SUSE-RU-2017:0592-1: moderate: Recommended update for haproxy

[sle-updates at lists.suse.com]

   SUSE Recommended Update: Recommended update for haproxy
______________________________________________________________________________

Announcement ID:    SUSE-RU-2017:0592-1
Rating:             moderate
References:         #1023141 
Affected Products:
                    SUSE Linux Enterprise High Availability 12-SP2
______________________________________________________________________________

   An update that has one recommended fix can now be installed.

Description:


   This update provides haproxy 1.6.11, which brings several fixes and
   enhancements:

   - systemd-wrapper: Return correct exit codes.
   - srv-state: Properly restore the DRAIN state.
   - srv-state: Allow to have both CMAINT and FDRAIN flags.
   - servers: Properly propagate the maintenance states during startup.
   - vars: Fix 'set-var' converter because of a typo.
   - channel: Fix bad unlikely macro.
   - doc/ssl: Use correct wording for ca-sign-pass.
   - stick-table: Handle out-of-memory condition gracefully.
   - connection: Check the control layer before stopping polling.
   - stick-table: Fix regression caused by recent fix for out-of-memory.
   - cli: Properly decrement ref count on tables during failed dumps.
   - lua: In some case, the return of sample-fetches is ignored.
   - cli: Fix pointer size when reporting data/transport layer name.
   - cli: Dequeue from the proxy when changing a maxconn.
   - cli: Wake up the CLI's task after a timeout update.
   - freq-ctr: Make swrate_add() support larger values.
   - proxy: Return "none" and "unknown" for unknown LB algos.
   - stream: Fix session abort on resource shortage.
   - http: Don't send an extra CRLF after a Set-Cookie in a redirect.
   - variables: Some variable name can hide another ones.
   - cli: Be sure to always warn the cli applet when input buffer is full.
   - applet: Count number of (active) applets.
   - task: Rename run_queue and run_queue_cur counters.
   - stream: Save unprocessed events for a stream.
   - Fix how the list of entities waiting for a buffer is handled.
   - stream-int: Automatically release SI_FL_WAIT_DATA on SHUTW_NOW.
   - doc/lua: Section declared twice.
   - doc: Fix small typo in fe_id (backend instead of frontend).
   - lua: Fix memory leak executing tasks.
   - ssl: Properly reset the reused_sess during a forced handshake.
   - ssl: Avoid double free when releasing bind_confs.
   - backend: nbsrv() should return 0 if backend is disabled.
   - ssl: For a handshake when server-side SNI changes.
   - systemd: Prevent potential zombie processes.


Patch Instructions:

   To install this SUSE Recommended Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise High Availability 12-SP2:

      zypper in -t patch SUSE-SLE-HA-12-SP2-2017-308=1

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise High Availability 12-SP2 (ppc64le s390x x86_64):

      haproxy-1.6.11-10.2
      haproxy-debuginfo-1.6.11-10.2
      haproxy-debugsource-1.6.11-10.2


References:

   https://bugzilla.suse.com/1023141