CVS commit: pkgsrc/net/haproxy

["Jonathan Perkin" <jperkin%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   jperkin
Date:           Wed Sep  8 09:56:33 UTC 2021

Modified Files:
        pkgsrc/net/haproxy: Makefile distinfo

Log Message:
haproxy: Update to 2.4.4.

The ChangeLog doesn't explicitly mention, but this fixes the CVE-2021-40346
vulnerability as described in:

  https://www.mail-archive.com/haproxy%formilux.org@localhost/msg41114.html

While here switch to inserting CFLAGS via CPU_CFLAGS, as that feels a little
more appropriate than DEBUG_CFLAGS after re-reading the Makefile.

2021/09/07 : 2.4.4
    - BUG/MEDIUM: h2: match absolute-path not path-absolute for :path
    - REGTESTS: http_upgrade: fix incorrect expectation on TCP->H1->H2
    - REGTESTS: abortonclose: after retries, 503 is expected, not close
    - MINOR: hlua: take the global Lua lock inside a global function
    - BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
    - BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
    - BUG/MINOR: base64: base64urldec() ignores padding in output size check
    - MINOR: compiler: implement an ONLY_ONCE() macro
    - BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
    - BUG/MINOR: time: fix idle time computation for long sleeps
    - MINOR: time: add report_idle() to report process-wide idle time
    - BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
    - BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
    - BUG/MINOR: tools: Fix loop condition in dump_text()
    - CLEANUP: Add missing include guard to signal.h
    - BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
    - DOC: configuration: remove wrong tcp-request examples in tcp-response
    - BUG/MINOR: config: reject configs using HTTP with bufsize >= 256 MB
    - CLEANUP: htx: remove comments about "must be < 256 MB"
    - BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
    - Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"


To generate a diff of this commit:
cvs rdiff -u -r1.84 -r1.85 pkgsrc/net/haproxy/Makefile
cvs rdiff -u -r1.74 -r1.75 pkgsrc/net/haproxy/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/haproxy/Makefile
diff -u pkgsrc/net/haproxy/Makefile:1.84 pkgsrc/net/haproxy/Makefile:1.85
--- pkgsrc/net/haproxy/Makefile:1.84    Tue Aug 31 09:17:46 2021
+++ pkgsrc/net/haproxy/Makefile Wed Sep  8 09:56:33 2021
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.84 2021/08/31 09:17:46 jperkin Exp $
+# $NetBSD: Makefile,v 1.85 2021/09/08 09:56:33 jperkin Exp $
 
-DISTNAME=      haproxy-2.4.3
-PKGREVISION=   1
+DISTNAME=      haproxy-2.4.4
 CATEGORIES=    net www
 MASTER_SITES=  https://www.haproxy.org/download/${PKGVERSION_NOREV:R}/src/
 
@@ -14,7 +13,7 @@ USE_LANGUAGES=                c
 USE_TOOLS+=            gmake
 BUILD_MAKE_FLAGS+=     ADDLIB=${COMPILER_RPATH_FLAG}${PREFIX}/lib
 BUILD_MAKE_FLAGS+=     CC=${CC:Q}
-BUILD_MAKE_FLAGS+=     DEBUG_CFLAGS=${CFLAGS:Q}
+BUILD_MAKE_FLAGS+=     CPU_CFLAGS=${CFLAGS:Q}
 BUILD_MAKE_FLAGS+=     LDFLAGS=${LDFLAGS:Q}
 BUILD_MAKE_FLAGS+=     TARGET=${TARGET}
 BUILD_MAKE_FLAGS+=     USE_REGPARM=1

Index: pkgsrc/net/haproxy/distinfo
diff -u pkgsrc/net/haproxy/distinfo:1.74 pkgsrc/net/haproxy/distinfo:1.75
--- pkgsrc/net/haproxy/distinfo:1.74    Fri Aug 20 05:42:53 2021
+++ pkgsrc/net/haproxy/distinfo Wed Sep  8 09:56:33 2021
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.74 2021/08/20 05:42:53 adam Exp $
+$NetBSD: distinfo,v 1.75 2021/09/08 09:56:33 jperkin Exp $
 
-SHA1 (haproxy-2.4.3.tar.gz) = af261bfea050ecf8b1bd3d43ae78ccfb945ef64d
-RMD160 (haproxy-2.4.3.tar.gz) = cdb35ee9794cf526f12675dc2fbac4a82c738613
-SHA512 (haproxy-2.4.3.tar.gz) = 4ee11b6fd4c76d6ec3060f26bda67a8916c4f52bf1a800b921e04d2cec78b47b8b1343081935bc211f1e081b92db88130ec365161460b35ab88aa982917f82ee
-Size (haproxy-2.4.3.tar.gz) = 3585501 bytes
+SHA1 (haproxy-2.4.4.tar.gz) = e3f444d184fb409332d1c04a70debd27b2dd4d4c
+RMD160 (haproxy-2.4.4.tar.gz) = c79e5c384bdf85bf4bab57d5e1e62b30ab3289cc
+SHA512 (haproxy-2.4.4.tar.gz) = a8987e8342fdbec7e48de09a4391a67e77e05493260e0e561e8c185b6457b8e1086cc45ce04ebf3365699c008dff81667490e2fe99c33c0ac3c7513df8ae025c
+Size (haproxy-2.4.4.tar.gz) = 3587306 bytes
 SHA1 (patch-Makefile) = fcb2de85189526ae42ccf0b789789ee9b834f375
 SHA1 (patch-src_cli.c) = 4bc5cf0116df121ac4c3c38b8f962c3a62d536e5
 SHA1 (patch-src_haproxy.c) = a466acb853b5018b70571d0a03b9d28ed9245d06