import haproxy-2.4.7-2.el9_0
This commit is contained in:
CentOS Sources
Stepan Oksanichenko
commit
3b83956724
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
@ -0,0 +1 @@
|
|||||||
|
SOURCES/haproxy-2.4.7.tar.gz
|
||||||
1
.haproxy.metadata
Normal file
1
.haproxy.metadata
Normal file
@ -0,0 +1 @@
|
|||||||
|
d3f3a4ff293cb2d9ec2085cac324698d260e2739 SOURCES/haproxy-2.4.7.tar.gz
|
||||||
45
SOURCES/bz1984786-fix-openssl-build.patch
Normal file
45
SOURCES/bz1984786-fix-openssl-build.patch
Normal file
@ -0,0 +1,45 @@
|
|||||||
|
From f22b032956bc492dcf47b2a909f91a6fb2c6e49b Mon Sep 17 00:00:00 2001
|
||||||
|
From: William Lallemand <wlallemand@haproxy.org>
|
||||||
|
Date: Wed, 2 Jun 2021 16:09:11 +0200
|
||||||
|
Subject: [PATCH] BUILD: fix compilation for OpenSSL-3.0.0-alpha17
|
||||||
|
|
||||||
|
Some changes in the OpenSSL syntax API broke this syntax:
|
||||||
|
#if SSL_OP_NO_TLSv1_3
|
||||||
|
|
||||||
|
OpenSSL made this change which broke our usage in commit f04bb0bce490de847ed0482b8ec9eabedd173852:
|
||||||
|
|
||||||
|
-# define SSL_OP_NO_TLSv1_3 (uint64_t)0x20000000
|
||||||
|
+#define SSL_OP_BIT(n) ((uint64_t)1 << (uint64_t)n)
|
||||||
|
+# define SSL_OP_NO_TLSv1_3 SSL_OP_BIT(29)
|
||||||
|
|
||||||
|
Which can't be evaluated by the preprocessor anymore.
|
||||||
|
This patch replace the test by an openssl version test.
|
||||||
|
|
||||||
|
This fix part of #1276 issue.
|
||||||
|
---
|
||||||
|
src/ssl_sock.c | 4 ++--
|
||||||
|
1 file changed, 2 insertions(+), 2 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/src/ssl_sock.c b/src/ssl_sock.c
|
||||||
|
index f596a831d..27a4c3531 100644
|
||||||
|
--- a/src/ssl_sock.c
|
||||||
|
+++ b/src/ssl_sock.c
|
||||||
|
@@ -2217,13 +2217,13 @@ static void ssl_set_TLSv12_func(SSL *ssl, set_context_func c) {
|
||||||
|
: SSL_set_min_proto_version(ssl, TLS1_2_VERSION);
|
||||||
|
}
|
||||||
|
static void ctx_set_TLSv13_func(SSL_CTX *ctx, set_context_func c) {
|
||||||
|
-#if SSL_OP_NO_TLSv1_3
|
||||||
|
+#if (HA_OPENSSL_VERSION_NUMBER >= 0x10101000L)
|
||||||
|
c == SET_MAX ? SSL_CTX_set_max_proto_version(ctx, TLS1_3_VERSION)
|
||||||
|
: SSL_CTX_set_min_proto_version(ctx, TLS1_3_VERSION);
|
||||||
|
#endif
|
||||||
|
}
|
||||||
|
static void ssl_set_TLSv13_func(SSL *ssl, set_context_func c) {
|
||||||
|
-#if SSL_OP_NO_TLSv1_3
|
||||||
|
+#if (HA_OPENSSL_VERSION_NUMBER >= 0x10101000L)
|
||||||
|
c == SET_MAX ? SSL_set_max_proto_version(ssl, TLS1_3_VERSION)
|
||||||
|
: SSL_set_min_proto_version(ssl, TLS1_3_VERSION);
|
||||||
|
#endif
|
||||||
|
--
|
||||||
|
2.31.1
|
||||||
|
|
||||||
48
SOURCES/bz2059438-fix-undound-loop-set-cookie2.patch
Normal file
48
SOURCES/bz2059438-fix-undound-loop-set-cookie2.patch
Normal file
@ -0,0 +1,48 @@
|
|||||||
|
From 0980912282f20a1db64d7ba0a9a825dfee3cb044 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Andrew McDermott <aim@frobware.com>
|
||||||
|
Date: Fri, 11 Feb 2022 18:26:49 +0000
|
||||||
|
Subject: [PATCH] BUG/MAJOR: http/htx: prevent unbounded loop in
|
||||||
|
http_manage_server_side_cookies
|
||||||
|
|
||||||
|
Ensure calls to http_find_header() terminate. If a "Set-Cookie2"
|
||||||
|
header is found then the while(1) loop in
|
||||||
|
http_manage_server_side_cookies() will never terminate, resulting in
|
||||||
|
the watchdog firing and the process terminating via SIGABRT.
|
||||||
|
|
||||||
|
The while(1) loop becomes unbounded because an unmatched call to
|
||||||
|
http_find_header("Set-Cookie") will leave ctx->blk=NULL. Subsequent
|
||||||
|
calls to check for "Set-Cookie2" will now enumerate from the beginning
|
||||||
|
of all the blocks and will once again match on subsequent
|
||||||
|
passes (assuming a match first time around), hence the loop becoming
|
||||||
|
unbounded.
|
||||||
|
|
||||||
|
This issue was introduced with HTX and this fix should be backported
|
||||||
|
to all versions supporting HTX.
|
||||||
|
|
||||||
|
Many thanks to Grant Spence (gspence@redhat.com) for working through
|
||||||
|
this issue with me.
|
||||||
|
|
||||||
|
(cherry picked from commit bfb15ab34ead85f64cd6da0e9fb418c9cd14cee8)
|
||||||
|
Signed-off-by: Willy Tarreau <w@1wt.eu>
|
||||||
|
(cherry picked from commit d8ce72f63e115fa0952e6a58e81c3d15dfc0a509)
|
||||||
|
Signed-off-by: Willy Tarreau <w@1wt.eu>
|
||||||
|
---
|
||||||
|
src/http_ana.c | 2 +-
|
||||||
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
||||||
|
|
||||||
|
diff --git a/src/http_ana.c b/src/http_ana.c
|
||||||
|
index 4c765cb39..0f40ab3ab 100644
|
||||||
|
--- a/src/http_ana.c
|
||||||
|
+++ b/src/http_ana.c
|
||||||
|
@@ -3433,7 +3433,7 @@ static void http_manage_server_side_cookies(struct stream *s, struct channel *re
|
||||||
|
while (1) {
|
||||||
|
int is_first = 1;
|
||||||
|
|
||||||
|
- if (!http_find_header(htx, ist("Set-Cookie"), &ctx, 1)) {
|
||||||
|
+ if (is_cookie2 || !http_find_header(htx, ist("Set-Cookie"), &ctx, 1)) {
|
||||||
|
if (!http_find_header(htx, ist("Set-Cookie2"), &ctx, 1))
|
||||||
|
break;
|
||||||
|
is_cookie2 = 1;
|
||||||
|
--
|
||||||
|
2.33.1
|
||||||
|
|
||||||
108
SOURCES/halog.1
Normal file
108
SOURCES/halog.1
Normal file
@ -0,0 +1,108 @@
|
|||||||
|
.TH HALOG "1" "July 2013" "halog" "User Commands"
|
||||||
|
.SH NAME
|
||||||
|
halog \- HAProxy log statistics reporter
|
||||||
|
.SH SYNOPSIS
|
||||||
|
.B halog
|
||||||
|
[\fI-h|--help\fR]
|
||||||
|
.br
|
||||||
|
.B halog
|
||||||
|
[\fIoptions\fR] <LOGFILE
|
||||||
|
.SH DESCRIPTION
|
||||||
|
.B halog
|
||||||
|
reads HAProxy log data from stdin and extracts and displays lines matching
|
||||||
|
user-specified criteria.
