|
1 | 1 | ChangeLog : |
2 | 2 | =========== |
3 | 3 |
|
| 4 | +2025/09/05 : 3.3-dev8 |
| 5 | + - BUG/MEDIUM: mux-h2: fix crash on idle-ping due to unwanted ABORT_NOW |
| 6 | + - BUG/MINOR: quic-be: missing Initial packet number space discarding |
| 7 | + - BUG/MEDIUM: quic-be: crash after backend CID allocation failures |
| 8 | + - BUG/MEDIUM: ssl: apply ssl-f-use on every "ssl" bind |
| 9 | + - BUG/MAJOR: stream: Remove READ/WRITE events on channels after analysers eval |
| 10 | + - MINOR: dns: dns_connect_nameserver: fix fd leak at error path |
| 11 | + - BUG/MEDIUM: quic: reset padding when building GSO datagrams |
| 12 | + - BUG/MINOR: quic: do not emit probe data if CONNECTION_CLOSE requested |
| 13 | + - BUG/MAJOR: quic: fix INITIAL padding with probing packet only |
| 14 | + - BUG/MINOR: quic: don't coalesce probing and ACK packet of same type |
| 15 | + - MINOR: quic: centralize padding for HP sampling on packet building |
| 16 | + - MINOR: http_ana: fix typo in http_res_get_intercept_rule |
| 17 | + - BUG/MEDIUM: http_ana: handle yield for "stats http-request" evaluation |
| 18 | + - MINOR: applet: Rely on applet flag to detect the new api |
| 19 | + - MINOR: applet: Add function to test applet flags from the appctx |
| 20 | + - MINOR: applet: Add a flag to know an applet is using HTX buffers |
| 21 | + - MINOR: applet: Make some applet functions HTX aware |
| 22 | + - MEDIUM: applet: Set .rcv_buf and .snd_buf functions on default ones if not set |
| 23 | + - BUG/MEDIUM: mux-spop: Reject connection attempts from a non-spop frontend |
| 24 | + - REGTESTS: jwt: create dynamically "cert.ecdsa.pem" |
| 25 | + - BUG/MEDIUM: spoe: Improve error detection in SPOE applet on client abort |
| 26 | + - MINOR: haproxy: abort config parsing on fatal errors for post parsing hooks |
| 27 | + - MEDIUM: server: split srv_init() in srv_preinit() + srv_postinit() |
| 28 | + - MINOR: proxy: handle shared listener counters preparation from proxy_postcheck() |
| 29 | + - DOC: configuration: reword 'generate-certificates' |
| 30 | + - BUG/MEDIUM: quic-be: avoid crashes when releasing Initial pktns |
| 31 | + - BUG/MINOR: quic: reorder fragmented RX CRYPTO frames by their offsets |
| 32 | + - MINOR: ssl: diagnostic warning when both 'default-crt' and 'strict-sni' are used |
| 33 | + - MEDIUM: ssl: convert diag to warning for strict-sni + default-crt |
| 34 | + - DOC: configuration: clarify 'default-crt' and implicit default certificates |
| 35 | + - MINOR: quic: remove ->offset qf_crypto struct field |
| 36 | + - BUG/MINOR: mux-quic: trace with non initialized qcc |
| 37 | + - BUG/MINOR: acl: set arg_list->kw to aclkw->kw string literal if aclkw is found |
| 38 | + - BUG/MEDIUM: mworker: fix startup and reload on macOS |
| 39 | + - BUG/MINOR: connection: rearrange union list members |
| 40 | + - BUG/MINOR: connection: remove extra session_unown_conn() on reverse |
| 41 | + - MINOR: cli: display failure reason on wait command |
| 42 | + - BUG/MINOR: server: decrement session idle_conns on del server |
| 43 | + - BUG/MINOR: mux-quic: do not access conn after idle list insert |
| 44 | + - MINOR: session: document explicitely that session_add_conn() is safe |
| 45 | + - MINOR: session: uninline functions related to BE conns management |
