HAProxy known bugs for version v2.8.16 (maintenance branch 2.8) :  44 

This version (2.8.16) is a release belonging to maintenance branch 2.8 whose latest version is 2.8.18. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches.

Quick links

Other versions in the same branch

This branch contains the following releases :

DateVersionComment
2025-12-252.8.18 ⇐ last
2025-12-192.8.17 
2025-10-032.8.16 ⇐ yours
2025-04-222.8.15 
2025-01-292.8.14 
2024-12-122.8.13 
2024-11-082.8.12 
2024-09-192.8.11 
2024-06-142.8.10 
2024-04-052.8.9 
2024-04-052.8.8 
2024-02-262.8.7 
2024-02-152.8.6 
2023-12-072.8.5 
2023-11-172.8.4 
2023-09-072.8.3 
2023-08-092.8.2 
2023-07-032.8.1 
2023-05-312.8.0 

Known bugs affecting this version, and already fixed in the maintenance branch

These fixes have already been queued for a more recent 2.8 version. Some of them might have already been released in a more recent version than yours, and other ones might still be pending in the maintenance branch for a future release. The list may be empty if you're already on the latest version and no new fix was backported.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in this version by category :

TotalCRITICALMAJORMEDIUMMINOR
44 0 2 13 29

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2025-12-24Revert "BUG/MEDIUM: mux-h2: make sure not to move a dead connection to idle"
2025-12-19BUG/MINOR: quic: do not set first the default QUIC curves
2025-12-19BUG/MINOR: cfgparse-listen: update err_code for fatal error on proxy directive
2025-12-18BUG/MEDIUM: mux-quic: adjust wakeup behavior
2025-12-18BUG/MINOR: mux-quic: ensure close-spread-time is properly applied
2025-12-18BUG/MEDIUM: mux-quic: ensure Early-data header is set
2025-12-18BUG/MAJOR: quic: use ncbmbuf for CRYPTO handling
2025-12-18BUG/MINOR: quic: close connection on CID alloc failure
2025-12-18BUG/MEDIUM: h3: handle interim response properly on FE side
2025-12-12BUG/MEDIUM: http-ana: Don't close server connection on read0 in TUNNEL mode
2025-12-12BUG/MINOR: jwt: Missing "case" in switch statement
2025-12-12BUG/MINOR: http-ana: Reset analyse_exp date after 'wait-for-body' action
2025-12-12BUG/MINOR: ssl: remove dead code in ssl_sock_from_buf()
2025-12-12BUG/MEDIUM: h1: prevent a crash on HTTP/2 upgrade
2025-12-12BUG/MEDIUM: stick-tables: Always return the good stksess from stktable_set_entry
2025-12-12BUG/MINOR: config: Limit "tune.maxpollevents" parameter to 1000000
2025-12-12BUG/MEDIUM: mux-h2: make sure not to move a dead connection to idle
2025-12-12BUG/MINOR: ssl: returns when SSL_CTX_new failed during init
2025-12-12BUG/MINOR: init: Do not close previously created fd in stdio_quiet
2025-12-12BUG/MEDIUM: ssl: Crash because of dangling ckch_store reference in a ckch instance
2025-12-12BUG/MINOR: stick-tables: properly index string-type keys
2025-12-12BUG/MEDIUM: h3: properly encode response after interim one in same buf
2025-12-12BUG/MINOR: quic: check applet_putchk() for 'show quic' first line
2025-12-12BUG/MEDIUM: stick-tables: Don't forget to dec count on failure.
2025-12-12BUG/MINOR mux-quic: apply correctly timeout on output pending data
2025-12-12BUG/MEDIUM: h3: do not overwrite interim with final response
2025-12-12BUG/MINOR: ssl: Free global_ssl structure contents during deinit
2025-12-12BUG/MAJOR: stream: Force channel analysis on successful synchronous send
2025-12-12BUG/MINOR: log: fix potential memory leak upon error in add_to_logformat_list()
2025-12-12BUG/MINOR: tools: Add OOM check for malloc() in indent_msg()
2025-12-12BUG/MINOR: compression: Add OOM check for calloc() in parse_compression_options()
2025-12-12BUG/MINOR: cfgparse: Add OOM check for calloc() in cfg_parse_listen()
2025-12-12BUG/MINOR: log: Add OOM checks for calloc() and malloc() in logformat parser and dup_logger()
2025-12-12BUG/MINOR: halog: Add OOM checks for calloc() in filter_count_srv_status() and filter_count_url()
2025-10-24BUG/MINOR: quic: Wrong source address use on FreeBSD
2025-10-24BUG/MINOR: mux-quic/h3: properly handle too low peer fctl initial stream
2025-10-24BUG/MINOR: quic: Missing SSL session object freeing
2025-10-24BUG/MINOR: quic: ensure cwnd limits are always enforced
2025-10-20BUG/MINOR: quic: ignore AGAIN ncbuf err when parsing CRYPTO frames
2025-10-20BUG/MEDIUM: quic: CRYPTO frame freeing without eb_delete()
2025-10-20BUG/MINOR: quic: reorder fragmented RX CRYPTO frames by their offsets
2025-10-14BUG/MINOR: sink: retry attempt for sft server may never occur
2025-10-10BUG/MINOR: ssl: always clear the remains of the first hello for the second one
2025-10-10BUG/MEDIUM: ssl: take care of second client hello
2025-10-10BUG/MINOr: hlua: Fix receive from HTTP applet by properly accounting data

Back to the list of branches and versions
Back to the HAProxy page