| Summary: | Haproxy subversion update | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | Raphael Gertz <mageia> |
| Component: | RPM Packages | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | |
| Severity: | normal | ||
| Priority: | Normal | CC: | andrewsfarm, mageia, mageia, sysadmin-bugs |
| Version: | 9 | Keywords: | advisory, validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | MGA9-64-OK | ||
| Source RPM: | haproxy-2.8.3-9.mga9.src.rpm | CVE: | |
| Status comment: | will be fixed upstream in 2.8.4 | ||
|
Description
Raphael Gertz
2023-11-25 16:09:34 CET
Haproxy has fixed issues in last upstream version 2.8.4 of branch 2.8.
Impacted mga9 & cauldron.
Suggested advisory:
========================
type: bugfix
subject: Updated haproxy package fixes some bugs
src:
9:
core:
- haproxy-2.8.4-1.mga9
description: |
Haproxy has a major, few medium and few minor bugs fixed in last upstream
version 2.8.4 of branch 2.8
Add a 4096 bytes buffer on stdout to improve access log performances.
Fixed major bug list:
- mux-h2: Report a protocol error for any DATA frame before headers
Fixed medium bug list:
- hlua: streams don't support mixing lua-load with lua-load-per-thread
- Revert quic: missing check of dcid for init pkt including a token"
- hlua: don't pass stale nargs argument to lua_resume()
- mux-fcgi: Don't swap trash and dbuf when handling STDERR records
- master/cli: Pin the master CLI on the first thread of the group 1
- server/cli: don't delete a dynamic server that has streams
- actions: always apply a longest match on prefix lookup
- quic_conn: let the scheduler kill the task when needed
- http-ana: Try to handle response before handling server abort
- hlua: Initialize appctx used by a lua socket on connect only
- h1: Ignore C-L value in the H1 parser if T-E is also set
- stconn: Fix comparison sign in sc_need_room()
- mux-quic: fix RESET_STREAM on send-only stream
- quic-conn: free unsent frames on retransmit to prevent crash
- mux-h2: Don't report an error on shutr if a shutw is pending
- peers: Be sure to always refresh recconnect timer in sync task
- peers: Fix synchro for huge number of tables
- server: "proto" not working for dynamic servers
- quic: count quic_conn instance for maxconn
- quic: count quic_conn for global sslconns
- ssl: segfault when cipher is NULL
- pattern: don't trim pools under lock in pat_ref_purge_range()
- stconn: Don't report rcv/snd expiration date if SC cannot epxire
- Don't apply a max value on room_needed in sc_need_room()
- quic: fix actconn on quic_conn alloc failure
- quic: fix sslconns on quic_conn alloc failure
- freq-ctr: Don't report overshoot for long inactivity period
- pool: fix releasable pool calculation when overloaded
- quic: Avoid trying to send ACK frames from an empty ack ranges tree
- quic: Possible crashes when sending too short Initial packets
- quic: Avoid some crashes upon TX packet allocation failures
- stconn: Don't update stream expiration date if already expired
- applet: Remove appctx from buffer wait list on release
- connection: report connection errors even when no mux is installed
- mux-h1: Handle MUX_SUBS_RECV flag in h1_ctl() and susbscribe for reads
- stream: Properly handle abortonclose when set on backend only
- stconn: Report a send activity everytime data were sent
- applet: Report a send activity everytime data were sent
- mworker: set the master variable earlier
- stream: Don't call mux .ctl() callback if not implemented
- stconn: Update fsb date on partial sends
references:
- https://bugs.mageia.org/show_bug.cgi?id=32570
- https://www.haproxy.org/download/2.8/src/CHANGELOGKeywords:
(none) =>
advisory $ systemctl status haproxy.service
● haproxy.service - HAproxy Loadbalancer
Loaded: loaded (/usr/lib/systemd/system/haproxy.service; enabled; preset: disabled)
Active: active (running) since Sat 2023-11-25 XX:XX:XX CET; Xmin ago
Main PID: XXXXXX (haproxy)
Status: "Ready."
Tasks: 9 (limit: 65000)
Memory: 23.1M
CPU: Xmin Xs
CGroup: /system.slice/haproxy.service
├─XXXXXX /usr/sbin/haproxy -f /etc/haproxy/haproxy.conf -Ws
└─XXXXXX /usr/sbin/haproxy -f /etc/haproxy/haproxy.conf -Ws
$ curl -I http://127.0.0.1:8000
HTTP/1.1 302 Found
content-length: 0
location: https://127.0.0.1:8000/
cache-control: no-cache
$ curl -I -k https://127.0.0.1:8000
HTTP/2 200
date: Sat, 25 Nov 2023 14:27:39 GMT
content-type: text/html; charset=UTF-8Status:
NEW =>
ASSIGNED Used http://madb.mageia.org/tools/listRpmsForQaBug/bugnum/32570/application/0 to get the list of rpms to test: haproxy-2.8.4-1.mga9.x86_64.rpm haproxy-noquic-2.8.4-1.mga9.x86_64.rpm haproxy-quic-2.8.4-1.mga9.x86_64.rpm haproxy-utils-2.8.4-1.mga9.x86_64.rpm Installed the current versions of all plus one dependency in a VirtualBox guest, then downloaded the test rpms with qarepo, and updated. There were no installation issues. Taking Comment 2 as a demonstration of functionality. Validating. CC:
(none) =>
andrewsfarm, sysadmin-bugs An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGAA-2023-0126.html Resolution:
(none) =>
FIXED |