| 46 | + - MINOR: session: refactor alloc/lookup of sess_conns elements |
| 47 | + - MEDIUM: session: protect sess conns list by idle_conns_lock |
| 48 | + - MINOR: server: shard by thread sess_conns member |
| 49 | + - MEDIUM: server: close new idle conns if server in maintenance |
| 50 | + - MEDIUM: session: close new idle conns if server in maintenance |
| 51 | + - MINOR: server: cleanup idle conns for server in maint already stopped |
| 52 | + - MINOR: muxes: enforce thread-safety for private idle conns |
| 53 | + - MEDIUM: conn/muxes/ssl: reinsert BE priv conn into sess on IO completion |
| 54 | + - MEDIUM: conn/muxes/ssl: remove BE priv idle conn from sess on IO |
| 55 | + - MEDIUM: mux-quic: enforce thread-safety of backend idle conns |
| 56 | + - MAJOR: server: implement purging of private idle connections |
| 57 | + - MEDIUM: session: account on server idle conns attached to session |
| 58 | + - MAJOR: server: do not remove idle conns in del server |
| 59 | + - BUILD: mworker: fix ignoring return value of ‘read’ |
| 60 | + - DOC: unreliable sockpair@ on macOS |
| 61 | + - MINOR: muxes: adjust takeover with buf_wait interaction |
| 62 | + - OPTIM: backend: set release on takeover for strict maxconn |
| 63 | + - DOC: configuration: confuse "strict-mode" with "zero-warning" |
| 64 | + - MINOR: doc: add missing statistics column |
| 65 | + - MINOR: doc: add missing statistics column |
| 66 | + - MINOR: stats: display new curr_sess_idle_conns server counter |
| 67 | + - MINOR: proxy: extend "show servers conn" output |
| 68 | + - MEDIUM: proxy: Reject some header names for 'http-send-name-header' directive |
| 69 | + - BUG/BUILD: stats: fix build due to missing stat enum definition |
| 70 | + - DOC: proxy-protocol: Make example for PP2_SUBTYPE_SSL_SIG_ALG accurate |
| 71 | + - CLEANUP: quic: remove a useless CRYPTO frame variable assignment |
| 72 | + - BUG/MEDIUM: quic: CRYPTO frame freeing without eb_delete() |
| 73 | + - BUG/MAJOR: mux-quic: fix crash on reload during emission |
| 74 | + - MINOR: conn/muxes/ssl: add ASSUME_NONNULL() prior to _srv_add_idle |
| 75 | + - REG-TESTS: map_redirect: Don't use hdr_dom in ACLs with "-m end" matching method |
| 76 | + - MINOR: acl: Only allow one '-m' matching method |
| 77 | + - MINOR: acl; Warn when matching method based on a suffix is overwritten |
| 78 | + - BUG/MEDIUM: server: Duplicate healthcheck's alpn inherited from default server |
| 79 | + - BUG/MINOR: server: Duplicate healthcheck's sni inherited from default server |
| 80 | + - BUG/MINOR: acl: Properly detect overwritten matching method |
| 81 | + - BUG/MINOR: halog: Add OOM checks for calloc() in filter_count_srv_status() and filter_count_url() |
| 82 | + - BUG/MINOR: log: Add OOM checks for calloc() and malloc() in logformat parser and dup_logger() |
| 83 | + - BUG/MINOR: acl: Add OOM check for calloc() in smp_fetch_acl_parse() |
| 84 | + - BUG/MINOR: cfgparse: Add OOM check for calloc() in cfg_parse_listen() |
| 85 | + - BUG/MINOR: compression: Add OOM check for calloc() in parse_compression_options() |
| 86 | + - BUG/MINOR: tools: Add OOM check for malloc() in indent_msg() |
| 87 | + - BUG/MINOR: quic: ignore AGAIN ncbuf err when parsing CRYPTO frames |
| 88 | + - MINOR: quic/flags: complete missing flags |