|
||||||
|
.SH OPTIONS
|
||||||
|
.SS Input filters \fR(several filters may be combined)
|
||||||
|
.TP
|
||||||
|
\fB\-H\fR
|
||||||
|
Only match lines containing HTTP logs (ignore TCP)
|
||||||
|
.TP
|
||||||
|
\fB\-E\fR
|
||||||
|
Only match lines without any error (no 5xx status)
|
||||||
|
.TP
|
||||||
|
\fB\-e\fR
|
||||||
|
Only match lines with errors (status 5xx or negative)
|
||||||
|
.TP
|
||||||
|
\fB\-rt\fR|\fB\-RT\fR <time>
|
||||||
|
Only match response times larger|smaller than <time>
|
||||||
|
.TP
|
||||||
|
\fB\-Q\fR|\fB\-QS\fR
|
||||||
|
Only match queued requests (any queue|server queue)
|
||||||
|
.TP
|
||||||
|
\fB\-tcn\fR|\fB\-TCN\fR <code>
|
||||||
|
Only match requests with/without termination code <code>
|
||||||
|
.TP
|
||||||
|
\fB\-hs\fR|\fB\-HS\fR <[min][:][max]>
|
||||||
|
Only match requests with HTTP status codes within/not within min..max. Any of
|
||||||
|
them may be omitted. Exact code is checked for if no ':' is specified.
|
||||||
|
.SS
|
||||||
|
Modifiers
|
||||||
|
.TP
|
||||||
|
\fB\-v\fR
|
||||||
|
Invert the input filtering condition
|
||||||
|
.TP
|
||||||
|
\fB\-q\fR
|
||||||
|
Don't report errors/warnings
|
||||||
|
.TP
|
||||||
|
\fB\-m\fR <lines>
|
||||||
|
Limit output to the first <lines> lines
|
||||||
|
.SS
|
||||||
|
Output filters \fR\- only one may be used at a time
|
||||||
|
.TP
|
||||||
|
\fB\-c\fR
|
||||||
|
Only report the number of lines that would have been printed
|
||||||
|
.TP
|
||||||
|
\fB\-pct\fR
|
||||||
|
Output connect and response times percentiles
|
||||||
|
.TP
|
||||||
|
\fB\-st\fR
|
||||||
|
Output number of requests per HTTP status code
|
||||||
|
.TP
|
||||||
|
\fB\-cc\fR
|
||||||
|
Output number of requests per cookie code (2 chars)
|
||||||
|
.TP
|
||||||
|
\fB\-tc\fR
|
||||||
|
Output number of requests per termination code (2 chars)
|
||||||
|
.TP
|
||||||
|
\fB\-srv\fR
|
||||||
|
Output statistics per server (time, requests, errors)
|
||||||
|
.TP
|
||||||
|
\fB\-u\fR*
|
||||||
|
Output statistics per URL (time, requests, errors)
|
||||||
|
.br
|
||||||
|
Additional characters indicate the output sorting key:
|
||||||
|
.RS
|
||||||
|
.TP
|
||||||
|
\fB\-u\fR
|
||||||
|
URL
|
||||||
|
.TP
|
||||||
|
\fB\-uc\fR
|
||||||
|
Request count
|
||||||
|
.TP
|
||||||
|
\fB\-ue\fR
|
||||||
|
Error count
|
||||||
|
.TP
|
||||||
|
\fB\-ua\fR
|
||||||
|
Average response time
|
||||||
|
.TP
|
||||||
|
\fB\-ut\fR
|
||||||
|
Average total time
|
||||||
|
.TP
|
||||||
|
\fB\-uao\fR, \fB\-uto\fR
|
||||||
|
Average times computed on valid ('OK') requests
|
||||||
|
.TP
|
||||||
|
\fB\-uba\fR
|
||||||
|
Average bytes returned
|
||||||
|
.TP
|
||||||
|
\fB\-ubt\fR
|
||||||
|
Total bytes returned
|
||||||
|
.RE
|
||||||
|
.SH "SEE ALSO"
|
||||||
|
.BR haproxy (1)
|
||||||
|
.SH AUTHOR
|
||||||
|
.PP
|
||||||
|
\fBhalog\fR was written by Willy Tarreau <w@1wt.eu> and is part of \fBhaproxy\fR(1).
|
||||||
|
.PP
|
||||||
|
This manual page was written by Apollon Oikonomopoulos <apoikos@gmail.com> for the Debian project (but may
|
||||||
|
be used by others).
