HAProxy known bugs for maintenance branch 2.8 : 5

This is maintenance branch 2.8 whose latest version is 2.8.3. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches. In short, if you are running any 2.8 version other than 2.8.3, you're running with known bugs.

Quick links

full changelog for 2.8 : here
browse history for 2.8 : here

Versions available in this branch

This branch contains the following releases :

Date Version Comment

2023-09-07 2.8.3 ⇐ last

2023-08-09 2.8.2

2023-07-03 2.8.1

2023-05-31 2.8.0

Date	Version	Comment
2023-09-07	2.8.3	⇐ last
2023-08-09	2.8.2
2023-07-03	2.8.1
2023-05-31	2.8.0

Fixes for known bugs pending in this branch since the last release (2.8.3)

These fixes have already been queued for the next 2.8 release but no version was released with them yet. Note that fixes are backported several at a time from the development branch to maintenance branches, and the absence of a fix here doesn't mean none will be issued soon.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

MINOR: the bug presents a limited impact and can easily be mitigated ; users rarely upgrade just for these ones ;
MEDIUM: the bug can cause some undesired behaviour and may require some tricky configuration changes to avoid hitting it ; users normally upgrade to get rid of them, or temporarily disable a functionality.
MAJOR: the bug affects short term reliability and cannot easily be worked around without a significant performance penalty or without a significant functional loss ; such bugs don't stay long in the queue without a release and users must plan an upgrade as soon as possible ;
CRITICAL: this one very rarely happens ; it indicates a short-term reliability or security issue for which there is no workaround. A release will be emitted for this fix even if it's alone and users are urged to upgrade immediately. Some distro maintainers might have been informed in advance in order to agree on a coordinated release date.

Total known bugs in the latest version of this branch by category :

Total CRITICAL MAJOR MEDIUM MINOR

5 0 0 0 5

Total	CRITICAL	MAJOR	MEDIUM	MINOR
5	0	0	0	5

Click on the subjects below to get the full description of the bug :

Merge date Subject - Severity (minor, medium, major, critical)

2023-09-21 BUG/MINOR: quic: ssl_quic_initial_ctx() uses error count not error code

2023-09-21 BUG/MINOR: quic: allow-0rtt warning must only be emitted with quic bind

2023-09-21 BUG/MINOR: quic+openssl_compat: Non initialized TLS encryption levels

2023-09-14 BUG/MINOR: quic: Wrong cluster secret initialization

2023-09-13 BUG/MINOR: quic: Leak of frames to send.

2023-09-12 BUILD: bug: make BUG_ON() void to avoid a rare warning

Merge date	Subject - Severity (minor, medium, major, critical)
2023-09-21	BUG/MINOR: quic: ssl_quic_initial_ctx() uses error count not error code
2023-09-21	BUG/MINOR: quic: allow-0rtt warning must only be emitted with quic bind
2023-09-21	BUG/MINOR: quic+openssl_compat: Non initialized TLS encryption levels
2023-09-14	BUG/MINOR: quic: Wrong cluster secret initialization
2023-09-13	BUG/MINOR: quic: Leak of frames to send.
2023-09-12	BUILD: bug: make BUG_ON() void to avoid a rare warning

Known bugs fixed in the development branch after the last commit in this branch

It is important to understand that not all of these commits are necessarily relevant to this version, but clicking on them will show the bug description. All fixes are made first in the development branch and then backported to the maintenance branches. This ensures no fix is lost when upgrading. If a fix was marked for backporting to this branch and is not there yet, it's likely that it is still missing. Do not hesitate to ask on the haproxy mailing list if you feel like a fix has been skipped.

Date Subject

2023-09-21 BUG/MINOR: proto_reverse_connect: fix preconnect with startup name resolution

2023-09-21 BUG/MEDIUM: server/cli: don't delete a dynamic server that has streams

2023-09-21 BUG/MEDIUM: http-ana: Try to handle response before handling server abort

Date	Subject
2023-09-21	BUG/MINOR: proto_reverse_connect: fix preconnect with startup name resolution
2023-09-21	BUG/MEDIUM: server/cli: don't delete a dynamic server that has streams
2023-09-21	BUG/MEDIUM: http-ana: Try to handle response before handling server abort

Back to the list of branches and versions
Back to the HAProxy page