| 89 | + - BUG/MINOR: quic: fix room check if padding requested |
| 90 | + - BUG/MINOR: quic: fix padding issue on INITIAL retransmit |
| 91 | + - BUG/MINOR: quic: pad Initial pkt with CONNECTION_CLOSE on client |
| 92 | + - MEDIUM: quic: strengthen BUG_ON() for unpad Initial packet on client |
| 93 | + - DOC: configuration: rework the jwt_verify keyword documentation |
| 94 | + - BUG/MINOR: haproxy: be sure not to quit too early on soft stop |
| 95 | + - BUILD: acl: silence a possible null deref warning in parse_acl_expr() |
| 96 | + - MINOR: quic: Add more information about RX packets |
| 97 | + - CI: fix syntax of Quic Interop pipelines |
| 98 | + - MEDIUM: cfgparse: warn when using user/group when built statically |
| 99 | + - BUG/MEDIUM: stick-tables: don't leave the expire loop with elements deleted |
| 100 | + - BUG/MINOR: stick-tables: never leave used entries without expiration |
| 101 | + - BUG/MEDIUM: peers: don't fail twice to grab the update lock |
| 102 | + - MINOR: stick-tables: limit the number of visited nodes during expiration |
| 103 | + - OPTIM: stick-tables: exit expiry faster when the update lock is held |
| 104 | + - MINOR: counters: retrieve detailed errmsg upon failure with counters_{fe,be}_shared_prepare() |
| 105 | + - MINOR: stats-file: introduce shm-stats-file directive |
| 106 | + - MEDIUM: stats-file: processes share the same clock source from shm-stats-file |
| 107 | + - MINOR: stats-file: add process slot management for shm stats file |
| 108 | + - MEDIUM: stats-file/counters: store and preload stats counters as shm file objects |
| 109 | + - DOC: config: document "shm-stats-file" directive |
| 110 | + - OPTIM: stats-file: don't unnecessarily die hard on shm_stats_file_reuse_object() |
| 111 | + - MINOR: compiler: add ALWAYS_PAD() macro |
| 112 | + - BUILD: stats-file: fix aligment issues |
| 113 | + - MINOR: stats-file: reserve some bytes in exported structs |
| 114 | + - MEDIUM: stats-file: add some BUG_ON() guards to ensure exported structs are not changed by accident |
| 115 | + - BUG/MINOR: check: ensure check-reuse is compatible with SSL |
| 116 | + - BUG/MINOR: check: fix dst address when reusing a connection |
| 117 | + - REGTESTS: explicitly use "balance roundrobin" where RR is needed |
| 118 | + - MAJOR: backend: switch the default balancing algo to "random" |
| 119 | + - BUG/MEDIUM: conn: fix UAF on connection after reversal on edge |
| 120 | + - BUG/MINOR: connection: streamline conn detach from lists |
| 121 | + - BUG/MEDIUM: quic-be: too early SSL_SESSION initialization |
| 122 | + - BUG/MINOR: log: fix potential memory leak upon error in add_to_logformat_list() |
| 123 | + - MEDIUM: init: always warn when running as root without being asked to |
| 124 | + - MINOR: sample: Add base2 converter |
| 125 | + - MINOR: version: add -vq, -vqb, and -vqs flags for concise version output |
| 126 | + - BUILD: trace: silence a bogus build warning at -Og |
| 127 | + - MINOR: trace: accept trace spec right after "-dt" on the command line |
| 128 | + - BUILD: makefile: bump the default minimum linux version to 4.17 |
| 129 | + |
4 | 130 | 2025/08/20 : 3.3-dev7 |
5 | 131 | - MINOR: quic: duplicate GSO unsupp status from listener to conn |
6 | 132 | - MINOR: quic: define QUIC_FL_CONN_IS_BACK flag |
|
0 commit comments