Log Message:
Pullup ticket #5057 - requested by sevan
net/haproxy: security fix

Revisions pulled up:
- net/haproxy/Makefile                                          1.28
- net/haproxy/distinfo                                          1.23
- net/haproxy/patches/patch-Makefile                            1.2

---
   Module Name:    pkgsrc
   Committed By:   morr
   Date:           Sun Jul  3 14:06:45 UTC 2016

   Modified Files:
           pkgsrc/net/haproxy: Makefile distinfo
           pkgsrc/net/haproxy/patches: patch-Makefile

   Log Message:
   Update to newer version 1.6.6.

   Changes:

   - BUG/MAJOR: fix listening IP address storage for frontends
   - BUG/MINOR: fix listening IP address storage for frontends (cont)
   - DOC: Fix typo so fetch is properly parsed by Cyril's converter
   - BUG/MAJOR: http: fix breakage of "reqdeny" causing random crashes
   - BUG/MEDIUM: stick-tables: fix breakage in table converters
   - BUG/MEDIUM: dns: unbreak DNS resolver after header fix
   - BUILD: fix build on Solaris 11
   - CLEANUP: connection: fix double negation on memcmp()
   - BUG/MEDIUM: stats: show servers state may show an servers from another backend
   - BUG/MEDIUM: fix risk of segfault with "show tls-keys"
   - BUG/MEDIUM: sticktables: segfault in some configuration error cases
   - BUG/MEDIUM: lua: converters doesn't work
   - BUG/MINOR: http: add-header: header name copied twice
   - BUG/MEDIUM: http: add-header: buffer overwritten
   - BUG/MINOR: ssl: fix potential memory leak in ssl_sock_load_dh_params()
   - BUG/MINOR: http: url32+src should use the big endian version of url32
   - BUG/MINOR: http: url32+src should check cli_conn before using it
   - DOC: http: add documentation for url32 and url32+src
   - BUG/MINOR: fix http-response set-log-level parsing error
   - MINOR: systemd: Use variable for config and pidfile paths
   - MINOR: systemd: Perform sanity check on config before reload (cherry picked \ 
from commit 68535bddf305fdd22f1449a039939b57245212e7)
   - BUG/MINOR: init: always ensure that global.rlimit_nofile matches actual limits
   - BUG/MINOR: init: ensure that FD limit is raised to the max allowed
   - BUG/MEDIUM: external-checks: close all FDs right after the fork()
   - BUG/MAJOR: external-checks: use asynchronous signal delivery
   - BUG/MINOR: external-checks: do not unblock undesired signals
   - BUILD/MEDIUM: rebuild everything when an include file is changed
   - BUILD/MEDIUM: force a full rebuild if some build options change
   - BUG/MINOR: srv-state: fix incorrect output of state file
   - BUG/MINOR: ssl: close ssl key file on error
   - BUG/MINOR: http: fix misleading error message for response captures
   - BUG/BUILD: don't automatically run "make" on "make install"
   - DOC: add missing doc for http-request deny [deny_status <status>]

   Drop one patch included upstream.