Advisories ยป MGAA-2023-0126

Updated haproxy package fixes some bugs

Publication date: 27 Nov 2023
Modification date: 27 Nov 2023
Type: bugfix
Affected Mageia releases : 9

Description

Haproxy has a major, few medium and few minor bugs fixed in last upstream
version 2.8.4 of branch 2.8

Add a 4096 bytes buffer on stdout to improve access log performances.

Fixed major bug list:
- mux-h2: Report a protocol error for any DATA frame before headers

Fixed medium bug list:
- hlua: streams don't support mixing lua-load with lua-load-per-thread
- Revert quic: missing check of dcid for init pkt including a token"
- hlua: don't pass stale nargs argument to lua_resume()
- mux-fcgi: Don't swap trash and dbuf when handling STDERR records
- master/cli: Pin the master CLI on the first thread of the group 1
- server/cli: don't delete a dynamic server that has streams
- actions: always apply a longest match on prefix lookup
- quic_conn: let the scheduler kill the task when needed
- http-ana: Try to handle response before handling server abort
- hlua: Initialize appctx used by a lua socket on connect only
- h1: Ignore C-L value in the H1 parser if T-E is also set
- stconn: Fix comparison sign in sc_need_room()
- mux-quic: fix RESET_STREAM on send-only stream
- quic-conn: free unsent frames on retransmit to prevent crash
- mux-h2: Don't report an error on shutr if a shutw is pending
- peers: Be sure to always refresh recconnect timer in sync task
- peers: Fix synchro for huge number of tables
- server: "proto" not working for dynamic servers
- quic: count quic_conn instance for maxconn
- quic: count quic_conn for global sslconns
- ssl: segfault when cipher is NULL
- pattern: don't trim pools under lock in pat_ref_purge_range()
- stconn: Don't report rcv/snd expiration date if SC cannot epxire
- Don't apply a max value on room_needed in sc_need_room()
- quic: fix actconn on quic_conn alloc failure
- quic: fix sslconns on quic_conn alloc failure
- freq-ctr: Don't report overshoot for long inactivity period
- pool: fix releasable pool calculation when overloaded
- quic: Avoid trying to send ACK frames from an empty ack ranges tree
- quic: Possible crashes when sending too short Initial packets
- quic: Avoid some crashes upon TX packet allocation failures
- stconn: Don't update stream expiration date if already expired
- applet: Remove appctx from buffer wait list on release
- connection: report connection errors even when no mux is installed
- mux-h1: Handle MUX_SUBS_RECV flag in h1_ctl() and susbscribe for reads
- stream: Properly handle abortonclose when set on backend only
- stconn: Report a send activity everytime data were sent
- applet: Report a send activity everytime data were sent
- mworker: set the master variable earlier
- stream: Don't call mux .ctl() callback if not implemented
- stconn: Update fsb date on partial sends

References

SRPMS

9/core