|
||||||
|
|
||||||
90
SOURCES/haproxy.cfg
Normal file
90
SOURCES/haproxy.cfg
Normal file
@ -0,0 +1,90 @@
|
|||||||
|
#---------------------------------------------------------------------
|
||||||
|
# Example configuration for a possible web application. See the
|
||||||
|
# full configuration options online.
|
||||||
|
#
|
||||||
|
# https://www.haproxy.org/download/1.8/doc/configuration.txt
|
||||||
|
#
|
||||||
|
#---------------------------------------------------------------------
|
||||||
|
|
||||||
|
#---------------------------------------------------------------------
|
||||||
|
# Global settings
|
||||||
|
#---------------------------------------------------------------------
|
||||||
|
global
|
||||||
|
# to have these messages end up in /var/log/haproxy.log you will
|
||||||
|
# need to:
|
||||||
|
#
|
||||||
|
# 1) configure syslog to accept network log events. This is done
|
||||||
|
# by adding the '-r' option to the SYSLOGD_OPTIONS in
|
||||||
|
# /etc/sysconfig/syslog
|
||||||
|
#
|
||||||
|
# 2) configure local2 events to go to the /var/log/haproxy.log
|
||||||
|
# file. A line like the following can be added to
|
||||||
|
# /etc/sysconfig/syslog
|
||||||
|
#
|
||||||
|
# local2.* /var/log/haproxy.log
|
||||||
|
#
|
||||||
|
log 127.0.0.1 local2
|
||||||
|
|
||||||
|
chroot /var/lib/haproxy
|
||||||
|
pidfile /var/run/haproxy.pid
|
||||||
|
maxconn 4000
|
||||||
|
user haproxy
|
||||||
|
group haproxy
|
||||||
|
daemon
|
||||||
|
|
||||||
|
# turn on stats unix socket
|
||||||
|
stats socket /var/lib/haproxy/stats
|
||||||
|
|
||||||
|
# utilize system-wide crypto-policies
|
||||||
|
ssl-default-bind-ciphers PROFILE=SYSTEM
|
||||||
|
ssl-default-server-ciphers PROFILE=SYSTEM
|
||||||
|
|
||||||
|
#---------------------------------------------------------------------
|
||||||
|
# common defaults that all the 'listen' and 'backend' sections will
|
||||||
|
# use if not designated in their block
|
||||||
|
#---------------------------------------------------------------------
|
||||||
|
defaults
|
||||||
|
mode http
|
||||||
|
log global
|
||||||
|
option httplog
|
||||||
|
option dontlognull
|
||||||
|
option http-server-close
|
||||||
|
option forwardfor except 127.0.0.0/8
|
||||||
|
option redispatch
|
||||||
|
retries 3
|
||||||
|
timeout http-request 10s
|
||||||
|
timeout queue 1m
|
||||||
|
timeout connect 10s
|
||||||
|
timeout client 1m
|
||||||
|
timeout server 1m
|
||||||
|
timeout http-keep-alive 10s
|
||||||
|
timeout check 10s
|
||||||
|
maxconn 3000
|
||||||
|
|
||||||
|
#---------------------------------------------------------------------
|
||||||
|
# main frontend which proxys to the backends
|
||||||
|
#---------------------------------------------------------------------
|
||||||
|
frontend main
|
||||||
|
bind *:5000
|
||||||
|
acl url_static path_beg -i /static /images /javascript /stylesheets
|
||||||
|
acl url_static path_end -i .jpg .gif .png .css .js
|
||||||
|
|
||||||
|
use_backend static if url_static
|
||||||
|
default_backend app
|
||||||
|
|
||||||
|
#---------------------------------------------------------------------
|
||||||
|
# static backend for serving up images, stylesheets and such
|
||||||
|
#---------------------------------------------------------------------
|
||||||
|
backend static
|
||||||
|
balance roundrobin
|
||||||
|
server static 127.0.0.1:4331 check
|
||||||
|
|
||||||
|
#---------------------------------------------------------------------
|
||||||
|
# round robin balancing between the various backends
|
||||||
|
#---------------------------------------------------------------------
|
||||||
|
backend app
|
||||||
|
balance roundrobin
|
||||||
|
server app1 127.0.0.1:5001 check
|
||||||
|
server app2 127.0.0.1:5002 check
|
||||||
|
server app3 127.0.0.1:5003 check
|
||||||
|
server app4 127.0.0.1:5004 check
|
||||||
12
SOURCES/haproxy.logrotate
Normal file
12
SOURCES/haproxy.logrotate
Normal file
@ -0,0 +1,12 @@
|
|||||||
|
/var/log/haproxy.log {
|
||||||
|
daily
|
||||||
|
rotate 10
|
||||||
|
missingok
|
||||||
|
notifempty
|
||||||
|
compress
|
||||||
|
sharedscripts
|
||||||
|
postrotate
|
||||||
|
/bin/kill -HUP `cat /var/run/syslogd.pid 2> /dev/null` 2> /dev/null || true
|
||||||
|
/bin/kill -HUP `cat /var/run/rsyslogd.pid 2> /dev/null` 2> /dev/null || true
|
||||||
|
endscript
|
||||||
|
}
|
||||||
18
SOURCES/haproxy.service
Normal file
18
SOURCES/haproxy.service
Normal file
@ -0,0 +1,18 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=HAProxy Load Balancer
|
||||||
|
After=network-online.target
|
||||||
|
Wants=network-online.target
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
EnvironmentFile=-/etc/sysconfig/haproxy
|
||||||
|
Environment="CONFIG=/etc/haproxy/haproxy.cfg" "PIDFILE=/run/haproxy.pid"
|
||||||
|
ExecStartPre=/usr/sbin/haproxy -f $CONFIG -c -q $OPTIONS
|
||||||
|
ExecStart=/usr/sbin/haproxy -Ws -f $CONFIG -p $PIDFILE $OPTIONS
|
||||||
|
ExecReload=/usr/sbin/haproxy -f $CONFIG -c -q $OPTIONS
|
||||||
|
ExecReload=/bin/kill -USR2 $MAINPID
|
||||||
|
KillMode=mixed
|
||||||
|
SuccessExitStatus=143
|
||||||
|
Type=notify
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
4
SOURCES/haproxy.sysconfig
Normal file
4
SOURCES/haproxy.sysconfig
Normal file
@ -0,0 +1,4 @@
|
|||||||
|
# Add extra options to the haproxy daemon here. This can be useful for
|
||||||
|
# specifying multiple configuration files with multiple -f options.
|
||||||
|
# See haproxy(1) for a complete list of options.
|
||||||
|
OPTIONS=""
|
||||||
690
SPECS/haproxy.spec
Normal file
690
SPECS/haproxy.spec
Normal file
@ -0,0 +1,690 @@
|
|||||||
|
%define haproxy_user haproxy
|
||||||
|
%define haproxy_group %{haproxy_user}
|
||||||
|
%define haproxy_homedir %{_localstatedir}/lib/haproxy
|
||||||
|
%define haproxy_confdir %{_sysconfdir}/haproxy
|
||||||
|
%define haproxy_datadir %{_datadir}/haproxy
|
||||||
|
|
||||||
|
%global _hardened_build 1
|
||||||
|
|
||||||
|
Name: haproxy
|
||||||
|
Version: 2.4.7
|
||||||
|
Release: 2%{?dist}
