CVS commit: pkgsrc/net/haproxy

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Tue Sep 29 09:01:19 UTC 2026

Modified Files:
        pkgsrc/net/haproxy: Makefile distinfo

Log Message:
haproxy: updated to 3.4.6

3.4.6
- MINOR: log: pass the input end to the _lf_encode_bytes() byte encoders
- MINOR: log: add the +utf8 encoding option to let valid UTF-8 pass
- BUG/MAJOR: mux_quic: fix potential crash on RESET_STREAM receive
- BUG/MEDIUM: sink: reconnect attempt not working after session lasted more than ~25 days
- BUG/MEDIUM: server: skip log backend addr checks for internal proxies
- REGTESTS: log: check that a ring's internal server may target a UNIX socket

3.4.5
- BUG/MINOR: cache: Manage collisions on primary key
- BUG/MINOR: cache: Seed cache primary hash
- OPTIM: server: remember the lowest known unused server ID
- BUG/MEDIUM: mux-spop: Properly handle parsing of split HELLO/DISCONNECT frames
- BUG/MINOR: payload: fix the cipher_len bound check in smp_client_hello_parse()
- BUG/MINOR: payload: bound ClientHello extension lists by the extension length
- BUG/MEDIUM: quic: crash on key update phase change after a failed one
- BUG/MINOR: quic: late packets of the first key phase are dropped
- BUG/MEDIUM: filters: check the filter name before comparing it
- BUN/MINOR: hlua: reset hlua_body variable after per-thread files loading
- BUG/MINOR: resolvers: classify empty truncated responses
- CLEANUP: resolvers: stop clearing the DNS response buffer
- MINOR: quic: protect the ChaCha20 header protection context from being freed
- BUG/MINOR: qpack: encoder and decoder stream data is never consumed
- BUG/MINOR: qpack: accept a Required Insert Count which cannot be reached
- BUG/MINOR: quic: delete the wrong CIDs when post-handshake frames fail
- MINOR: ring: add "-s" flag to "show events" to sanitize the output
- REGTESTS: log: add a test for "show events -s"
- REGTESTS: log: check which log-format tags escape control characters
- DOC: config: mention that section 8.6 does not apply to the cbor encoding
- REGTESTS: log: check that the +cbor output passes the logged bytes through
- MEDIUM: mux-h1: Harden test for short data at end of stream
- BUG/MEDIUM: mux-h2: Make sure we remove H2_SF_NOTIFIED on subscribe
- BUG/MAJOR: h3: reject H3 truncated frames
- BUG/MINOR: quic: leak of the NEW_TOKEN frame on token generation failure
- DOC: config: clarify tune tune.bufsize doc regarding various limits
- BUG/MEDIUM: hlua: Never release a cosocket applet from the GC
- BUG/MINOR: mux-h1: Return an error on trailers if last chunk is unfinished
- BUG/MINOR: hlua: Always return nil if there is no data to dup for HTTP messages
- BUG/MEDIUM: htx: Don't reset flags when source must be preserved during transfer
- BUG/MINOR: stream/debug: harden the stream dump function regarding signals
- BUG/MINOR: h3: reject truncated frames with mandatory payload
- BUG/MEDIUM: h3: do not block FIN on empty DATA frame
- BUG/MINOR: h3: handle empty HEADERS frame as specified
- BUG/MINOR: h3: handle unknown frame type on request stream as specified
- BUG/MINOR: h3: only increment frame type counter on new header
- BUG/MEDIUM: http-ana: apply tunnel timeout with data filters
- BUG/MINOR: ssl: don't pass the address of a size_t as an int* to OpenSSL
- BUG/MEDIUM: map: do not overwrite the fetch context in pat_match_regm()
- REGTESTS: map: check map_regm inside an ACL over an iterating fetch
- BUG/MEDIUM: http_act: fix normalize-uri normalizer selection with a condition
- BUG/MEDIUM: cli: Don't parse next command if input buffer is empty
- BUG/MEDIUM: cli: Don't read a command or payload line into a full buffer
- BUG/MINOR: cli: Reject payload with no command
- BUG/MINOR: ssl: Fix leak of ca_list in cafile_entry
- BUG/MINOR: sample: reject a \0 byte in url_dec, json_query and jwt_*_query
- REGTESTS: http-rules: check "-m str" on a sample with an embedded \0
- DOC: configuration: clarify the validity ranges of sample types
- BUG/MEDIUM: ssl: don't set a 0 timeout on an expired TLS session
- BUG/MEDIUM: htx: Reserve a block descriptor for zero-sized blocks
- CLEANUP: stream: Remove an excess newline in the stream dump
- BUG/MEDIUM: tcp-rules: Don't restart tcp-request content evaluation on yield
- BUG/MINOR: proxy: pass PR_FL_DEF_EXPLICIT_MODE through cascaded defaults
- MAJOR: filters: Revert the filter-sequence directive
- OPTIM: tools: keep a cache of recent localtime() and gmtime()
- BUG/MEDIUM: task: Do not destroy a task that is not ours in task_destroy
- BUG/MEDIUM: http-client: Don't use the httpclient context if it was released
- MINOR: http-client: Add an option to not stop the reception of the response
- BUG/MEDIUM: ssl/ocsp: Set HTTPCLIENT_O_RES_ACCUM option on the http-client
- BUG/MEDIUM: acme: Set HTTPCLIENT_O_RES_ACCUM option on the http-client
- MINOR: http-client: Add a function to notify some data were consumed
- BUG/MEDIUM: http-client/cli: Notify the http-client when the response is consumed
- BUG/MEDIUM: htx: Fix the position returned by htx_defrag()
- BUG/MINOR: tools: Don't try to anonymize a NULL string
- BUG/MAJOR: htx: Check the header/trailer length limits when one is updated
- BUG/MINOR: hlua: release private Lua rule data on teardown
- BUG/MINOR: ssl: Fix possible null deref on the SSL context in ssl_sock_to_buf()
- BUG/MINOR: http-client: Convert server timeout ticks when setting it
- BUG/MINOR: mux-h2: Don't expect more HTX data on 1xx interim responses
- REG-TESTS: http-messaging: Add a script to test interim responses for H1/H2
- BUG/MEDIUM: log: reserve the trailing 0 in CBOR int and bool encoders
- BUG/MEDIUM: http-htx: don't build the new authority in a rotating trash chunk
- BUG/MEDIUM: http-act: ignore "capture len" rules evaluated from a backend
- BUG/MEDIUM: tcp-rules: ignore "capture len" rules evaluated from a backend
- BUG/MINOR: http-ana: count response body failures only once in http_fail_cnt
- BUG/MINOR: http-fetch: http_auth_bearer() must not match a missing header
- BUG/MINOR: http-fetch: fix the space check of http_auth_bearer(<hdr>)
- BUG/MINOR: mux-h1: only mark C-L and T-E as sent once the header is emitted
- BUG/MINOR: tcpcheck: refresh the start-line after updating the authority
- BUG/MINOR: http-ana: restore the transaction status after early hints
- BUG/MAJOR: mux_quic: fix leak on RESET_STREAM reception
- BUG/MEDIUM: mux_quic: activate timeout on FE init
- BUG/MEDIUM: log: encode the whole non-printable range in the +json output
- REGTESTS: log: check the escaping performed by the +json option
- BUG/MINOR: mux-h2: Reject trailers received on a tunneled stream


