lp:ubuntu/vivid-proposed/haproxy

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

28. By Vincent Bernat on 2015-01-04

* New upstream stable release including the following fixes:
    - BUG/MAJOR: stream-int: properly check the memory allocation return
    - BUG/MEDIUM: sample: fix random number upper-bound
    - BUG/MEDIUM: patterns: previous fix was incomplete
    - BUG/MEDIUM: payload: ensure that a request channel is available
    - BUG/MEDIUM: tcp-check: don't rely on random memory contents
    - BUG/MEDIUM: tcp-checks: disable quick-ack unless next rule is an expect
    - BUG/MEDIUM: config: do not propagate processes between stopped
                  processes
    - BUG/MEDIUM: memory: fix freeing logic in pool_gc2()
    - BUG/MEDIUM: compression: correctly report zlib_mem
* Upload to experimental.

27. By Vincent Bernat on 2014-12-07

* Cherry-pick the following patches from 1.5.9 release:
    - 8a0b93bde77e BUG/MAJOR: sessions: unlink session from list on out
                              of memory
    - bae03eaad40a BUG/MEDIUM: pattern: don't load more than once a pattern
                               list.
    - 93637b6e8503 BUG/MEDIUM: connection: sanitize PPv2 header length before
                               parsing address information
    - 8ba50128832b BUG/MAJOR: frontend: initialize capture pointers earlier
    - 1f96a87c4e14 BUG/MEDIUM: checks: fix conflicts between agent checks and
                               ssl healthchecks
    - 9bcc01ae2598 BUG/MEDIUM: ssl: force a full GC in case of memory shortage
    - 909514970089 BUG/MEDIUM: ssl: fix bad ssl context init can cause
                               segfault in case of OOM.
* Cherry-pick the following patches from future 1.5.10 release:
    - 1e89acb6be9b BUG/MEDIUM: payload: ensure that a request channel is
                               available
    - bad3c6f1b6d7 BUG/MEDIUM: patterns: previous fix was incomplete

26. By Vincent Bernat on 2014-10-31

* New upstream stable release including the following fixes:

   + BUG/MAJOR: buffer: check the space left is enough or not when input
                data in a buffer is wrapped
   + BUG/MINOR: ssl: correctly initialize ssl ctx for invalid certificates
   + BUG/MEDIUM: tcp: don't use SO_ORIGINAL_DST on non-AF_INET sockets
   + BUG/MEDIUM: regex: fix pcre_study error handling
   + BUG/MEDIUM: tcp: fix outgoing polling based on proxy protocol
   + BUG/MINOR: log: fix request flags when keep-alive is enabled
   + BUG/MAJOR: cli: explicitly call cli_release_handler() upon error
   + BUG/MEDIUM: http: don't dump debug headers on MSG_ERROR
* Also includes the following new features:
   + MINOR: ssl: add statement to force some ssl options in global.
   + MINOR: ssl: add fetchs 'ssl_c_der' and 'ssl_f_der' to return DER
            formatted certs
* Disable SSLv3 in the default configuration file.

25. By Vincent Bernat on 2014-10-20

* New upstream stable release including the following fixes:
  + BUG/MEDIUM: systemd: set KillMode to 'mixed'
  + MINOR: systemd: Check configuration before start
  + BUG/MEDIUM: config: avoid skipping disabled proxies
  + BUG/MINOR: config: do not accept more track-sc than configured
  + BUG/MEDIUM: backend: fix URI hash when a query string is present
* Drop systemd patches:
  + haproxy.service-also-check-on-start.patch
  + haproxy.service-set-killmode-to-mixed.patch
* Refresh other patches.

24. By Apollon Oikonomopoulos <email address hidden> on 2014-10-08

[ Vincent Bernat ]
* initscript: use start-stop-daemon to reliably terminate all haproxy
  processes. Also treat stopping a non-running haproxy as success.
  (Closes: #762608, LP: #1038139)

