Changes since version 3.2.15 : Amaury Denoyelle (3): MINOR: ncbmbuf: improve itbmap_next() code BUG/MINOR: quic: close conn on packet reception with incompatible frame BUG/MINOR: quic: fix documentation for transport params decoding Aurelien DARRAGON (2): DOC: config: fix ambiguous info in log-steps directive description BUG/MINOR: task: fix uninitialised read in run_tasks_from_lists() Christopher Faulet (15): Revert "BUG/MEDIUM: mux-h2: make sure to always report pending errors to the stream" DOC: config: Add missing 'status-code' param for 'http-check expect' directive DOC: config: Reorder params for 'tcp-check expect' directive BUG/MEDIUM: spoe: Acquire context buffer in applet before consuming a frame BUG/MINOR: config: Properly test warnif_misplaced_* return values BUG/MINOR: http-ana: Only consider client abort for abortonclose BUG/MINOR: stconn: Always declare the SC created from healthchecks as a back SC BUG/MINOR: tcpcheck: Remove unexpected flag on tcpcheck rules for httchck option BUG/MINOR: tcpcheck: Don't enable http_needed when parsing HTTP samples BUG/MINOR: tcpcheck: Use tcpcheck context for expressions parsing BUG/MEDIUM: mux-h1: Disable 0-copy forwarding when draining the request BUG/MEDIUM: samples: Fix handling of SMP_T_METH samples BUG/MEDIUM: cli: Properly handle too big payload on a command line BUG/MEDIUM: htx: Fix function used to change part of a block value when defrag BUG/MEDIUM: htx: Don't count delta twice when block value is replaced Cody Ohlsen (1): BUG/MEDIUM: mux-h1: Don't set MSG_MORE on bodyless responses forwarded to client David Carlier (1): BUG/MEDIUM: acme: fix multiple resource leaks in acme_x509_req() Egor Shestakov (2): BUG/MINOR: sock: adjust accept() error messages for ENFILE and ENOMEM BUG/MINOR: acme: don't pass NULL into format string Emeric Brun (1): BUG/MEDIUM: peers: trash of expired entries delayed after fullresync Frederic Lecaille (1): BUG/MINOR: qpack: fix 62-bit overflow and 1-byte OOB reads in decoding Greg Kroah-Hartman (11): BUG/MEDIUM: payload: validate SNI name_len in req.ssl_sni BUG/MEDIUM: jwt: fix heap overflow in ECDSA signature DER conversion BUG: hlua: fix stack overflow in httpclient headers conversion BUG/MINOR: hlua: fix stack overflow in httpclient headers conversion BUG/MINOR: hlua: fix format-string vulnerability in Patref error path BUG/MINOR: peers: fix OOB heap write in dictionary cache update BUG/MINOR: resolvers: fix memory leak on AAAA additional records BUG/MINOR: spoe: fix pointer arithmetic overflow in spoe_decode_buffer() BUG/MINOR: sample: fix info leak in regsub when exp_replace fails BUG/MEDIUM: mux-fcgi: prevent record-length truncation with large bufsize BUG/MINOR: hlua: fix use-after-free of HTTP reason string Ilia Shipitsin (1): CI: github: fix tag listing by implementing proper API pagination Mia Kanashi (2): BUG/MINOR: acme: fix incorrect number of arguments allowed in config BUG/MEDIUM: acme: skip doing challenge if it is already valid Miroslav Zagorac (1): BUG/MINOR: ot: fixed wrong NULL check in flt_ot_parse_cfg_group() Tim Duesterhus (1): BUG/MINOR: log: Fix error message when using unavailable fetch in logfmt William Lallemand (15): BUG/MINOR: mworker: fix sort order of mworker_proc in 'show proc' BUG/MINOR: acme: leak of ext_san upon insertion error BUG/MINOR: acme: wrong error when checking for duplicate section BUG/MINOR: acme/cli: wrong argument check in 'acme renew' BUG/MINOR: acme: acme_ctx_destroy() leaks auth->dns BUG/MINOR: acme: wrong labels logic always memprintf errmsg BUG/MINOR: acme: free() DER buffer on a2base64url error path BUG/MINOR: acme: replace atol with len-bounded __strl2uic() for retry-after BUG/MINOR: acme/cli: fix argument check and error in 'acme challenge_ready' BUILD: tools: potential null pointer dereference in dl_collect_libs_cb BUG/MINOR: acme: permission checks on the CLI BUG/MINOR: acme: fix task allocation leaked upon error BUG/MEDIUM: ssl/cli: tls-keys commands warn when accessed without admin level BUG/MEDIUM: ssl/ocsp: ocsp commands warn when accessed without admin level BUG/MEDIUM: map/cli: map/acl commands warn when accessed without admin level Willy Tarreau (16): MEDIUM: sched: do not run a same task multiple times in series MINOR: sched: do not requeue a tasklet into the current queue MINOR: sched: do not punish self-waking tasklets anymore MEDIUM: sched: do not punish self-waking tasklets if TASK_WOKEN_ANY MEDIUM: sched: change scheduler budgets to lower TL_BULK MINOR: mux-h2: assign a limited frames processing budget BUILD: sched: fix leftover of debugging test in single-run changes MINOR: stconn: flag the stream endpoint descriptor when the app has started MINOR: mux-h2: report glitches on early RST_STREAM SCRIPTS: git-show-backports: list new commits and how to review them with -L BUG/MINOR: cfgcond: properly set the error pointer on evaluation error BUG/MINOR: cfgcond: always set the error string on openssl_version checks BUG/MINOR: cfgcond: fail cleanly on missing argument for "feature" BUG/MINOR: http-act: fix a typo in the "pause" action error message BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals BUG/MEDIUM: mux-h2: ignore conn->owner when deciding if a connection is dead