|
||||||
|
Summary: HAProxy reverse proxy for high availability environments
|
||||||
|
|
||||||
|
License: GPLv2+
|
||||||
|
|
||||||
|
URL: http://www.haproxy.org/
|
||||||
|
Source0: %{url}/download/2.4/src/haproxy-%{version}.tar.gz
|
||||||
|
Source1: %{name}.service
|
||||||
|
Source2: %{name}.cfg
|
||||||
|
Source3: %{name}.logrotate
|
||||||
|
Source4: %{name}.sysconfig
|
||||||
|
Source5: halog.1
|
||||||
|
|
||||||
|
Patch0: bz1984786-fix-openssl-build.patch
|
||||||
|
Patch1: bz2059438-fix-undound-loop-set-cookie2.patch
|
||||||
|
|
||||||
|
BuildRequires: gcc
|
||||||
|
BuildRequires: lua-devel
|
||||||
|
BuildRequires: pcre2-devel
|
||||||
|
BuildRequires: openssl-devel
|
||||||
|
BuildRequires: systemd-devel
|
||||||
|
BuildRequires: systemd
|
||||||
|
BuildRequires: make
|
||||||
|
|
||||||
|
Requires(pre): shadow-utils
|
||||||
|
%{?systemd_requires}
|
||||||
|
|
||||||
|
%description
|
||||||
|
HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high
|
||||||
|
availability environments. Indeed, it can:
|
||||||
|
- route HTTP requests depending on statically assigned cookies
|
||||||
|
- spread load among several servers while assuring server persistence
|
||||||
|
through the use of HTTP cookies
|
||||||
|
- switch to backup servers in the event a main one fails
|
||||||
|
- accept connections to special ports dedicated to service monitoring
|
||||||
|
- stop accepting connections without breaking existing ones
|
||||||
|
- add, modify, and delete HTTP headers in both directions
|
||||||
|
- block requests matching particular patterns
|
||||||
|
- report detailed status to authenticated users from a URI
|
||||||
|
intercepted from the application
|
||||||
|
|
||||||
|
%prep
|
||||||
|
%setup -q
|
||||||
|
%patch0 -p1
|
||||||
|
%patch1 -p1
|
||||||
|
|
||||||
|
%build
|
||||||
|
regparm_opts=
|
||||||
|
%ifarch %ix86 x86_64
|
||||||
|
regparm_opts="USE_REGPARM=1"
|
||||||
|
%endif
|
||||||
|
|
||||||
|
%{__make} %{?_smp_mflags} CPU="generic" TARGET="linux-glibc" USE_OPENSSL=1 USE_PCRE2=1 USE_SLZ=1 USE_LUA=1 USE_CRYPT_H=1 USE_SYSTEMD=1 USE_LINUX_TPROXY=1 USE_GETADDRINFO=1 USE_PROMEX=1 ${regparm_opts} ADDINC="%{build_cflags}" ADDLIB="%{build_ldflags}"
|
||||||
|
|
||||||
|
%{__make} admin/halog/halog ADDINC="%{build_cflags}" ADDLIB="%{build_ldflags}"
|
||||||
|
|
||||||
|
pushd admin/iprange
|
||||||
|
%{__make} OPTIMIZE="%{build_cflags}" LDFLAGS="%{build_ldflags}"
|
||||||
|
popd
|
||||||
|
|
||||||
|
%install
|
||||||
|
%{__make} install-bin DESTDIR=%{buildroot} PREFIX=%{_prefix} TARGET="linux2628"
|
||||||
|
%{__make} install-man DESTDIR=%{buildroot} PREFIX=%{_prefix}
|
||||||
|
|
||||||
|
%{__install} -p -D -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/%{name}.service
|
||||||
|
%{__install} -p -D -m 0644 %{SOURCE2} %{buildroot}%{haproxy_confdir}/%{name}.cfg
|
||||||
|
%{__install} -p -D -m 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/logrotate.d/%{name}
|
||||||
|
%{__install} -p -D -m 0644 %{SOURCE4} %{buildroot}%{_sysconfdir}/sysconfig/%{name}
|
||||||
|
%{__install} -p -D -m 0644 %{SOURCE5} %{buildroot}%{_mandir}/man1/halog.1
|
||||||
|
%{__install} -d -m 0755 %{buildroot}%{haproxy_homedir}
|
||||||
|
%{__install} -d -m 0755 %{buildroot}%{haproxy_datadir}
|
||||||
|
%{__install} -d -m 0755 %{buildroot}%{_bindir}
|
||||||
|
%{__install} -p -m 0755 ./admin/halog/halog %{buildroot}%{_bindir}/halog
|
||||||
|
%{__install} -p -m 0755 ./admin/iprange/iprange %{buildroot}%{_bindir}/iprange
|
||||||
|
%{__install} -p -m 0755 ./admin/iprange/ip6range %{buildroot}%{_bindir}/ip6range
|
||||||
|
|
||||||
|
for httpfile in $(find ./examples/errorfiles/ -type f)
|
||||||
|
do
|
||||||
|
%{__install} -p -m 0644 $httpfile %{buildroot}%{haproxy_datadir}
|
||||||
|
done
|
||||||
|
|
||||||
|
%{__rm} -rf ./examples/errorfiles/
|
||||||
|
|
||||||
|
find ./examples/* -type f ! -name "*.cfg" -exec %{__rm} -f "{}" \;
|
||||||
|
|
||||||
|
for textfile in $(find ./ -type f -name '*.txt')
|
||||||
|
do
|
||||||
|
%{__mv} $textfile $textfile.old
|
||||||
|
iconv --from-code ISO8859-1 --to-code UTF-8 --output $textfile $textfile.old
|
||||||
|
%{__rm} -f $textfile.old
|
||||||
|
done
|
||||||
|
|
||||||
|
%pre
|
||||||
|
getent group %{haproxy_group} >/dev/null || \
|
||||||
|
groupadd -r %{haproxy_group}
|
||||||
|
getent passwd %{haproxy_user} >/dev/null || \
|
||||||
|
useradd -r -g %{haproxy_user} -d %{haproxy_homedir} \
|
||||||
|
-s /sbin/nologin -c "haproxy" %{haproxy_user}
|
||||||
|
exit 0
|
||||||
|
|
||||||
|
%post
|
||||||
|
%systemd_post %{name}.service
|
||||||
|
|
||||||
|
%preun
|
||||||
|
%systemd_preun %{name}.service
|
||||||
|
|
||||||
|
%postun
|
||||||
|
%systemd_postun_with_restart %{name}.service
|
||||||
|
|
||||||
|
%files
|
||||||
|
%doc doc/* examples/*
|
||||||
|
%doc CHANGELOG README ROADMAP VERSION
|
||||||
|
%license LICENSE
|
||||||
|
%dir %{haproxy_homedir}
|
||||||
|
%dir %{haproxy_confdir}
|
||||||
|
%dir %{haproxy_datadir}
|
||||||
|
%{haproxy_datadir}/*
|
||||||
|
%config(noreplace) %{haproxy_confdir}/%{name}.cfg
|
||||||
|
%config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
|
||||||
|
%config(noreplace) %{_sysconfdir}/sysconfig/%{name}
|
||||||
|
%{_unitdir}/%{name}.service
|
||||||
|
%{_sbindir}/%{name}
|
||||||
|
%{_bindir}/halog
|
||||||
|
%{_bindir}/iprange
|
||||||
|
%{_bindir}/ip6range
|
||||||
|
%{_mandir}/man1/*
|
||||||
|
|
||||||
|
%changelog
|
||||||
|
* Wed Apr 06 2022 Ryan O'Hara <rohara@redhat.com> - 2.4.7-2
|
||||||
|
- Fix unbound loop when Set-Cookie2 header is present (#2059438)
|
||||||
|
|
||||||
|
* Wed Oct 13 2021 Ryan O'Hara <rohara@redhat.com> - 2.4.7-1
|
||||||
|
- Update to 2.4.7 (#1966688)
|
||||||
|
- Fix domain parts in :scheme and :path fields (CVE-2021-39240, #1998196)
|
||||||
|
- Fix spaces in the :method field (CVE-2021-39241, #1998198)
|
||||||
|
- Fix mismatch between :authority and Host fields (CVE-2021-39242, #1998200)
|
||||||
|
- Fix request smuggling attack or response splitting (CVE-2021-40346, #2000621)
