haproxy: patches from upstream