~ubuntu-branches/ubuntu/wily/haproxy/wily : changes

~ubuntu-branches/ubuntu/wily/haproxy/wily » Changes from revision 30

From Revision 30 to 11

Rev	Summary	Authors	Tags	Date
30	* New upstream version. Fix an information leak (CVE-2015-32... * New upstream version. Fix an information leak (CVE-2015-3281): - BUG/MAJOR: buffers: make the buffer_slow_realign() function respect output data. * Add $named as a dependency for init script. Closes: #790638.	Vincent Bernat	1.5.14-1	8 years ago
29	* New upstream stable release including the following fixes: * New upstream stable release including the following fixes: - MAJOR: peers: allow peers section to be used with nbproc > 1 - BUG/MAJOR: checks: always check for end of list before proceeding - MEDIUM: ssl: replace standards DH groups with custom ones - BUG/MEDIUM: ssl: fix tune.ssl.default-dh-param value being overwritten - BUG/MEDIUM: cfgparse: segfault when userlist is misused - BUG/MEDIUM: stats: properly initialize the scope before dumping stats - BUG/MEDIUM: http: don't forward client shutdown without NOLINGER except for tunnels - BUG/MEDIUM: checks: do not dereference head of a tcp-check at the end - BUG/MEDIUM: checks: do not dereference a list as a tcpcheck struct - BUG/MEDIUM: peers: apply a random reconnection timeout - BUG/MEDIUM: config: properly compute the default number of processes for a proxy	Vincent Bernat	1.5.13-1	8 years ago
28	* New upstream stable release including the following fixes: * New upstream stable release including the following fixes: - BUG/MAJOR: http: don't read past buffer's end in http_replace_value - BUG/MAJOR: http: prevent risk of reading past end with balance url_param - BUG/MEDIUM: Do not consider an agent check as failed on L7 error - BUG/MEDIUM: patern: some entries are not deleted with case insensitive match - BUG/MEDIUM: buffer: one byte miss in buffer free space check - BUG/MEDIUM: http: thefunction "(req\|res)-replace-value" doesn't respect the HTTP syntax - BUG/MEDIUM: peers: correctly configure the client timeout - BUG/MEDIUM: http: hdr_cnt would not count any header when called without name - BUG/MEDIUM: listener: don't report an error when resuming unbound listeners - BUG/MEDIUM: init: don't limit cpu-map to the first 32 processes only - BUG/MEDIUM: stream-int: always reset si->ops when si->end is nullified - BUG/MEDIUM: http: remove content-length from chunked messages - BUG/MEDIUM: http: do not restrict parsing of transfer-encoding to HTTP/1.1 - BUG/MEDIUM: http: incorrect transfer-coding in the request is a bad request - BUG/MEDIUM: http: remove content-length form responses with bad transfer-encoding - BUG/MEDIUM: http: wait for the exact amount of body bytes in wait_for_request_body	Vincent Bernat	1.5.12-1	8 years ago
27	* New upstream stable release including the following fixes: * New upstream stable release including the following fixes: - BUG/MAJOR: stream-int: properly check the memory allocation return - BUG/MEDIUM: sample: fix random number upper-bound - BUG/MEDIUM: patterns: previous fix was incomplete - BUG/MEDIUM: payload: ensure that a request channel is available - BUG/MEDIUM: tcp-check: don't rely on random memory contents - BUG/MEDIUM: tcp-checks: disable quick-ack unless next rule is an expect - BUG/MEDIUM: config: do not propagate processes between stopped processes - BUG/MEDIUM: memory: fix freeing logic in pool_gc2() - BUG/MEDIUM: compression: correctly report zlib_mem * Upload to experimental.	Vincent Bernat	1.5.10-1	9 years ago