To generate a diff of this commit:
cvs rdiff -u -r1.166 -r1.167 pkgsrc/net/haproxy/Makefile
cvs rdiff -u -r1.154 -r1.155 pkgsrc/net/haproxy/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/haproxy/Makefile
diff -u pkgsrc/net/haproxy/Makefile:1.166 pkgsrc/net/haproxy/Makefile:1.167
--- pkgsrc/net/haproxy/Makefile:1.166   Tue Sep 29 06:07:01 2026
+++ pkgsrc/net/haproxy/Makefile Tue Sep 29 09:01:19 2026
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.166 2026/09/29 06:07:01 wiz Exp $
+# $NetBSD: Makefile,v 1.167 2026/09/29 09:01:19 adam Exp $
 
-DISTNAME=      haproxy-3.4.4
-PKGREVISION=   3
+DISTNAME=      haproxy-3.4.6
 CATEGORIES=    net www
 MASTER_SITES=  https://www.haproxy.org/download/${PKGVERSION_NOREV:R}/src/
 

Index: pkgsrc/net/haproxy/distinfo
diff -u pkgsrc/net/haproxy/distinfo:1.154 pkgsrc/net/haproxy/distinfo:1.155
--- pkgsrc/net/haproxy/distinfo:1.154   Wed Sep  2 05:37:22 2026
+++ pkgsrc/net/haproxy/distinfo Tue Sep 29 09:01:19 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.154 2026/09/02 05:37:22 adam Exp $
+$NetBSD: distinfo,v 1.155 2026/09/29 09:01:19 adam Exp $
 
-BLAKE2s (haproxy-3.4.4.tar.gz) = e649ead835614ee2df86a78d1c4d2e3f1ec52b3f4faa26ce2683434de13ec074
-SHA512 (haproxy-3.4.4.tar.gz) = 1134371d59dd0b494e8737801c545e5c9f14b2275ebea0750d001ee70991e33418c45c2eba43ea8aee39c3f534917bee826d11564e58919a0332beddd4666571
-Size (haproxy-3.4.4.tar.gz) = 5502948 bytes
+BLAKE2s (haproxy-3.4.6.tar.gz) = ac15cc313c05eee7fdc83c07d1f9ac7df8f8dbdedf84ce7dc9714145914fa700
+SHA512 (haproxy-3.4.6.tar.gz) = 04d20bca04dc6d5b18181c002997fc68e87dfdf2ff309753c7cf3383355ebcfce2d2b62a20f4d0e49bd75d25aa12da8d33f4b39a23b618199787cd1468fc0fe9
+Size (haproxy-3.4.6.tar.gz) = 5525386 bytes
 SHA1 (patch-include_haproxy_proxy-t.h) = 7aab2e32aacff45e7a2a0d6a48550b72d1fe7619
 SHA1 (patch-include_haproxy_queue-t.h) = a9f41857d66037b3f66f8d43090dab2d06c7bfb2
 SHA1 (patch-include_haproxy_queue.h) = eed5ea43212462134fb60b50c2a32e619e104d51