[ Apollon Oikonomopoulos ]
* New upstream stable release including the following fixes:
  + DOC: Address issue where documentation is excluded due to a gitignore
    rule.
  + MEDIUM: Improve signal handling in systemd wrapper.
  + BUG/MINOR: config: don't propagate process binding for dynamic
    use_backend
  + MINOR: Also accept SIGHUP/SIGTERM in systemd-wrapper
  + DOC: clearly state that the "show sess" output format is not fixed
  + MINOR: stats: fix minor typo fix in stats_dump_errors_to_buffer()
  + DOC: indicate in the doc that track-sc* can wait if data are missing
  + MEDIUM: http: enable header manipulation for 101 responses
  + BUG/MEDIUM: config: propagate frontend to backend process binding again.
  + MEDIUM: config: properly propagate process binding between proxies
  + MEDIUM: config: make the frontends automatically bind to the listeners'
    processes
  + MEDIUM: config: compute the exact bind-process before listener's
    maxaccept
  + MEDIUM: config: only warn if stats are attached to multi-process bind
    directives
  + MEDIUM: config: report it when tcp-request rules are misplaced
  + MINOR: config: detect the case where a tcp-request content rule has no
    inspect-delay
  + MEDIUM: systemd-wrapper: support multiple executable versions and names
  + BUG/MEDIUM: remove debugging code from systemd-wrapper
  + BUG/MEDIUM: http: adjust close mode when switching to backend
  + BUG/MINOR: config: don't propagate process binding on fatal errors.
  + BUG/MEDIUM: check: rule-less tcp-check must detect connect failures
  + BUG/MINOR: tcp-check: report the correct failed step in the status
  + DOC: indicate that weight zero is reported as DRAIN
* Add a new patch (haproxy.service-set-killmode-to-mixed.patch) to fix the
  systemctl stop action conflicting with the systemd wrapper now catching
  SIGTERM.
* Bump standards to 3.9.6; no changes needed.
* haproxy-doc: link to tracker.debian.org instead of packages.qa.debian.org.
* d/copyright: move debian/dconv/* paragraph after debian/*, so that it
  actually matches the files it is supposed to.

23. By Vincent Bernat on 2014-09-02

* New upstream version.
  + Fix a critical bug that, under certain unlikely conditions, allows a
    client to crash haproxy.
* Prefix rsyslog configuration file to ensure to log only to
  /var/log/haproxy. Thanks to Paul Bourke for the patch.

22. By Apollon Oikonomopoulos <email address hidden> on 2014-07-25

* New upstream stable release, fixing the following issues:
  + Memory corruption when building a proxy protocol v2 header
  + Memory leak in SSL DHE key exchange

21. By Apollon Oikonomopoulos <email address hidden> on 2014-07-14

* New upstream stable release. Important fixes:
  + A few sample fetch functions when combined in certain ways would return
    malformed results, possibly crashing the HAProxy process.
  + Hash-based load balancing and http-send-name-header would fail for
    requests which contain a body which starts to be forwarded before the
    data is used.

20. By Apollon Oikonomopoulos <email address hidden> on 2014-06-24

* New upstream stable release:
  + Fix a file descriptor leak for clients that disappear before connecting.
  + Do not staple expired OCSP responses.

19. By Apollon Oikonomopoulos <email address hidden> on 2014-06-20

* New upstream stable series. Notable changes since the 1.4 series:
  + Native SSL support on both sides with SNI/NPN/ALPN and OCSP stapling.
  + IPv6 and UNIX sockets are supported everywhere
  + End-to-end HTTP keep-alive for better support of NTLM and improved
    efficiency in static farms
  + HTTP/1.1 response compression (deflate, gzip) to save bandwidth
  + PROXY protocol versions 1 and 2 on both sides
  + Data sampling on everything in request or response, including payload
  + ACLs can use any matching method with any input sample
  + Maps and dynamic ACLs updatable from the CLI
  + Stick-tables support counters to track activity on any input sample
  + Custom format for logs, unique-id, header rewriting, and redirects
  + Improved health checks (SSL, scripted TCP, check agent, ...)
  + Much more scalable configuration supports hundreds of thousands of
    backends and certificates without sweating

* Upload to unstable, merge all 1.5 work from experimental. Most important
  packaging changes since 1.4.25-1 include:
  + systemd support.
  + A more sane default config file.
  + Zero-downtime upgrades between 1.5 releases by gracefully reloading
    HAProxy during upgrades.
  + HTML documentation shipped in the haproxy-doc package.
  + kqueue support for kfreebsd.

* Packaging changes since 1.5~dev26-2:
  + Drop patches merged upstream:
    o Fix-reference-location-in-manpage.patch
    o 0001-BUILD-stats-workaround-stupid-and-bogus-Werror-forma.patch
  + d/watch: look for stable 1.5 releases
  + systemd: respect CONFIG and EXTRAOPTS when specified in
    /etc/default/haproxy.
  + initscript: test the configuration before start or reload.
  + initscript: remove the ENABLED flag and logic.