HAProxy known bugs for maintenance branch 2.6 :  0 

This is maintenance branch 2.6 whose latest version is 2.6.32. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches. In short, if you are running any 2.6 version other than 2.6.32, you're running with known bugs.

Quick links

Versions available in this branch

This branch contains the following releases :

DateVersionComment
2026-07-292.6.32 ⇐ last
2026-07-032.6.31 
2026-06-262.6.30 
2026-05-112.6.29 
2026-05-062.6.28 
2026-04-302.6.27 
2026-04-232.6.26 
2026-03-202.6.25 
2026-03-092.6.24 
2025-10-032.6.23 
2025-04-222.6.22 
2025-01-292.6.21 
2024-11-082.6.20 
2024-09-192.6.19 
2024-06-182.6.18 
2024-04-052.6.17 
2023-12-132.6.16 
2023-08-092.6.15 
2023-06-092.6.14 
2023-05-022.6.13 
2023-03-282.6.12 
2023-03-172.6.11 
2023-03-102.6.10 
2023-02-142.6.9 
2023-01-242.6.8 
2022-12-022.6.7 
2022-09-222.6.6 
2022-09-032.6.5 
2022-08-222.6.4 
2022-08-192.6.3 
2022-07-222.6.2 
2022-06-212.6.1 
2022-05-312.6.0 

Fixes for known bugs pending in this branch since the last release (2.6.32)

These fixes have already been queued for the next 2.6 release but no version was released with them yet. Note that fixes are backported several at a time from the development branch to maintenance branches, and the absence of a fix here doesn't mean none will be issued soon.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in the latest version of this branch by category :

TotalCRITICALMAJORMEDIUMMINOR
0 0 0 0 0

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)

Known bugs fixed in the development branch after the last commit in this branch

It is important to understand that not all of these commits are necessarily relevant to this version, but clicking on them will show the bug description. All fixes are made first in the development branch and then backported to the maintenance branches. This ensures no fix is lost when upgrading. If a fix was marked for backporting to this branch and is not there yet, it's likely that it is still missing. Do not hesitate to ask on the haproxy mailing list if you feel like a fix has been skipped.

DateSubject
2026-08-12BUG/MINOR: server: fix off-by-one error when parsing and copying source port range
2026-08-12BUG/MINOR: hq_interop: fix potential NULL dereference in _hq_trace_http()
2026-08-12BUG/MINOR: h3: fix potential NULL pointer dereference in _h3_trace_header()
2026-08-12BUG/MINOR: server: fix memory leak on "default-server" parsing failures
2026-08-12BUG/MINOR: quic: avoid a division by zero in the BBR pacing interval
2026-08-12BUG/MINOR: ssl: reject an embedded NUL in the full-DN ssl_*_dn() fetches
2026-08-12BUG/MINOR: ssl: reject an embedded NUL in the ssl_*_dn(entry) fetches
2026-08-12BUG/MINOR: wurfl: fix memory leak of information list and patch strings at deinit
2026-08-12BUG/MEDIUM: cache: do not release an entry under the cache read lock
2026-08-12BUG/MINOR: cache: do not retain imcomplete or stripped secondary entry
2026-08-12BUG/MEDIUM: cache: retain the primary or secondary entry only when detaching its row
2026-08-10BUG/MEDIUM: hlua_fcn: ensure systematic bref cleanup for patref list iterator
2026-08-10BUG/MEDIUM: lua: resume Channel:send() from the unsent part of the string
2026-08-07BUG/MINOR: quic: drop multiple Retry on same connection
2026-08-07BUG/MEDIUM: quic: prevent out-of-bound read on wrapping CRYPTO content
2026-08-07BUG/MINOR: mux-h2: strip the userinfo when deriving :authority for a server
2026-08-07BUG/MINOR: debug: only dump the trace once in __BUG_ON_ONCE()
2026-08-07BUG/MINOR: lb-chash: bound the walk when the saved cursor changed tree
2026-08-07BUG/MEDIUM: session: don't release a reversed connection twice on error
2026-08-07BUG/MINOR: connection: reserve the whole CRC32C TLV before saving its pointer
2026-08-07BUG/MEDIUM: fd: release the port range entry in host byte order
2026-08-07BUG/MINOR: acme: restrict the permissions of the generated account key
2026-08-07BUG/MINOR: ssl: reject server certificate names containing a NUL byte
2026-08-07BUG/MEDIUM: acme: don't delete a NULL token from the map
2026-08-07BUG/MEDIUM: ssl: require a full-length AEAD tag when decrypting with AES-GCM
2026-08-07BUG/MINOR: jwt: don't take an extra reference on the certificate public key
2026-08-07BUG/MEDIUM: jwe: validate the secret length against the algorithm of the token
2026-08-07BUG/MEDIUM: log: always reserve room for trailing 0 when using CBOR encoding helpers
2026-08-07BUG/MINOR: mux-fcgi: sanitize the STDERR records before logging them
2026-08-07BUG/MEDIUM: http-ana: check the cookie rewrite result before moving the offsets
2026-08-07BUG/MEDIUM: sock: bound the recvmsg() length when receiving old sockets
2026-08-07BUG/MEDIUM: stick-tables: use the same bucket for string keys with a NUL
2026-08-07BUG/MEDIUM: http-ana: don't crash on "keep-query" in a response redirect
2026-08-07BUG/MINOR: mux-fcgi: don't call fcgi_strm_destroy() on a NULL stream
2026-08-07BUG/MEDIUM: spoe: clear the applet pointer when the applet fails to start
2026-08-07BUG/MEDIUM: mux-fcgi: check the room left before appending the index
2026-08-06BUG/MINOR: hlua: use a local buffer to format the socket addresses
2026-08-06BUG/MINOR: stats-file: reject tgid 0 when preloading shm objects
2026-08-06BUG/MEDIUM: hpack: encode long methods and schemes using the long form
2026-08-06BUG/MINOR: proxy: release watcher in "show default-server" on CLI abort
2026-08-06BUG/MINOR: proxy: release watcher in various commands on CLI abort
2026-08-05BUG/MINOR: proxy: fix "show backend"
2026-08-03BUG/MINOR: proxy: fix default-server leak on post-parsing cleanup
2026-08-03BUG/MINOR: ech: fix label at end of compound statement
2026-08-03BUG/MINOR: server: check strdup return on server-template ID generation
2026-08-03BUG/MINOR: server: check strdup return value on server ID
2026-07-31BUG/MINOR: haload: fix stale global variables affecting URL allocations
2026-07-30BUG/MEDIUM: filter: Disable auto-close on channel during TCP payload filtering
2026-07-30BUG/MEDIUM: counters: preserve shared.tg pointer on 'clear counters all'
2026-07-30BUG/MINOR: ech: reject an ECH store with no usable private key
2026-07-30BUG/MINOR: ech: propagate error from load_echkeys()
2026-07-30BUG/MINOR: haload: fix rate limit bypass during stream errors
2026-07-29BUG/MINOR: cli: do not reject the "/" form of "show fd"
2026-07-29BUG/MINOR: cli: use the current argument to parse the FD spec in "show fd"

Back to the list of branches and versions
Back to the HAProxy page