26	* Cherry-pick the following patches from 1.5.9 release: * Cherry-pick the following patches from 1.5.9 release: - 8a0b93bde77e BUG/MAJOR: sessions: unlink session from list on out of memory - bae03eaad40a BUG/MEDIUM: pattern: don't load more than once a pattern list. - 93637b6e8503 BUG/MEDIUM: connection: sanitize PPv2 header length before parsing address information - 8ba50128832b BUG/MAJOR: frontend: initialize capture pointers earlier - 1f96a87c4e14 BUG/MEDIUM: checks: fix conflicts between agent checks and ssl healthchecks - 9bcc01ae2598 BUG/MEDIUM: ssl: force a full GC in case of memory shortage - 909514970089 BUG/MEDIUM: ssl: fix bad ssl context init can cause segfault in case of OOM. * Cherry-pick the following patches from future 1.5.10 release: - 1e89acb6be9b BUG/MEDIUM: payload: ensure that a request channel is available - bad3c6f1b6d7 BUG/MEDIUM: patterns: previous fix was incomplete	Vincent Bernat	1.5.8-2	9 years ago
25	* New upstream stable release including the following fixes: * New upstream stable release including the following fixes: + BUG/MAJOR: buffer: check the space left is enough or not when input data in a buffer is wrapped + BUG/MINOR: ssl: correctly initialize ssl ctx for invalid certificates + BUG/MEDIUM: tcp: don't use SO_ORIGINAL_DST on non-AF_INET sockets + BUG/MEDIUM: regex: fix pcre_study error handling + BUG/MEDIUM: tcp: fix outgoing polling based on proxy protocol + BUG/MINOR: log: fix request flags when keep-alive is enabled + BUG/MAJOR: cli: explicitly call cli_release_handler() upon error + BUG/MEDIUM: http: don't dump debug headers on MSG_ERROR * Also includes the following new features: + MINOR: ssl: add statement to force some ssl options in global. + MINOR: ssl: add fetchs 'ssl_c_der' and 'ssl_f_der' to return DER formatted certs * Disable SSLv3 in the default configuration file.	Vincent Bernat	1.5.8-1	9 years ago
24	haproxy.init: return 0 on stop if haproxy was not running. ... haproxy.init: return 0 on stop if haproxy was not running. (LP: #1038139)	Serge Hallyn	1.5.4-1ubuntu1	9 years ago
23	* New upstream version. * New upstream version. + Fix a critical bug that, under certain unlikely conditions, allows a client to crash haproxy. * Prefix rsyslog configuration file to ensure to log only to /var/log/haproxy. Thanks to Paul Bourke for the patch.	Vincent Bernat	1.5.4-1	9 years ago
22	* New upstream stable release, fixing the following issues: * New upstream stable release, fixing the following issues: + Memory corruption when building a proxy protocol v2 header + Memory leak in SSL DHE key exchange	Apollon Oikonomopoul...	1.5.3-1	9 years ago
21	* New upstream stable release. Important fixes: * New upstream stable release. Important fixes: + A few sample fetch functions when combined in certain ways would return malformed results, possibly crashing the HAProxy process. + Hash-based load balancing and http-send-name-header would fail for requests which contain a body which starts to be forwarded before the data is used.	Apollon Oikonomopoul...	1.5.2-1	9 years ago
20	* New upstream stable release: * New upstream stable release: + Fix a file descriptor leak for clients that disappear before connecting. + Do not staple expired OCSP responses.	Apollon Oikonomopoul...	1.5.1-1	9 years ago
19	* New upstream stable series. Notable changes since the 1.4 ... * New upstream stable series. Notable changes since the 1.4 series: + Native SSL support on both sides with SNI/NPN/ALPN and OCSP stapling. + IPv6 and UNIX sockets are supported everywhere + End-to-end HTTP keep-alive for better support of NTLM and improved efficiency in static farms + HTTP/1.1 response compression (deflate, gzip) to save bandwidth + PROXY protocol versions 1 and 2 on both sides + Data sampling on everything in request or response, including payload + ACLs can use any matching method with any input sample + Maps and dynamic ACLs updatable from the CLI + Stick-tables support counters to track activity on any input sample + Custom format for logs, unique-id, header rewriting, and redirects + Improved health checks (SSL, scripted TCP, check agent, ...) + Much more scalable configuration supports hundreds of thousands of backends and certificates without sweating * Upload to unstable, merge all 1.5 work from experimental. Most