|
||||||
|
|
||||||
|
* Tue Aug 17 2021 Ryan O'Hara <rohara@redhat.com> - 2.4.3-1
|
||||||
|
- Update to 2.4.3 (#1966688)
|
||||||
|
|
||||||
|
* Tue Aug 10 2021 Ryan O'Hara <rohara@redhat.com> - 2.4.2-8
|
||||||
|
- Add gating tests (#1966688)
|
||||||
|
|
||||||
|
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 2.4.2-7
|
||||||
|
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
|
||||||
|
Related: rhbz#1991688
|
||||||
|
|
||||||
|
* Sat Aug 07 2021 Ryan O'Hara <rohara@redhat.com> - 2.4.2-6
|
||||||
|
- Ignore badfuncs error in rpminspect (#1966688)
|
||||||
|
|
||||||
|
* Wed Aug 04 2021 Lukas Javorsky <ljavorsk@redhat.com> - 2.4.2-5
|
||||||
|
- Second rebuild against pcre2-10.37 (bug #1970765)
|
||||||
|
|
||||||
|
* Tue Aug 03 2021 Ryan O'Hara <rohara@redhat.com> - 2.4.2-4
|
||||||
|
- Apply patch to fix OpenSSL 3.0 build (#1984786)
|
||||||
|
|
||||||
|
* Mon Aug 02 2021 Ryan O'Hara <rohara@redhat.com> - 2.4.2-3
|
||||||
|
- Fix OpenSSL 3.0 build (#1984786)
|
||||||
|
|
||||||
|
* Wed Jul 28 2021 Lukas Javorsky <ljavorsk@redhat.com> - 2.4.2-2
|
||||||
|
- Rebuild against pcre2-10.37 (bug #1970765)
|
||||||
|
|
||||||
|
* Mon Jul 12 2021 Ryan O'Hara <rohara@redhat.com> - 2.4.2-1
|
||||||
|
- Update to 2.4.2 (#1966688)
|
||||||
|
|
||||||
|
* Wed Jun 16 2021 Mohan Boddu <mboddu@redhat.com> - 2.4.0-3
|
||||||
|
- Rebuilt for RHEL 9 BETA for openssl 3.0
|
||||||
|
Related: rhbz#1971065
|
||||||
|
|
||||||
|
* Thu Jun 03 2021 Ryan O'Hara <rohara@redhat.com> - 2.4.0-2
|
||||||
|
- Fix hardened builds (#1966688)
|
||||||
|
|
||||||
|
* Tue Jun 01 2021 Ryan O'Hara <rohara@redhat.com> - 2.4.0-1
|
||||||
|
- Update to 2.4.0 (#1966688)
|
||||||
|
|
||||||
|
* Fri Apr 16 2021 Mohan Boddu <mboddu@redhat.com> - 2.3.4-3
|
||||||
|
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
|
||||||
|
|
||||||
|
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.3.4-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Jan 14 2021 Ryan O'Hara <rohara@redhat.com> - 2.3.4-1
|
||||||
|
- Update to 2.3.4 (#1914447)
|
||||||
|
|
||||||
|
* Tue Dec 08 2020 Ryan O'Hara <rohara@redhat.com> - 2.3.2-1
|
||||||
|
- Update to 2.3.2 (#1894994)
|
||||||
|
|
||||||
|
* Thu Oct 01 2020 Ryan O'Hara <rohara@redhat.com> - 2.2.4-1
|
||||||
|
- Update to 2.2.4 (#1883742)
|
||||||
|
|
||||||
|
* Thu Sep 17 2020 Ryan O'Hara <rohara@redhat.com> - 2.2.3-2
|
||||||
|
- Fix build for late loading of libgcc_s
|
||||||
|
|
||||||
|
* Mon Sep 14 2020 Ryan O'Hara <rohara@redhat.com> - 2.2.3-1
|
||||||
|
- Update to 2.2.3 (#1876932)
|
||||||
|
|
||||||
|
* Fri Jul 31 2020 Ryan O'Hara <rohara@redhat.com> - 2.2.2-1
|
||||||
|
- Update to 2.2.2 (#1862400)
|
||||||
|
|
||||||
|
* Mon Jul 27 2020 Ryan O'Hara <rohara@redhat.com> - 2.2.1-1
|
||||||
|
- Update to 2.2.1 (#1859846)
|
||||||
|
|
||||||
|
* Wed Jul 15 2020 Ryan O'Hara <rohara@redhat.com> - 2.2.0-3
|
||||||
|
- Update systemd service file
|
||||||
|
|
||||||
|
* Fri Jul 10 2020 Tom Callaway <spot@fedoraproject.org> - 2.2.0-2
|
||||||
|
- Fix build against lua 5.4
|
||||||
|
|
||||||
|
* Thu Jul 09 2020 Ryan O'Hara <rohara@redhat.com> - 2.2.0-1
|
||||||
|
- Update to 2.2.0 (#1854519)
|
||||||
|
|
||||||
|
* Mon Jun 15 2020 Ryan O'Hara <rohara@redhat.com> - 2.1.7-1
|
||||||
|
- Update to 2.1.7 (#1845001)
|
||||||
|
|
||||||
|
* Mon Jun 08 2020 Ryan O'Hara <rohara@redhat.com> - 2.1.6-1
|
||||||
|
- Update to 2.1.6 (#1845001)
|
||||||
|
|
||||||
|
* Mon Jun 01 2020 Ryan O'Hara <rohara@redhat.com> - 2.1.5-1
|
||||||
|
- Update to 2.1.5 (#1841837)
|
||||||
|
|
||||||
|
* Thu Apr 02 2020 Ryan O'Hara <rohara@redhat.com> - 2.1.4-1
|
||||||
|
- Update to 2.1.4 (CVE-2010-11100, #1820200)
|
||||||
|
|
||||||
|
* Mon Mar 16 2020 Ryan O'Hara <rohara@redhat.com> - 2.1.3-2
|
||||||
|
- Fix invalid element address calculation (#1801109)
|
||||||
|
|
||||||
|
* Wed Feb 12 2020 Ryan O'Hara <rohara@redhat.com> - 2.1.3-1
|
||||||
|
- Update to 2.1.3 (#1802233)
|
||||||
|
|
||||||
|
* Wed Jan 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.2-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Jan 02 2020 Ryan O'Hara <rohara@redhat.com> - 2.1.2-1
|
||||||
|
- Update to 2.1.2 (#1782472)
|
||||||
|
|
||||||
|
* Mon Nov 25 2019 Ryan O'Hara <rohara@redhat.com> - 2.0.10-1
|
||||||
|
- Update to 2.0.10 (#1772961)
|
||||||
|
|
||||||
|
* Wed Nov 06 2019 Ryan O'Hara <rohara@redhat.com> - 2.0.8-1
|
||||||
|
- Update to 2.0.8 (#1764483)
|
||||||
|
|
||||||
|
* Mon Oct 21 2019 Ryan O'Hara <rohara@redhat.com> - 2.0.7-2
|
||||||
|
- Build with Prometheus exporter service (#1755839)
|
||||||
|
|
||||||
|
* Mon Oct 21 2019 Ryan O'Hara <rohara@redhat.com> - 2.0.7-1
|
||||||
|
- Update to 2.0.7 (#1742544)
|
||||||
|
|
||||||
|
* Fri Sep 13 2019 Ryan O'Hara <rohara@redhat.com> - 2.0.6-1
|
||||||
|
- Update to 2.0.6 (#1742544)
|
||||||
|
|
||||||
|
* Mon Aug 19 2019 Ryan O'Hara <rohara@redhat.com> - 2.0.5-1
|
||||||
|
- Update to 2.0.5 (#1742544)
|
||||||
|
|
||||||
|
* Tue Jul 30 2019 Ryan O'Hara <rohara@redhat.com> - 2.0.3-1
|
||||||
|
- Update to 2.0.3 (#1690492)
|
||||||
|
|
||||||
|
* Tue Jul 30 2019 Ryan O'Hara <rohara@redhat.com> - 1.8.20-3
|
||||||
|
- Build with PCRE2 (#1669217)
|
||||||
|
|
||||||
|
* Thu Jul 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.8.20-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
||||||
|
|
||||||
|
* Fri May 17 2019 Ryan O'Hara <rohara@redhat.com> - 1.8.20-1
|
||||||
|
- Update to 1.8.20
|
||||||
|
|
||||||
|
* Wed Feb 13 2019 Ryan O'Hara <rohara@redhat.com> - 1.8.19-1
|
||||||
|
- Update to 1.8.19
|
||||||
|
|
||||||
|
* Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.8.17-4
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Jan 24 2019 Petr Pisar <ppisar@redhat.com> - 1.8.17-3
|
||||||
|
- Rebuild against patched libpcreposix library (bug #1667614)
|
||||||
|
|
||||||
|
* Mon Jan 14 2019 Björn Esser <besser82@fedoraproject.org> - 1.8.17-2
|
||||||
|
- Rebuilt for libcrypt.so.2 (#1666033)
|
||||||
|
|
||||||
|
