDIUM: init: Initialize idle_orphan_conns for first server in
                  server-template
    - BUG/MEDIUM: mux-h2: decode trailers in HEADERS frames
    - BUG/MEDIUM: ssl: Disable anti-replay protection and set max data
                  with 0RTT.
    - BUG/MEDIUM: ssl: missing allocation failure checks loading tls key
                  file
    - BUG/MEDIUM: stats: Get the right scope pointer depending on HTX is
                  used or not
  * d/patches: removal of CVE-2018-20615.patch (applied upstream)

haproxy (1.9.0-2) experimental; urgency=medium

  * Fix out-of-bounds read in HTTP2 mux (CVE-2018-20615).
    Possible crash in H2 HEADERS frame decoder when the PRIORITY flag
    is present, due to a missing frame size check.
  * Bump Standards-Version to 4.3.0; no changes needed.

haproxy (1.9.0-1) experimental; urgency=medium

  * New upstream version 1.9.0.
    See https://www.haproxy.com/blog/haproxy-1-9-has-arrived/.
  * d/watch: update to follow 1.9.
  * d/gbp.conf: update for 1.9 and experimental.
  * d/rules: do not override CFLAGS, hijack DEBUG_CFLAGS for this instead.
  * d/patches: add regression fix for DNS.

Date: Fri, 05 Jul 2019 15:23:44 -0300
Changed-By: Andreas Hasenack <andreas at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/haproxy/2.0.1-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 05 Jul 2019 15:23:44 -0300
Source: haproxy
Architecture: source
Version: 2.0.1-1ubuntu1
Distribution: eoan
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Andreas Hasenack <andreas at canonical.com>
Changes:
 haproxy (2.0.1-1ubuntu1) eoan; urgency=medium
 .
   * Merge with Debian unstable. Remaining changes:
     - d/t/control, d/t/proxy-localhost: simple DEP8 test to actually
       generate traffic through haproxy.
       [Updated to use "service" instead of "systemctl" to match what was
       submitted to Debian.]
 .
 haproxy (2.0.1-1) experimental; urgency=medium
 .
   * New upstream version.
     - BUG/MAJOR: sample: Wrong stick-table name parsing in "if/unless" ACL
                  condition.
     - BUG/MAJOR: mux-h1: Don't crush trash chunk area when outgoing
                  message is formatted
   * d/rules: fix crash during reload due to libgcc_s.so missing when
     chrooted.
 .
 haproxy (2.0.0-1) experimental; urgency=medium
 .
   * New upstream version.
   * d/watch: update to follow 2.0.
   * d/gbp.conf: update for 2.0 and experimental.
   * d/rules: update to use linux-glibc target.
   * d/rules: enable prometheus exporter.
   * d/patches: refresh patches.
   * d/vim-haproxy.install: update path to vim syntax file.
   * d/README.Debian: remove outdated information.
 .
 haproxy (1.9.8-1) experimental; urgency=medium
 .
   * New upstream version.
     - BUG/MAJOR: map/acl: real fix segfault during show map/acl on CLI
     - BUG/MAJOR: mux-h2: do not add a stream twice to the send list
 .
 haproxy (1.9.7-1) experimental; urgency=medium
 .
   * New upstream version.
     - BUG/MAJOR: http_fetch: Get the channel depending on the keyword used
     - BUG/MAJOR: lb/threads: fix AB/BA locking issue in round-robin LB
     - BUG/MAJOR: lb/threads: fix insufficient locking on round-robin LB
     - BUG/MAJOR: muxes: Use the HTX mode to find the best mux for HTTP
                  proxies only
     - BUG/MAJOR: task: make sure never to delete a queued task
 .
 haproxy (1.9.6-1) experimental; urgency=medium
 .
   * New upstream version.
     - BUG/MAJOR: checks: segfault during tcpcheck_main
 .
 haproxy (1.9.5-1) experimental; urgency=medium
 .
   * New upstream version.
     - BUG/MAJOR: cache/htx: Set the start-line offset when a cached object
                  is served
     - BUG/MAJOR: fd/threads, task/threads: ensure all spin locks are
                  unlocked
     - BUG/MAJOR: listener: Make sure the listener exist before using it.
     - BUG/MAJOR: mux-h2: fix race condition between close on both ends
     - BUG/MAJOR: spoe: Don't try to get agent config during SPOP
                  healthcheck
     - BUG/MAJOR: spoe: Fix initialization of thread-dependent fields