important packaging changes since 1.4.25-1 include: + systemd support. + A more sane default config file. + Zero-downtime upgrades between 1.5 releases by gracefully reloading HAProxy during upgrades. + HTML documentation shipped in the haproxy-doc package. + kqueue support for kfreebsd. * Packaging changes since 1.5~dev26-2: + Drop patches merged upstream: o Fix-reference-location-in-manpage.patch o 0001-BUILD-stats-workaround-stupid-and-bogus-Werror-forma.patch + d/watch: look for stable 1.5 releases + systemd: respect CONFIG and EXTRAOPTS when specified in /etc/default/haproxy. + initscript: test the configuration before start or reload. + initscript: remove the ENABLED flag and logic.	Apollon Oikonomopoul...	1.5.0-1	9 years ago
18	[ Prach Pongpanich ] [ Prach Pongpanich ] * New upstream version. * Update watch file to use the source page. * Bump Standards-Version to 3.9.5. [ Thomas Bechtold ] * debian/control: Add haproxy-dbg binary package for debug symbols. [ Apollon Oikonomopoulos ] * Require syslog to be operational before starting. Closes: #726323. * Document how to bind non-local IPv6 addresses. * Add a reference to configuration.txt.gz to the manpage. * debian/copyright: synchronize with source.	Prach Pongpanich	1.4.25-1	10 years ago
17	[ Apollon Oikonomopoulos ] [ Apollon Oikonomopoulos ] * Ship contrib/halog as /usr/bin/halog. [ Vincent Bernat ] * Don't use -L/usr/lib and rely on default search path. Closes: #722777.	Vincent Bernat	1.4.24-2	10 years ago
16	[ Vincent Bernat ] [ Vincent Bernat ] * New upstream version. + CVE-2013-2175: fix a possible crash when using negative header occurrences. [ Prach Pongpanich ] * Drop bashism patch. It seems useless to maintain a patch to convert example scripts from /bin/bash to /bin/sh. * Fix reload/restart action of init script (LP: #1187469).	Vincent Bernat	1.4.24-1	10 years ago
15	[ Apollon Oikonomopoulos ] [ Apollon Oikonomopoulos ] * New upstream version (Closes: #643650, #678953) + This fixes CVE-2012-2942 (Closes: #674447) + This fixes CVE-2013-1912 (Closes: #704611) * Ship vim addon as vim-haproxy (Closes: #702893) * Check for the configuration file after sourcing /etc/default/haproxy (Closes: #641762) * Use /dev/log for logging by default (Closes: #649085) [ Vincent Bernat ] * debian/control: + add Vcs-* fields + switch maintenance to Debian HAProxy team. (Closes: #706890) + drop dependency to quilt: 3.0 (quilt) format is in use. * debian/rules: + don't explicitly call dh_installchangelog. + use dh_installdirs to install directories. + use dh_install to install error and configuration files. + switch to `linux2628` Makefile target for Linux. * debian/postrm: + remove haproxy user and group on purge. * Ship a more minimal haproxy.cfg file: no `listen` blocks but `global` and `defaults` block with appropriate configuration to use chroot and logging in the expected way. [ Prach Pongpanich ] * debian/copyright: + add missing copyright holders + update years of copyright * debian/rules: + build with -Wl,--as-needed to get rid of unnecessary depends * Remove useless files in debian/haproxy.{docs,examples} * Update debian/watch file, thanks to Bart Martens	Vincent Bernat	1.4.23-1	10 years ago
14	New upstream release with critical bug fix (Closes: #631351) New upstream release with critical bug fix (Closes: #631351)	Christo Buschek	1.4.15-1	12 years ago
13	* New maintainer upload (Closes: #615246) * New maintainer upload (Closes: #615246) * New upstream release * Standards-version goes 3.9.1 (no change) * Added patch bashism (Closes: #581109) * Added a README.source file.	Christo Buschek	1.4.13-1	13 years ago
12	New upstream release. New upstream release.	Arnaud Cornet	1.4.8-1	13 years ago
11	* New upstream release * New upstream release * Add splice and tproxy support * Add regparm optimization on i386 * Switch to dpkg-source 3.0 (quilt) format	Arnaud Cornet	1.4.4-1	14 years ago

Older »