* Wed Jan 09 2019 Ryan O'Hara <rohara@redhat.com> - 1.8.17-1
|
||||||
|
- Update to 1.8.17
|
||||||
|
- Fix handling of priority flag in HEADERS frame in HTTP/2 decoder (CVE-2018-20615)
|
||||||
|
|
||||||
|
* Sat Dec 22 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.16-1
|
||||||
|
- Update to 1.8.16
|
||||||
|
|
||||||
|
* Thu Dec 13 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.15-1
|
||||||
|
- Update to 1.8.15
|
||||||
|
- Fix denial of service attack via infinite recursion (CVE-2018-20103, #1658881)
|
||||||
|
- Fix out-of-bound reads in dns_validate_dns_response (CVE-2018-20102, #1658882)
|
||||||
|
|
||||||
|
* Sat Dec 01 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.14-2
|
||||||
|
- Use of crpyt() is not thread safe (#1643941)
|
||||||
|
|
||||||
|
* Thu Sep 20 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.14-1
|
||||||
|
- Update to 1.8.14 (#1610066)
|
||||||
|
|
||||||
|
* Mon Aug 20 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.13-1
|
||||||
|
- Update to 1.8.13 (#1610066)
|
||||||
|
|
||||||
|
* Thu Aug 16 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.12-4
|
||||||
|
- Add BuildRequires gcc (#1604308)
|
||||||
|
|
||||||
|
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.8.12-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
||||||
|
|
||||||
|
* Tue Jul 10 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.12-2
|
||||||
|
- Fix ownership of /var/lib/haproxy/ to avoid selinux DAC override errors (#1597076)
|
||||||
|
|
||||||
|
* Thu Jun 28 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.12-1
|
||||||
|
- Update to 1.8.12 (#1580036)
|
||||||
|
|
||||||
|
* Wed Jun 27 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.11-1
|
||||||
|
- Update to 1.8.11 (#1580036)
|
||||||
|
|
||||||
|
* Mon Jun 25 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.10-1
|
||||||
|
- Update to 1.8.10 (#1580036)
|
||||||
|
|
||||||
|
* Mon May 21 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.9-1
|
||||||
|
- Update to 1.8.9 (#1580036)
|
||||||
|
|
||||||
|
* Thu May 10 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.8-2
|
||||||
|
- Build with USE_GETADDRINFO option
|
||||||
|
|
||||||
|
* Thu Apr 19 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.8-1
|
||||||
|
- Update to 1.8.8 (#1560121)
|
||||||
|
|
||||||
|
* Mon Apr 09 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.7-1
|
||||||
|
- Update to 1.8.7 (#1560121)
|
||||||
|
|
||||||
|
* Fri Apr 06 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.6-1
|
||||||
|
- Update to 1.8.6 (#1560121)
|
||||||
|
|
||||||
|
* Mon Mar 26 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.5-1
|
||||||
|
- Update to 1.8.5 (#1560121)
|
||||||
|
|
||||||
|
* Mon Feb 26 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.4-2
|
||||||
|
- Define USE_SYSTEMD at build time (#1549027)
|
||||||
|
|
||||||
|
* Mon Feb 26 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.4-1
|
||||||
|
- Update to 1.8.4 (#1543668)
|
||||||
|
|
||||||
|
* Thu Feb 08 2018 Florian Weimer <fweimer@redhat.com> - 1.8.3-5
|
||||||
|
- Build halog and iprange with linker flags from redhat-rpm-config
|
||||||
|
- Tell build to include <crypt.h>
|
||||||
|
|
||||||
|
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.8.3-4
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
||||||
|
|
||||||
|
* Sat Jan 20 2018 Björn Esser <besser82@fedoraproject.org> - 1.8.3-3
|
||||||
|
- Rebuilt for switch to libxcrypt
|
||||||
|
|
||||||
|
* Fri Jan 05 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.3-2
|
||||||
|
- Remove haproxy-systemd-wrapper
|
||||||
|
|
||||||
|
* Fri Jan 05 2018 Ryan O'Hara <rohara@redhat.com> - 1.8.3-1
|
||||||
|
- Update to 1.8.3 (#1528829)
|
||||||
|
|
||||||
|
* Wed Dec 27 2017 Ryan O'Hara <rohara@redhat.com> - 1.8.2-1
|
||||||
|
- Update to 1.8.2
|
||||||
|
|
||||||
|
* Fri Dec 15 2017 Ryan O'Hara <rohara@redhat.com> - 1.8.1-1
|
||||||
|
- Update to 1.8.1
|
||||||
|
|
||||||
|
* Fri Dec 15 2017 Ryan O'Hara <rohara@redhat.com> - 1.8.0-1
|
||||||
|
- Update to 1.8.0
|
||||||
|
|
||||||
|
* Mon Sep 11 2017 Ryan O'Hara <rohara@redhat.com> - 1.7.9-1
|
||||||
|
- Update to 1.7.9 (#1485084)
|
||||||
|
|
||||||
|
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.8-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
||||||
|
|
||||||
|
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.8-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
||||||
|
|
||||||
|
* Mon Jul 10 2017 Ryan O'Hara <rohara@redhat.com> - 1.7.8-1
|
||||||
|
- Update to 1.7.8 (#1436669)
|
||||||
|
|
||||||
|
* Mon May 01 2017 Ryan O'Hara <rohara@redhat.com> - 1.7.3-2
|
||||||
|
- Use KillMode=mixed in systemd service file (#1447085)
|
||||||
|
|
||||||
|
* Sun Mar 26 2017 Ryan O'Hara <rohara@redhat.com> - 1.7.3-1
|
||||||
|
- Update to 1.7.3 (#1413276)
|
||||||
|
|
||||||
|
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.7.2-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
||||||
|
|
||||||
|
* Wed Jan 18 2017 Ryan O'Hara <rohara@redhat.com> - 1.7.2-1
|
||||||
|
- Update to 1.7.2 (#1413276)
|
||||||
|
|
||||||
|
* Thu Dec 29 2016 Ryan O'Hara <rohara@redhat.com> - 1.7.1-1
|
||||||
|
- Update to 1.7.1
|
||||||
|
|
||||||
|
* Mon Nov 28 2016 Ryan O'Hara <rohara@redhat.com> - 1.7.0-1
|
||||||
|
- Update to 1.7.0
|
||||||
|
|
||||||
|
* Mon Nov 21 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.10-1
|
||||||
|
- Update to 1.6.10 (#1397013)
|
||||||
|
|
||||||
|
* Wed Aug 31 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.9-1
|
||||||
|
- Update to 1.6.9 (#1370709)
|
||||||
|
|
||||||
|
* Thu Jul 14 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.7-2
|
||||||
|
- Fix main frontend in default config file (#1348674)
|
||||||
|
|
||||||
|
* Thu Jul 14 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.7-1
|
||||||
|
- Update to 1.6.7 (#1356578)
|
||||||
|
|
||||||
|
* Tue Jun 28 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.6-2
|
||||||
|
- Remove patch for CVE-2016-5360
|
||||||
|
|
