HAProxy known bugs for maintenance branch 2.3 : 5

This is maintenance branch 2.3 whose latest version is 2.3.9. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches. In short, if you are running any 2.3 version other than 2.3.9, you're running with known bugs.

Quick links

full changelog for 2.3 : here
browse history for 2.3 : here

Versions available in this branch

This branch contains the following releases :

Date Version Comment

2021-03-30 2.3.9 ⇐ last

2021-03-25 2.3.8

2021-03-16 2.3.7

2021-03-03 2.3.6

2021-02-06 2.3.5

2021-01-13 2.3.4

2021-01-08 2.3.3

2020-11-28 2.3.2

2020-11-13 2.3.1

2020-11-05 2.3.0

Date	Version	Comment
2021-03-30	2.3.9	⇐ last
2021-03-25	2.3.8
2021-03-16	2.3.7
2021-03-03	2.3.6
2021-02-06	2.3.5
2021-01-13	2.3.4
2021-01-08	2.3.3
2020-11-28	2.3.2
2020-11-13	2.3.1
2020-11-05	2.3.0

Fixes for known bugs pending in this branch since the last release (2.3.9)

These fixes have already been queued for the next 2.3 release but no version was released with them yet. Note that fixes are backported several at a time from the development branch to maintenance branches, and the absence of a fix here doesn't mean none will be issued soon.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

MINOR: the bug presents a limited impact and can easily be mitigated ; users rarely upgrade just for these ones ;
MEDIUM: the bug can cause some undesired behaviour and may require some tricky configuration changes to avoid hitting it ; users normally upgrade to get rid of them, or temporarily disable a functionality.
MAJOR: the bug affects short term reliability and cannot easily be worked around without a significant performance penalty or without a significant functional loss ; such bugs don't stay long in the queue without a release and users must plan an upgrade as soon as possible ;
CRITICAL: this one very rarely happens ; it indicates a short-term reliability or security issue for which there is no workaround. A release will be emitted for this fix even if it's alone and users are urged to upgrade immediately. Some distro maintainers might have been informed in advance in order to agree on a coordinated release date.

Total known bugs in the latest version of this branch by category :

Total CRITICAL MAJOR MEDIUM MINOR

5 0 0 0 5

Total	CRITICAL	MAJOR	MEDIUM	MINOR
5	0	0	0	5

Click on the subjects below to get the full description of the bug :

Merge date Subject - Severity (minor, medium, major, critical)

2021-03-31 BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free

2021-03-31 BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields

2021-03-31 BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one

2021-03-31 BUG/MINOR: ssl: Fix update of default certificate

2021-03-31 BUG/MINOR: tcp: fix silent-drop workaround for IPv6

Merge date	Subject - Severity (minor, medium, major, critical)
2021-03-31	BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
2021-03-31	BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
2021-03-31	BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
2021-03-31	BUG/MINOR: ssl: Fix update of default certificate
2021-03-31	BUG/MINOR: tcp: fix silent-drop workaround for IPv6

Known bugs fixed in the development branch after the last commit in this branch

It is important to understand that not all of these commits are necessarily relevant to this version, but clicking on them will show the bug description. All fixes are made first in the development branch and then backported to the maintenance branches. This ensures no fix is lost when upgrading. If a fix was marked for backporting to this branch and is not there yet, it's likely that it is still missing. Do not hesitate to ask on the haproxy mailing list if you feel like a fix has been skipped.

Date	Subject
2021-04-13	BUG/MEDIUM: sample: Fix adjusting size in field converter
2021-04-12	BUG/MINOR: cfgparse/proxy: Hande allocation errors during proxy section parsing
2021-04-12	BUG/MINOR: listener: Handle allocation error when allocating a new bind_conf
2021-04-12	BUG/MINOR: cfgparse/proxy: Fix some leaks during proxy section parsing
2021-04-12	BUG/MINOR: hlua: Fix memory leaks on error path when registering a cli keyword
2021-04-12	BUG/MINOR: hlua: Fix memory leaks on error path when registering a service
2021-04-12	BUG/MINOR: hlua: Fix memory leaks on error path when registering an action
2021-04-12	BUG/MINOR: hlua: Fix memory leaks on error path when parsing a lua action
2021-04-12	BUG/MINOR: hlua: Fix memory leaks on error path when registering a fetch
2021-04-12	BUG/MINOR: hlua: Fix memory leaks on error path when registering a converter
2021-04-12	BUG/MINOR: hlua: Fix memory leaks on error path when registering a task
2021-04-10	BUG/MINOR: mux-pt: Fix a possible UAF because of traces in mux_pt_io_cb
2021-04-07	BUG/MAJOR: fd: switch temp values to uint in fd_stop_both()
2021-04-07	BUG/MEDIUM: log: fix config parse error logging on stdout/stderr or any raw fd
2021-04-06	BUG/MINOR: tools: fix parsing "us" unit for timers
2021-04-06	BUG/MINOR: hlua: Detect end of request when reading data for an HTTP applet

Back to the list of branches and versions
Back to the HAProxy page