Index | Thread | Search

From:
Mark Patruck <mark@wrapped.cx>
Subject:
net/haproxy 3.4.7 - 3 MAJOR (security), lots of MEDIUM/MINOR
To:
Lucas Gabriel Vuotto <lucas@sexy.is>
Cc:
ports@openbsd.org
Date:
Thu, 15 Oct 2026 10:45:16 +0200

Download raw body.

Thread
  • Mark Patruck:

    net/haproxy 3.4.7 - 3 MAJOR (security), lots of MEDIUM/MINOR

Update to net/haproxy 3.4.7 released about 12h ago.

Fixed bugs:
- MAJOR
   - mux-h2 (security): A truncated PING frame could waste the CPU of
                        spurious wakeups 
   
   - h1-htx (security): A too long chunk-size line waste the CPU of
                        spurious wakeups
   
   - cfgparse: Several configuration parsing issues were fixed, one of
               which could randomly prevent startup

- lots of MEDIUM/MINOR

Changelog: https://www.haproxy.org/download/3.4/src/CHANGELOG

No issues spotted after updating my machines.


Index: Makefile
===================================================================
RCS file: /cvs/ports/net/haproxy/Makefile,v
retrieving revision 1.142
diff -u -p -r1.142 Makefile
--- Makefile	9 Oct 2026 14:05:11 -0000	1.142
+++ Makefile	15 Oct 2026 08:36:13 -0000
@@ -1,6 +1,6 @@
  COMMENT =	reliable, high performance TCP/HTTP load balancer
  
-DISTNAME =	haproxy-3.4.6
+DISTNAME =	haproxy-3.4.7
  CATEGORIES =	net www
  HOMEPAGE =	https://www.haproxy.org
  MAINTAINER =	Lucas Gabriel Vuotto <lucas@sexy.is>
Index: distinfo
===================================================================
RCS file: /cvs/ports/net/haproxy/distinfo,v
retrieving revision 1.101
diff -u -p -r1.101 distinfo
--- distinfo	9 Oct 2026 14:05:11 -0000	1.101
+++ distinfo	15 Oct 2026 08:36:13 -0000
@@ -1,2 +1,2 @@
-SHA256 (haproxy-3.4.6.tar.gz) = eR4YFfivbouFCiJ6mgoZDz00eMno04oPUcmLf0v+Nos=
-SIZE (haproxy-3.4.6.tar.gz) = 5525386
+SHA256 (haproxy-3.4.7.tar.gz) = zP00Lzckws1llXQETXiPROILISRnxr1e27/FF6J3Xco=
+SIZE (haproxy-3.4.7.tar.gz) = 5531506


--
Mark Patruck ( mark at wrapped.cx )
GPG key 0xF2865E51 / 187F F6D3 EE04 1DCE 1C74  F644 0D3C F66F F286 5E51
  
https://www.wrapped.cx