||||||
|
* Tue Jun 28 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.6-1
|
||||||
|
- Update to 1.6.6 (#1350426)
|
||||||
|
|
||||||
|
* Wed Jun 15 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.5-3
|
||||||
|
- Fix reqdeny causing random crashes (CVE-2016-5360, #1346672)
|
||||||
|
|
||||||
|
* Fri Jun 03 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.5-2
|
||||||
|
- Utilize system-wide crypto-policies (#1256253)
|
||||||
|
|
||||||
|
* Mon May 23 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.5-1
|
||||||
|
- Update to 1.6.5 (#1317313)
|
||||||
|
|
||||||
|
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.6.3-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
||||||
|
|
||||||
|
* Wed Jan 20 2016 Ryan O'Hara <rohara@redhat.com> - 1.6.3-1
|
||||||
|
- Update to 1.6.3 (#1276288)
|
||||||
|
|
||||||
|
* Wed Nov 18 2015 Ryan O'Hara <rohara@redhat.com> - 1.6.2-3
|
||||||
|
- Enable Lua support
|
||||||
|
|
||||||
|
* Tue Nov 03 2015 Ryan O'Hara <rohara@redhat.com> - 1.6.2-2
|
||||||
|
- Update to 1.6.2 (#1276288)
|
||||||
|
|
||||||
|
* Fri Oct 30 2015 Ryan O'Hara <rohara@redhat.com> - 1.6.1-1
|
||||||
|
- Update to 1.6.1 (#1276288)
|
||||||
|
|
||||||
|
* Mon Jul 06 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.14-1
|
||||||
|
- Update to 1.5.14 (CVE-2015-3281, #1239181)
|
||||||
|
|
||||||
|
* Fri Jun 26 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.13-1
|
||||||
|
- Update to 1.5.13 (#1236056)
|
||||||
|
|
||||||
|
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.12-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
||||||
|
|
||||||
|
* Tue May 05 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.12-2
|
||||||
|
- Remove unused patches
|
||||||
|
|
||||||
|
* Tue May 05 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.12-1
|
||||||
|
- Update to 1.5.12 (#1217922)
|
||||||
|
|
||||||
|
* Wed Mar 04 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.11-4
|
||||||
|
- Rework systemd service and sysconfig file
|
||||||
|
|
||||||
|
* Wed Feb 11 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.11-3
|
||||||
|
- Add sysconfig file
|
||||||
|
|
||||||
|
* Tue Feb 10 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.11-2
|
||||||
|
- Add tcp-ut bind option to set TCP_USER_TIMEOUT (#1190783)
|
||||||
|
|
||||||
|
* Sun Feb 01 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.11-1
|
||||||
|
- Update to 1.5.11 (#1188029)
|
||||||
|
|
||||||
|
* Mon Jan 05 2015 Ryan O'Hara <rohara@redhat.com> - 1.5.10-1
|
||||||
|
- Update to 1.5.10
|
||||||
|
|
||||||
|
* Mon Dec 01 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.9-1
|
||||||
|
- Update to 1.5.9
|
||||||
|
|
||||||
|
* Sat Nov 01 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.8-1
|
||||||
|
- Update to 1.5.8
|
||||||
|
|
||||||
|
* Thu Oct 30 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.7-1
|
||||||
|
- Update to 1.5.7
|
||||||
|
|
||||||
|
* Mon Oct 20 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.6-1
|
||||||
|
- Update to 1.5.6
|
||||||
|
|
||||||
|
* Wed Oct 08 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.5-1
|
||||||
|
- Update to 1.5.5
|
||||||
|
|
||||||
|
* Tue Sep 02 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.4-1
|
||||||
|
- Update to 1.5.4
|
||||||
|
|
||||||
|
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.3-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
||||||
|
|
||||||
|
* Wed Aug 06 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.3-2
|
||||||
|
- Use haproxy-systemd-wrapper in service file (#1126955)
|
||||||
|
|
||||||
|
* Fri Jul 25 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.3-1
|
||||||
|
- Update to 1.5.3
|
||||||
|
|
||||||
|
* Tue Jul 15 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.2-1
|
||||||
|
- Update to 1.5.2
|
||||||
|
|
||||||
|
* Tue Jun 24 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.1-1
|
||||||
|
- Update to 1.5.1
|
||||||
|
|
||||||
|
* Thu Jun 19 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.0-2
|
||||||
|
- Build with zlib and openssl support
|
||||||
|
|
||||||
|
* Thu Jun 19 2014 Ryan O'Hara <rohara@redhat.com> - 1.5.0-1
|
||||||
|
- Update to 1.5.0
|
||||||
|
|
||||||
|
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.25-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Mar 27 2014 Ryan O'Hara <rohara@redhat.com> - 1.4.25-1
|
||||||
|
- Update to 1.4.25
|
||||||
|
|
||||||
|
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.24-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
||||||
|
|
||||||
|
* Mon Jun 17 2013 Ryan O'Hara <rohara@redhat.com> - 1.4.24-1
|
||||||
|
- Update to 1.4.24 (CVE-2013-2174, #975160)
|
||||||
|
|
||||||
|
* Tue Apr 30 2013 Ryan O'Hara <rohara@redhat.com> - 1.4.23-3
|
||||||
|
- Build with PIE flags (#955182)
|
||||||
|
|
||||||
|
* Mon Apr 22 2013 Ryan O'Hara <rohara@redhat.com> - 1.4.23-2
|
||||||
|
- Build with PIE flags (#955182)
|
||||||
|
|
||||||
|
* Tue Apr 02 2013 Ryan O'Hara <rohara@redhat.com> - 1.4.23-1
|
||||||
|
- Update to 1.4.23 (CVE-2013-1912, #947697)
|
||||||
|
- Drop supplementary groups after setuid/setgid (#894626)
|
||||||
|
|
||||||
|
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.22-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
||||||
|
|
||||||
|
* Fri Oct 12 2012 Robin Lee <cheeselee@fedoraproject.org> - 1.4.22-1
|
||||||
|
- Update to 1.4.22 (CVE-2012-2942, #824544)
|
||||||
|
- Use linux2628 build target
|
||||||
|
- No separate x86_64 build target for halog
|
||||||
|
- halog build honors rpmbuild optflags
|
||||||
|
- Specfile cleanup
|
||||||
|
|
||||||
|
* Mon Sep 17 2012 Václav Pavlín <vpavlin@redhat.com> - 1.4.20-3
|
||||||
|
- Scriptlets replaced with new systemd macros (#850143)
|
||||||
|
|
||||||
|
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.20-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
||||||
|
|
||||||
|
* Tue Apr 03 2012 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.20-1
|
||||||
|
- Update to 1.4.20
|
