Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package haproxy for openSUSE:Factory checked in at 2025-04-20 09:35:02 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/haproxy (Old) and /work/SRC/openSUSE:Factory/.haproxy.new.30101 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "haproxy" Sun Apr 20 09:35:02 2025 rev:157 rq:1270823 version:3.1.7+git0.c3f408945 Changes: -------- --- /work/SRC/openSUSE:Factory/haproxy/haproxy.changes 2025-03-21 20:23:53.502427885 +0100 +++ /work/SRC/openSUSE:Factory/.haproxy.new.30101/haproxy.changes 2025-04-20 19:56:02.231064579 +0200 @@ -1,0 +2,76 @@ +Fri Apr 18 12:38:48 UTC 2025 - Marcus Rueckert <mrueck...@suse.de> + +- Update to version 3.1.7+git0.c3f408945: + * [RELEASE] Released version 3.1.7 + * BUG/MINOR: rhttp: ensure GOAWAY can be emitted after reversal + * BUG/MINOR: rhttp: fix reconnect if timeout connect unset + * BUG/MINOR: mux-h2: prevent past scheduling with idle connections + * MINOR: compiler: rely on builtin detection for __builtin_unreachable() + * MINOR: debug: make ha_stuck_warning() print the whole message at once + * MINOR: debug: make ha_stuck_warning() only work for the current thread + * MEDIUM: wdt: always make the faulty thread report its own warnings + * MINOR: pass a valid buffer pointer to ha_thread_dump_one() + * MINOR: debug: remove unused case of thr!=tid in ha_thread_dump_one() + * MINOR: debug: always reset the dump pointer when done + * MINOR: tinfo: keep a copy of the pointer to the thread dump buffer + * MINOR: debug: protect ha_dump_backtrace() against risks of re-entrance + * MINOR: tools: protect dladdr() against reentrant calls from the debug handler + * MINOR: tools: also protect the library name resolution against concurrent accesses + * BUG/MINOR: debug: detect and prevent re-entrance in ha_thread_dump_fill() + * BUG/MINOR: wdt/debug: avoid signal re-entrance between debugger and watchdog + * BUG/MINOR debug: fix !USE_THREAD_DUMP in ha_thread_dump_fill() + * BUG/MINOR: threads: set threads_idle and threads_harmless even with no threads + * BUILD: makefile: enable backtrace by default on musl + * MINOR: compiler: add ASSUME_NONNULL() to tell the compiler a pointer is valid + * MINOR: compiler: also enable __builtin_assume() for ASSUME() + * MINOR: compiler: add a new "ASSUME" macro to help the compiler + * MINOR: compiler: add a __has_builtin() macro to detect features more easily + * BUG/MEDIUM: hlua: fix hlua_applet_{http,tcp}_fct() yield regression (lost data) + * BUG/MINOR: h3: reject request URI with invalid characters + * BUG/MINOR: h3: reject invalid :path in request + * BUG/MINOR: h3: filter upgrade connection header + * BUG/MEDIUM: h3: trim whitespaces in header value prior to QPACK encoding + * BUG/MEDIUM: h3: trim whitespaces when parsing headers value + * MINOR: debug: detect call instructions and show the branch target in backtraces + * MINOR: debug: in call traces, dump the 8 bytes before the return address, not after + * MINOR: tools: let dump_addr_and_bytes() support dumping before the offset + * BUILD: quic: fix overflow in global tune + * MINOR: quic: define quic_tune + * MINOR: quic: transform pacing settings into a global option + * MINOR: quic: allow BBR testing without pacing + * MINOR: quic: remove references to burst in quic-cc-algo parsing + * BUG/MEDIUM: http-ana: Report 502 from req analyzer only during rsp forwarding + * BUG/MINOR: http-ana: Properly detect client abort when forwarding the response + * DOC: config: add the missing "force-cfg-parser-pause" to the global kw index + * DOC: config: add the missing "profiling.memory" to the global kw index + * BUG/MINOR: debug: remove the trailing \n from BUG_ON() statements + * BUG/MINOR: hlua: fix invalid errmsg use in hlua_init() + * BUG/MINOR: backend: do not use the source port when hashing clientip + * BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refs + * BUG/MINOR: log: fix CBOR encoding with LOG_VARTEXT_START() + lf_encode_chunk() + * CLEANUP: log: adjust _lf_cbor_encode_byte() comment + * BUG/MINOR: hlua_fcn: fix potential UAF with Queue:pop_wait() + * MINOR: task: add thread safe notification_new and notification_wake variants + * TESTS: Fix build for filltab25.c + * BUG/MEDIUM: stream: Fix a possible freeze during a forced shut on a stream + * DOC: update INSTALL to reflect the minimum compiler version + * BUILD: quic_sock: address a strict-aliasing build warning with gcc 5 and 6 + * BUG/MEDIUM: backend: fix reuse with set-dst/set-dst-port + * BUG/MINOR: backend: do not overwrite srv dst address on reuse + * BUG/MINOR: rhttp: fix incorrect dst/dst_port values + * BUILD: compiler: undefine the CONCAT() macro if already defined + * DOC: config: fix two missing "content" in "tcp-request" examples + * BUG/MINOR: config: silence .notice/.warning/.alert in discovery mode + * BUG/MINOR: log: fix gcc warn about truncating NUL terminator while init char arrays + * BUG/MINOR: mux-quic: remove extra BUG_ON() in _qcc_send_stream() + * BUG/MEDIUM: mux-quic: fix crash on RS/SS emission if already close local + * BUG/MEDIUM: peers: prevent learning expiration too far in futur from unsync node + * BUG/MINOR: peers: fix expire learned from a peer not converted from ms to ticks + * MINOR: log: support "raw" logformat node typecast + +------------------------------------------------------------------- +Tue Mar 25 18:12:19 UTC 2025 - Georg Pfuetzenreuter <georg.pfuetzenreu...@suse.com> + +- Build with QUIC on Tumbleweed + +------------------------------------------------------------------- Old: ---- haproxy-3.1.6+git0.d929ca290.tar.gz New: ---- README.SUSE README.SUSE.PACKAGING haproxy-3.1.7+git0.c3f408945.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ haproxy.spec ++++++ --- /var/tmp/diff_new_pack.Z6mlwA/_old 2025-04-20 19:56:02.931093885 +0200 +++ /var/tmp/diff_new_pack.Z6mlwA/_new 2025-04-20 19:56:02.935094053 +0200 @@ -14,7 +14,19 @@ # Please submit bugfixes or comments via https://bugs.opensuse.org/ +# => notes regarding QUIC in README.SUSE.PACKAGING +%if 0%{?suse_version} > 1600 +%bcond_without quic +%else %bcond_with quic +%endif + +%if 0%{?suse_version} > 1500 +%bcond_with rc_symlink +%else +%bcond_without rc_symlink +%endif + %if 0%{?suse_version} >= 1230 %bcond_without tcp_fast_open %bcond_without network_namespace @@ -53,7 +65,7 @@ %endif Name: haproxy -Version: 3.1.6+git0.d929ca290 +Version: 3.1.7+git0.c3f408945 Release: 0 # # @@ -99,6 +111,8 @@ Source4: haproxy.cfg Source5: haproxy-user.conf Source6: haproxy-tmpfiles.conf +Source7: README.SUSE +Source8: README.SUSE.PACKAGING Patch1: haproxy-1.6.0_config_haproxy_user.patch Patch2: haproxy-1.6.0-makefile_lib.patch Patch3: haproxy-1.6.0-sec-options.patch @@ -135,6 +149,7 @@ %prep %autosetup -p1 +cp %{SOURCE7} . %build make %{?_smp_mflags} \ @@ -170,6 +185,7 @@ USE_PROMEX=1 \ %if %{with quic} USE_QUIC=1 \ + USE_QUIC_OPENSSL_COMPAT=1 \ %endif %if %{with opentracing} USE_OT=1 \ @@ -195,7 +211,9 @@ %if %{with systemd} install -D -m 0644 admin/systemd/%{pkg_name}.service %{buildroot}%{_unitdir}/%{pkg_name}.service +%if %{with rc_symlinks} ln -sf /sbin/service %{buildroot}%{_sbindir}/rc%{pkg_name} +%endif %if %{with sysusers} install -D -m 644 %{SOURCE5} %{buildroot}%{_sysusersdir}/haproxy-user.conf %endif @@ -270,7 +288,7 @@ %files %defattr(-,root,root,-) %license LICENSE -%doc CHANGELOG README.md +%doc README.SUSE CHANGELOG README.md %doc doc/* examples/ %doc admin/netsnmp-perl/ admin/selinux/ %dir %attr(-,root,haproxy) %{_sysconfdir}/%{pkg_name} @@ -289,7 +307,9 @@ %endif %{_sbindir}/haproxy %{_sbindir}/haproxy-halog +%if %{with rc_symlinks} %{_sbindir}/rchaproxy +%endif %dir %attr(-,root,haproxy) %{pkg_home} %{_mandir}/man1/%{pkg_name}.1.gz %dir %{_datadir}/vim ++++++ README.SUSE ++++++ Notes regarding QUIC (only available on Tumbleweed): We currently only build with OpenSSL, this requires setting "limited-quic" in the "global" configuration section (which comes with missing out on 0-RTT support). ++++++ README.SUSE.PACKAGING ++++++ Packaging notes regarding QUIC: We enable QUIC for Tumbleweed where OpenSSL 3.x is the default. OpenSSL is not the perfect fit, but it's better than nothing - the best recommendation by HAProxy currently seems to be AWS-LC, but we do not ship it. https://github.com/haproxy/wiki/wiki/SSL-Libraries-Support-Status#tldr Note to remove USE_QUIC_OPENSSL_COMPAT if switching to a different implementation in the future. ++++++ _service ++++++ --- /var/tmp/diff_new_pack.Z6mlwA/_old 2025-04-20 19:56:03.015097402 +0200 +++ /var/tmp/diff_new_pack.Z6mlwA/_new 2025-04-20 19:56:03.019097570 +0200 @@ -6,7 +6,7 @@ <param name="versionformat">@PARENT_TAG@+git@TAG_OFFSET@.%h</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="versionrewrite-replacement">\1</param> - <param name="revision">v3.1.6</param> + <param name="revision">v3.1.7</param> <param name="changesgenerate">enable</param> </service> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.Z6mlwA/_old 2025-04-20 19:56:03.039098407 +0200 +++ /var/tmp/diff_new_pack.Z6mlwA/_new 2025-04-20 19:56:03.043098574 +0200 @@ -1,7 +1,7 @@ <servicedata> <service name="tar_scm"> <param name="url">http://git.haproxy.org/git/haproxy-3.1.git/</param> - <param name="changesrevision">d929ca2906cee5e0d9cc79c6074eec0f04dfabf3</param> + <param name="changesrevision">c3f40894532072afb380f1779bce1ef85974df2f</param> </service> </servicedata> (No newline at EOF) ++++++ haproxy-3.1.6+git0.d929ca290.tar.gz -> haproxy-3.1.7+git0.c3f408945.tar.gz ++++++ ++++ 2440 lines of diff (skipped)