     - BUG/MAJOR: stats: Fix how huge POST data are read from the channel
     - BUG/MAJOR: stream: avoid double free on unique_id
     - BUG/MAJOR: tasks: Use the TASK_GLOBAL flag to know if we're in the
                  global rq.
 .
 haproxy (1.9.4-1) experimental; urgency=medium
 .
   * New upstream version.
     - BUG/MAJOR: config: verify that targets of track-sc and stick rules
                  are present
     - BUG/MAJOR: htx/backend: Make all tests on HTTP messages compatible
                  with HTX
     - BUG/MAJOR: spoe: verify that backends used by SPOE cover all their
                  callers' processes
 .
 haproxy (1.9.3-1) experimental; urgency=medium
 .
   * New upstream version.
     - BUG/MAJOR: mux-h2: don't destroy the stream on failed allocation in
                  h2_snd_buf()
     - BUG/MEDIUM: checks: fix recent regression on agent-check making it
                   crash
     - BUG/MEDIUM: ssl: Fix handling of TLS 1.3 KeyUpdate messages
 .
 haproxy (1.9.2-1) experimental; urgency=medium
 .
   * New upstream version.
     - BUG/MAJOR: cache: fix confusion between zero and uninitialized cache
                  key
     - BUG/MEDIUM: checks: Avoid having an associated server for email
                   checks.
     - BUG/MEDIUM: connection: properly unregister the mux on failed
                   initialization
     - BUG/MEDIUM: h1: Get the h1m state when restarting the headers
                   parsing
     - BUG/MEDIUM: h1: Make sure we destroy an inactive connectin that did
                   shutw.
     - BUG/MEDIUM: init: Initialize idle_orphan_conns for first server in
                   server-template
     - BUG/MEDIUM: mux-h2: decode trailers in HEADERS frames
     - BUG/MEDIUM: ssl: Disable anti-replay protection and set max data
                   with 0RTT.
     - BUG/MEDIUM: ssl: missing allocation failure checks loading tls key
                   file
     - BUG/MEDIUM: stats: Get the right scope pointer depending on HTX is
                   used or not
   * d/patches: removal of CVE-2018-20615.patch (applied upstream)
 .
 haproxy (1.9.0-2) experimental; urgency=medium
 .
   * Fix out-of-bounds read in HTTP2 mux (CVE-2018-20615).
     Possible crash in H2 HEADERS frame decoder when the PRIORITY flag
     is present, due to a missing frame size check.
   * Bump Standards-Version to 4.3.0; no changes needed.
 .
 haproxy (1.9.0-1) experimental; urgency=medium
 .
   * New upstream version 1.9.0.
     See https://www.haproxy.com/blog/haproxy-1-9-has-arrived/.
   * d/watch: update to follow 1.9.
   * d/gbp.conf: update for 1.9 and experimental.
   * d/rules: do not override CFLAGS, hijack DEBUG_CFLAGS for this instead.
   * d/patches: add regression fix for DNS.
Checksums-Sha1:
 57297b48a1b9e447f96bd3f44074d59150e00617 2377 haproxy_2.0.1-1ubuntu1.dsc
 dfdfcab86ad7f11fe0854ae59993a5e886fcda4b 2528926 haproxy_2.0.1.orig.tar.gz
 a9592d53a399eca290c1f7741bb4ccf11386b52e 67840 haproxy_2.0.1-1ubuntu1.debian.tar.xz
 90bd3e59cfcd7f38cd5c4ac87ca24cd5157e3ff6 6561 haproxy_2.0.1-1ubuntu1_source.buildinfo
Checksums-Sha256:
 dc7f17a40e4cb955a4e9b0873d03b3220a483aa4d3560e2d1d8712abb2848d1f 2377 haproxy_2.0.1-1ubuntu1.dsc
 9975c475ba6f19aac4b665d8705f7b9f7911df7fc316ba7b9efd6fe263181eb1 2528926 haproxy_2.0.1.orig.tar.gz
 85e3b66c81b029587ebae9b2fe2f531da55b8e7939280606e082ddf8b7a94065 67840 haproxy_2.0.1-1ubuntu1.debian.tar.xz
 19269e070664ee95029c89042cd7ea0158381230532ae8d3bff0ae24b4852e83 6561 haproxy_2.0.1-1ubuntu1_source.buildinfo
Files:
 e7d424ec6b91a9d570002348c749a290 2377 net optional haproxy_2.0.1-1ubuntu1.dsc
 96dd4897ac46d704e18554541686238d 2528926 net optional haproxy_2.0.1.orig.tar.gz
 526c1bfebd122724592c5aab860d3d90 67840 net optional haproxy_2.0.1-1ubuntu1.debian.tar.xz
 18745e861f513013037bf9f6295cbbee 6561 net optional haproxy_2.0.1-1ubuntu1_source.buildinfo
Original-Maintainer: Debian HAProxy Maintainers <haproxy at tracker.debian.org>

-----BEGIN PGP SIGNATURE-----
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=3TyD
-----END PGP SIGNATURE-----


More information about the Eoan-changes mailing list