||||||
|
|
||||||
|
* Sun Feb 19 2012 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.19-4
|
||||||
|
- fix haproxy.services file
|
||||||
|
|
||||||
|
* Sun Feb 19 2012 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.19-3
|
||||||
|
- Update to use systemd fixing bug #770305
|
||||||
|
|
||||||
|
* Fri Feb 10 2012 Petr Pisar <ppisar@redhat.com> - 1.4.19-2
|
||||||
|
- Rebuild against PCRE 8.30
|
||||||
|
|
||||||
|
* Sun Jan 29 2012 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.19-1
|
||||||
|
- Update to 1.4.19
|
||||||
|
|
||||||
|
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.18-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Sep 22 2011 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.18-1
|
||||||
|
- Update to 1.4.18
|
||||||
|
|
||||||
|
* Tue Apr 26 2011 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.15-1
|
||||||
|
- Update to 1.4.15
|
||||||
|
|
||||||
|
* Sun Feb 27 2011 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.11-1
|
||||||
|
- update to 1.4.11
|
||||||
|
|
||||||
|
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.8-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
||||||
|
|
||||||
|
* Sun Dec 12 2010 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.9-1
|
||||||
|
- update to 1.4.9
|
||||||
|
|
||||||
|
* Sun Jun 20 2010 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.8-1
|
||||||
|
- update to 1.4.8
|
||||||
|
|
||||||
|
* Sun May 30 2010 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.4.6-1
|
||||||
|
- update to 1.4.6
|
||||||
|
|
||||||
|
* Thu Feb 18 2010 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.23-1
|
||||||
|
- update to 1.3.23
|
||||||
|
|
||||||
|
* Sat Oct 17 2009 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.22-1
|
||||||
|
- update to 1.3.22
|
||||||
|
- added logrotate configuration
|
||||||
|
|
||||||
|
* Mon Oct 12 2009 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.21-1
|
||||||
|
- update to 1.3.21
|
||||||
|
|
||||||
|
* Sun Oct 11 2009 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.20-1
|
||||||
|
- update to 1.3.20
|
||||||
|
|
||||||
|
* Sun Aug 02 2009 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.19-1
|
||||||
|
- update to 1.3.19
|
||||||
|
|
||||||
|
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.18-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
|
||||||
|
|
||||||
|
* Sun May 17 2009 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.18-1
|
||||||
|
- update to 1.3.18
|
||||||
|
|
||||||
|
* Sat Apr 11 2009 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.17-1
|
||||||
|
- Update to 1.3.17
|
||||||
|
|
||||||
|
* Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.15.7-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
|
||||||
|
|
||||||
|
* Tue Dec 30 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.15.7-1
|
||||||
|
- update to 1.3.15.7
|
||||||
|
- remove upstream patches, they are now part of source distribution
|
||||||
|
|
||||||
|
* Sat Nov 22 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.15.6-2
|
||||||
|
- apply upstream patches
|
||||||
|
|
||||||
|
* Sat Nov 15 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.15.6-1
|
||||||
|
- update to 1.3.15.6
|
||||||
|
- use new build targets from upstream
|
||||||
|
- add in recommended build options for x86 from upstream
|
||||||
|
|
||||||
|
* Sat Jun 28 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.6-1
|
||||||
|
- update to 1.3.14.6
|
||||||
|
- remove gcc 4.3 patch, it has been applied upstream
|
||||||
|
- remove MIT license as that code has been removed from upstream
|
||||||
|
|
||||||
|
* Mon Apr 14 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.4-1
|
||||||
|
- update to 1.3.14.4
|
||||||
|
|
||||||
|
* Sun Mar 16 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.3-1
|
||||||
|
- update to 1.3.14.3
|
||||||
|
|
||||||
|
* Sat Mar 01 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.2-4
|
||||||
|
- apply the gcc 4.3 patch to the build process
|
||||||
|
|
||||||
|
* Sat Mar 01 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.2-3
|
||||||
|
- fix gcc 4.3 bug [#434144]
|
||||||
|
- update init script to properly reload configuration
|
||||||
|
|
||||||
|
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1.3.14.2-2
|
||||||
|
- Autorebuild for GCC 4.3
|
||||||
|
|
||||||
|
* Sun Jan 20 2008 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14.2-1
|
||||||
|
- update to 1.3.14.2
|
||||||
|
- update make flags that changed with this upstream release
|
||||||
|
- added man page installation
|
||||||
|
|
||||||
|
* Sun Dec 16 2007 Jeremy Hinegardner <jeremy at hinegardner dot org> - 1.3.14-1
|
||||||
|
- update to 1.3.14
|
||||||
|
|
||||||
|
* Mon Nov 05 2007 Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.4-1
|
||||||
|
- update to 1.3.12.4
|
||||||
|
|
||||||
|
* Thu Nov 01 2007 Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.3-1
|
||||||
|
- update to 1.3.12.3
|
||||||
|
|
||||||
|
* Fri Sep 21 2007 Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.2-3
|
||||||
|
- fix init script 'reload' task
|
||||||
|
|
||||||
|
* Thu Sep 20 2007 Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.2-2
|
||||||
|
- update License field
|
||||||
|
|
||||||
|
* Thu Sep 20 2007 Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.2-1
|
||||||
|
- update to 1.3.12.2
|
||||||
|
- remove the upstream patch
|
||||||
|
|
||||||
|
* Tue Sep 18 2007 Jeremy Hinegardner <jeremy@hinegardner.org> - 1.3.12.1-1
|
||||||
|
- switch to 1.3.12.1 branch
|
||||||
|
- add patch from upstream with O'Reilly licensing updates.
|
||||||
|
- convert ISO-8859-1 doc files to UTF-8
|
||||||
|
|
||||||
|
* Sat Mar 24 2007 Jeremy Hinegardner <jeremy@hinegardner.org> - 1.2.17-2
|
||||||
|
- addition of haproxy user
|
||||||
|
- add license information
|
||||||
|
|
||||||
|
* Fri Mar 23 2007 Jeremy Hinegardner <jeremy@hinegardner.org> - 1.2.17-1
|
||||||
|
- initial packaging
|
||||||
Loading…
Reference in New Issue
Block a user