Log Message:
Pullup ticket #4164 - requested by morr
net/haproxy: security update
Pullup ticket #4165 - requested by morr
net/haproxy: security update

Revisions pulled up:
- net/haproxy/Makefile                                          1.8
- net/haproxy/distinfo                                          1.6
- net/haproxy/patches/patch-aa                                  1.3
- net/haproxy/patches/patch-ab                                  1.2

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	morr
   Date:		Wed Apr 17 19:55:38 UTC 2013

   Modified Files:
   	pkgsrc/net/haproxy: Makefile distinfo
   	pkgsrc/net/haproxy/patches: patch-aa patch-ab

   Log Message:
   Security update to version 1.4.23.

   ChangeLog:
   2013/04/03 : 1.4.23
    - CONTRIB: halog: sort URLs by avg bytes_read or total bytes_read
    - BUG: fix garbage data when http-send-name-header replaces an existing header
    - BUG/MEDIUM: remove supplementary groups when changing gid
    - BUG/MINOR: Correct logic in cut_crlf()
    - BUG/MINOR: config: use a copy of the file name in proxy configurations
    - BUG/MINOR: epoll: correctly disable FD polling in fd_rem()
    - MINOR: halog: sort output by cookie code
    - BUG/MINOR: halog: -ad/-ac report the correct number of output lines
    - BUG/MINOR: halog: fix help message for -ut/-uto
    - BUG/MEDIUM: http: set DONTWAIT on data when switching to tunnel mode
    - BUG/MEDIUM: command-line option -D must have precedence over "debug"
    - OPTIM: halog: keep a fast path for the lines-count only
    - MINOR: halog: add a parameter to limit output line count
    - BUG: halog: fix broken output limitation
    - MEDIUM: checks: avoid accumulating TIME_WAITs during checks
    - MEDIUM: checks: prevent TIME_WAITs from appearing also on timeouts
    - BUG/MAJOR: cli: show sess <id> may randomly corrupt the back-ref list
    - BUG/MINOR: http: don't report client aborts as server errors
    - BUG/MINOR: http: don't log a 503 on client errors while waiting for requests
    - BUG/MEDIUM: tcp: process could theorically crash on lack of source ports
    - BUG/MINOR: http: don't abort client connection on premature responses
    - BUILD: no need to clean up when making git-tar
    - MINOR: http: always report PR-- flags for redirect rules
    - BUG/MINOR: time: frequency counters are not totally accurate
    - BUG/MINOR: http: don't process abortonclose when request was sent
    - BUG/MINOR: epoll: use a fix maxevents argument in epoll_wait()
    - BUG/MINOR: config: fix improper check for failed memory alloc in ACL parser
    - BUG/MEDIUM: checks: ensure the health_status is always within bounds
    - CLEANUP: http: remove a useless null check
    - BUG/MEDIUM: signal: signal handler does not properly check for signal bounds
    - BUG/MEDIUM: uri_auth: missing NULL check and memory leak on memory shortage
    - CLEANUP: config: slowstart is never negative
    - BUILD: improve the makefile's support for libpcre
    - BUG/MINOR: checks: fix an warning introduced by commit 2f61455a
    - MEDIUM: halog: add support for counting per source address (-ic)
    - DOC: mention the new HTTP 307 and 308 redirect statues     (cherry picked \ 
from commit b67fdc4cd8bde202f2805d98683ddab929469a05)
    - MEDIUM: poll: do not use FD_* macros anymore
    - BUG/MAJOR: ev_select: disable the select() poller if maxsock > FD_SETSIZE
    - BUILD: enable poll() by default in the makefile
    - BUILD: add explicit support for Mac OS/X
    - BUG/CRITICAL: using HTTP information in tcp-request content may crash the \ 
process
    - MEDIUM: http: implement redirect 307 and 308
    - MINOR: http: status 301 should not be marked non-cacheable

   To generate a diff of this commit:
   cvs rdiff -u -r1.6 -r1.7 pkgsrc/net/haproxy/Makefile
   cvs rdiff -u -r1.4 -r1.5 pkgsrc/net/haproxy/distinfo
   cvs rdiff -u -r1.2 -r1.3 pkgsrc/net/haproxy/patches/patch-aa
   cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/haproxy/patches/patch-ab

-------------------------------------------------------------------
   Module Name:	pkgsrc
   Committed By:	morr
   Date:		Thu Jun 20 21:36:28 UTC 2013

   Modified Files:
   	pkgsrc/net/haproxy: Makefile distinfo

   Log Message:
   Security update to version 1.4.24.

   ChangeLog:

   - BUG/MAJOR: backend: consistent hash can loop forever in certain circumstances
   - BUG/MEDIUM: checks: disable TCP quickack when pure TCP checks are used
   - MEDIUM: protocol: implement a "drain" function in protocol layers
   - BUG/CRITICAL: fix a possible crash when using negative header occurrences

   To generate a diff of this commit:
   cvs rdiff -u -r1.7 -r1.8 pkgsrc/net/haproxy/Makefile
   cvs rdiff -u -r1.5 -r1.6 pkgsrc/net/haproxy/distinfo