Changes since version 3.3.6 : Amaury Denoyelle (9): BUG/MINOR: proxy: detect strdup error on server auto SNI BUG/MINOR: server: set auto SNI for dynamic servers BUG/MINOR: server: enable no-check-sni-auto for dynamic servers BUG/MINOR: quic: fix counters used on BE side BUG/MINOR: quic/h3: display QUIC/H3 backend module on HTML stats MINOR: ncbmbuf: improve itbmap_next() code BUG/MINOR: quic: close conn on packet reception with incompatible frame DOC: configuration: mention QUIC server support BUG/MINOR: quic: fix documentation for transport params decoding Aurelien DARRAGON (4): BUG/MINOR: stats-file: manipulate shm-stats-file heartbeat using unsigned int BUG/MEDIUM: stats-file: detect and fix inconsistent shared clock when resuming from shm-stats-file DOC: config: fix ambiguous info in log-steps directive description BUG/MINOR: counters: fix unexpected 127 char GUID truncation for shm-stats-file objects Christopher Faulet (14): Revert "BUG/MEDIUM: mux-h2: make sure to always report pending errors to the stream" DOC: config: Fix alphabetical ordering of proxy options DOC: config: Fix alphabetical ordering of external-check directives DOC: config: Add missing 'status-code' param for 'http-check expect' directive DOC: config: Reorder params for 'tcp-check expect' directive BUG/MEDIUM: spoe: Acquire context buffer in applet before consuming a frame BUG/MINOR: config: Properly test warnif_misplaced_* return values BUG/MINOR: http-ana: Only consider client abort for abortonclose BUG/MINOR: stconn: Always declare the SC created from healthchecks as a back SC BUG/MINOR: tcpcheck: Remove unexpected flag on tcpcheck rules for httchck option BUG/MINOR: tcpcheck: Don't enable http_needed when parsing HTTP samples BUG/MINOR: tcpcheck: Use tcpcheck context for expressions parsing BUG/MEDIUM: mux-h1: Disable 0-copy forwarding when draining the request BUG/MEDIUM: samples: Fix handling of SMP_T_METH samples Cody Ohlsen (1): BUG/MEDIUM: mux-h1: Don't set MSG_MORE on bodyless responses forwarded to client David Carlier (1): BUG/MEDIUM: acme: fix multiple resource leaks in acme_x509_req() Egor Shestakov (1): BUG/MINOR: sock: adjust accept() error messages for ENFILE and ENOMEM Frederic Lecaille (2): BUG/MINOR: qpack: fix 62-bit overflow and 1-byte OOB reads in decoding BUG/MINOR: quic: missing app ops init during backend 0-RTT sessions Greg Kroah-Hartman (11): BUG/MEDIUM: payload: validate SNI name_len in req.ssl_sni BUG/MEDIUM: jwt: fix heap overflow in ECDSA signature DER conversion BUG: hlua: fix stack overflow in httpclient headers conversion BUG/MINOR: hlua: fix stack overflow in httpclient headers conversion BUG/MINOR: hlua: fix format-string vulnerability in Patref error path BUG/MINOR: peers: fix OOB heap write in dictionary cache update BUG/MINOR: resolvers: fix memory leak on AAAA additional records BUG/MINOR: spoe: fix pointer arithmetic overflow in spoe_decode_buffer() BUG/MINOR: sample: fix info leak in regsub when exp_replace fails BUG/MEDIUM: mux-fcgi: prevent record-length truncation with large bufsize BUG/MINOR: hlua: fix use-after-free of HTTP reason string Ilia Shipitsin (1): CI: github: fix tag listing by implementing proper API pagination Mia Kanashi (2): BUG/MINOR: acme: fix incorrect number of arguments allowed in config BUG/MEDIUM: acme: skip doing challenge if it is already valid William Lallemand (19): BUG/MINOR: mworker: fix sort order of mworker_proc in 'show proc' BUG/MINOR: acme: leak of ext_san upon insertion error BUG/MINOR: acme: wrong error when checking for duplicate section BUG/MINOR: acme/cli: wrong argument check in 'acme renew' BUG/MINOR: acme: acme_ctx_destroy() leaks auth->dns BUG/MINOR: acme: wrong labels logic always memprintf errmsg BUG/MINOR: acme: free() DER buffer on a2base64url error path BUG/MINOR: acme: replace atol with len-bounded __strl2uic() for retry-after BUG/MINOR: acme/cli: fix argument check and error in 'acme challenge_ready' BUILD: tools: potential null pointer dereference in dl_collect_libs_cb BUG/MINOR: ech: permission checks on the CLI BUG/MINOR: acme: permission checks on the CLI BUG/MINOR: acme: fix task allocation leaked upon error BUG/MEDIUM: ssl/cli: tls-keys commands warn when accessed without admin level BUG/MEDIUM: ssl/ocsp: ocsp commands warn when accessed without admin level BUG/MEDIUM: map/cli: map/acl commands warn when accessed without admin level BUG/MEDIUM: ssl/cli: tls-keys commands are missing permission checks BUG/MEDIUM: ssl/ocsp: ocsp commands are missing permission checks BUG/MEDIUM: map/cli: CLI commands lack admin permission checks Willy Tarreau (16): MEDIUM: sched: do not run a same task multiple times in series MINOR: sched: do not requeue a tasklet into the current queue MINOR: sched: do not punish self-waking tasklets anymore MEDIUM: sched: do not punish self-waking tasklets if TASK_WOKEN_ANY MEDIUM: sched: change scheduler budgets to lower TL_BULK MINOR: mux-h2: assign a limited frames processing budget BUILD: sched: fix leftover of debugging test in single-run changes MINOR: stconn: flag the stream endpoint descriptor when the app has started MINOR: mux-h2: report glitches on early RST_STREAM SCRIPTS: git-show-backports: list new commits and how to review them with -L BUG/MINOR: cfgcond: properly set the error pointer on evaluation error BUG/MINOR: cfgcond: always set the error string on openssl_version checks BUG/MINOR: cfgcond: always set the error string on awslc_api checks BUG/MINOR: cfgcond: fail cleanly on missing argument for "feature" BUG/MINOR: http-act: fix a typo in the "pause" action error message BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals