Changes since version 1.8.23 :

Emmanuel Hocdet (1):
      BUG/MINOR: ssl: certificate choice can be unexpected with openssl >= 1.1.1

Mathias Weiersmueller (1):
      DOC: clarify matching strings on binary fetches

Olivier Houchard (1):
      BUG/MEDIUM: kqueue: Make sure we report read events even when no data.

Willy Tarreau (19):
      BUG/MEDIUM: listener/thread: fix a race when pausing a listener
      BUG/MINOR: proxy: make soft_stop() also close FDs in LI_PAUSED state
      BUG/MINOR: listener/threads: always use atomic ops to clear the FD events
      BUG/MINOR: listener: also clear the error flag on a paused listener
      BUG/MEDIUM: listener/threads: fix a remaining race in the listener's accept()
      DOC: document the listener state transitions
      BUG/MAJOR: dns: add minimalist error processing on the Rx path
      BUG/MEDIUM: proto_udp/threads: recv() and send() must not be exclusive.
      DOC: listeners: add a few missing transitions
      BUILD/MINOR: ssl: shut up a build warning about format truncation
      BUILD/MINOR: tools: shut up the format truncation warning in get_gmt_offset()
      BUILD: do not disable -Wformat-truncation anymore
      DOC: remove references to the outdated architecture.txt
      BUG/MINOR: log: fix minor resource leaks on logformat error path
      BUG/MINOR: mworker: properly pass SIGTTOU/SIGTTIN to workers
      BUG/MINOR: listener: do not immediately resume on transient error
      BUG/MINOR: server: make "agent-addr" work on default-server line
      BUG/MINOR: listener: fix off-by-one in state name check
      BUILD/MINOR: unix sockets: silence an absurd gcc warning about strncpy()