Changes since version 3.3.14 :

Amaury Denoyelle (6):
      BUG/MAJOR: h3: reject H3 truncated frames
      BUG/MINOR: h3: reject truncated frames with mandatory payload
      BUG/MEDIUM: h3: do not block FIN on empty DATA frame
      BUG/MINOR: h3: handle empty HEADERS frame as specified
      BUG/MINOR: h3: handle unknown frame type on request stream as specified
      BUG/MINOR: h3: only increment frame type counter on new header

Christopher Faulet (9):
      BUG/MEDIUM: mux-spop: Properly handle parsing of split HELLO/DISCONNECT frames
      BUN/MINOR: hlua: reset hlua_body variable after per-thread files loading
      BUG/MEDIUM: hlua: Never release a cosocket applet from the GC
      BUG/MINOR: mux-h1: Return an error on trailers if last chunk is unfinished
      BUG/MINOR: hlua: Always return nil if there is no data to dup for HTTP messages
      BUG/MEDIUM: cli: Don't read a command or payload line into a full buffer
      BUG/MEDIUM: htx: Reserve a block descriptor for zero-sized blocks
      CLEANUP: stream: Remove an excess newline in the stream dump
      BUG/MEDIUM: tcp-rules: Don't restart tcp-request content evaluation on yield

Frederic Lecaille (11):
      BUG/MEDIUM: quic: crash on key update phase change after a failed one
      BUG/MINOR: quic: late packets of the first key phase are dropped
      MINOR: quic: protect the ChaCha20 header protection context from being freed
      BUG/MINOR: qpack: encoder and decoder stream data is never consumed
      BUG/MINOR: qpack: accept a Required Insert Count which cannot be reached
      BUG/MINOR: quic: delete the wrong CIDs when post-handshake frames fail
      BUG/MINOR: quic: leak of the NEW_TOKEN frame on token generation failure
      BUG/MEDIUM: map: do not overwrite the fetch context in pat_match_regm()
      REGTESTS: map: check map_regm inside an ACL over an iterating fetch
      BUG/MINOR: sample: reject a \0 byte in url_dec, json_query and jwt_*_query
      REGTESTS: http-rules: check "-m str" on a sample with an embedded \0

Manu Nicolas (2):
      BUG/MINOR: resolvers: classify empty truncated responses
      BUG/MEDIUM: http-ana: apply tunnel timeout with data filters

Olivier Houchard (2):
      MEDIUM: mux-h1: Harden test for short data at end of stream
      BUG/MEDIUM: mux-h2: Make sure we remove H2_SF_NOTIFIED on subscribe

Remi Tricot-Le Breton (4):
      BUG/MINOR: cache: Manage collisions on primary key
      BUG/MINOR: cache: Seed cache primary hash
      BUG/MINOR: ssl: don't pass the address of a size_t as an int* to OpenSSL
      BUG/MINOR: ssl: Fix leak of ca_list in cafile_entry

William Lallemand (3):
      BUG/MINOR: payload: fix the cipher_len bound check in smp_client_hello_parse()
      BUG/MINOR: payload: bound ClientHello extension lists by the extension length
      BUG/MEDIUM: ssl: don't set a 0 timeout on an expired TLS session

Willy Tarreau (4):
      DOC: config: clarify tune tune.bufsize doc regarding various limits
      BUG/MINOR: stream/debug: harden the stream dump function regarding signals
      DOC: configuration: clarify the validity ranges of sample types
      OPTIM: tools: keep a cache of recent localtime() and gmtime()

Youngkwang Lee (1):
      BUG/MEDIUM: http_act: fix normalize-uri normalizer selection with a condition