| Merge date | Subject - Severity (minor, medium, major, critical) |
| 2026-07-29 | BUG/MEDIUM: server: Properly check for streams before deletion |
| 2026-07-29 | BUG/MAJOR: ssl/ocsp: lock the OCSP response around reads in the stapling callback |
| 2026-07-29 | BUG/MEDIUM: sample: reject the deprecated protobuf group wire types |
| 2026-07-29 | BUG/MEDIUM: peers: check the available room before encoding dict values |
| 2026-07-29 | BUG/MINOR: slz: avoid undefined shifts when building the word byte by byte |
| 2026-07-29 | BUG/MINOR: slz: fix the adler32 accumulators signedness on 32-bit |
| 2026-07-29 | BUG/MINOR: slz: do not append a block to an already finished stream |
| 2026-07-29 | BUG/MEDIUM: slz: bound the bits wasted by the 9-bit literals |
| 2026-07-29 | BUG/MINOR: slz: use the exact switch cost for the last literals of a block |
| 2026-07-29 | BUG/MINOR: slz: do not read past the end of the input around the match loop |
| 2026-07-29 | BUG/MINOR: htx: Transfer HTX_FL_EOM flag on success in htx_append_msg() |
| 2026-07-29 | BUG/MINOR: htx: Perform raw copy for messages of same size in htx_copy_msg() |
| 2026-07-29 | BUG/MINOR: http-htx: check the strdup() of the "lf-string" http reply argument |
| 2026-07-29 | BUG/MINOR: http-act: reject a negative capture id in the capture actions |
| 2026-07-29 | BUG/MINOR: http-act: restore the response buffer state in the early-hint action |
| 2026-07-29 | BUG/MINOR: http-act: fix a double free of the map reference on a parsing error |
| 2026-07-29 | BUG/MINOR: http-act: fix a double free of the regex on a rule parsing error |
| 2026-07-29 | BUG/MINOR: http-ana: fix a one-byte over-read in the client-side cookie parser |
| 2026-07-29 | BUG/MINOR: h2: don't use a block pointer to roll back a partial HTX conversion |
| 2026-07-29 | BUG/MINOR: h1: report the right error position on authority/host mismatch |
| 2026-07-29 | BUG/MINOR: http-htx: check the trash allocation in http_scheme_based_normalize() |
| 2026-07-29 | BUG/MINOR: http: fix an out-of-bounds read in http_get_host_port() on empty host |
| 2026-07-29 | BUG/MEDIUM: http-fetch: reject a negative capture id in capture.{req,res}.hdr |
| 2026-07-29 | BUG/MEDIUM: http-fetch: don't parse a non-HTTP check buffer as an HTX message |
| 2026-07-29 | BUG/MINOR: http-htx: fix the length moved when removing a header value |
| 2026-07-22 | BUG/MEDIUM: proxy: protect "show servers ..." against server deletion |
| 2026-07-22 | BUG/MINOR: sample: Fix bytes() when length it greater than remaining data |
| 2026-07-22 | BUG/MEDIUM: sample: Adjust sample size capacity after pointer shift for ltrim() |
| 2026-07-22 | BUG/MEDIUM: sample: Adjust sample size capacity after pointer shift for bytes() |
| 2026-07-22 | BUG/MINOR: mux-h1: Don't delay send if message with c-l was fully sent |
| 2026-07-22 | BUG/MEDIUM: protobuf: fix nested path bypass in field lookup |
| 2026-07-22 | BUG/MEDIUM: protobuf: adjust sample size capacity after pointer shift |
| 2026-07-22 | BUG/MEDIUM: ssl-gencert: Don't forget to free memory when done |
| 2026-07-22 | BUG/MEDIUM: stats: Ensure that Origin is valid on POSTs |
| 2026-07-22 | BUG/MEDIUM: cache: reattach the row when a secondary entry is incomplete |
| 2026-07-22 | BUG/MINOR: shctx: fix shctx_row_data_get() when offset exceeds a block |
| 2026-07-22 | BUG/MEDIUM: stats: subject "stats admin" accesses to "stats scope" filtering |
| 2026-07-22 | BUG/MEDIUM: applet: Reenable reads in applet context if requesting a connection |
| 2026-07-22 | BUG/MINOR: hlua: Apply socket timeout on server side only |
| 2026-07-22 | BUG/MINOR: http-conv: Make url-dec failed if no space for trailing null byte |
| 2026-07-22 | BUG/MINOR: stream: Fix custom timeouts initialization when setting backend |
| 2026-07-22 | BUG/MINOR: sample: Fix a possible underflow on be2hex for large chunk size |
| 2026-07-22 | BUG/MEDIUM: fd: Fix a deadlock when closing other tgroups fds |
| 2026-07-22 | BUG/MINOR: mux_quic: prevent multiple STOP_SENDING emission per stream |
| 2026-07-22 | BUG/MEDIUM: h3: fix parser desync on error with multiple frames |
| 2026-07-02 | BUG/MINOR: http-htx: Don't by-pass HTX API when merging cookie values |
| 2026-07-02 | BUG/MAJOR: htx: Don't swap buffers for empty HTX message with an error |
| 2026-07-02 | BUG/MINOR: tools: fix invalid character detection in strl2ic() |
| 2026-07-02 | BUG/MEDIUM: servers: Use a refcount for port_range and free it properly |
| 2026-07-02 | BUG/MINOR: sample: set SMP_F_CONST on srv_name fetch |
| 2026-07-02 | BUG/MEDIUM: mux_quic: fix memory leak of rx app_buf on stream free |
| 2026-06-25 | BUG/MINOR: mux_quic: refresh timeout only if I/O performed |
| 2026-06-25 | BUG/MEDIUM: mux-quic: Drain the given amount of data in qcs_http_reset_buf() |
| 2026-06-25 | BUG/MEDIUM: mux-h2: Truly drain outgoing HTX data when the stream is closed |
| 2026-06-25 | BUG/MEDIUM: mux-fcgi: Truly drain outgoing HTX data when the stream is closed |
| 2026-06-25 | BUG/MINOR: hq-interop: prevent reset if missing content-length |
| 2026-06-25 | BUG/MINOR: hq-interop: reject too big content |
| 2026-06-18 | BUG/MINOR: server: fix add server with consistent hash balancing |
| 2026-06-18 | BUG/MEDIUM: mux-fcgi: fix uint16_t overflow in drl += drp |
| 2026-06-18 | BUG/MINOR: hpack-tbl: add missing NULL check after hpack_dht_defrag() |
| 2026-06-18 | BUG/MEDIUM: ssl: Don't free the early data buffer too early |
| 2026-06-18 | BUG/MINOR: mux-h1: Properly resolve file path for 'h1-case-adjust-file' |
| 2026-06-18 | BUG/MINOR: mux_h1: handle a possible strdup() failure |
| 2026-06-18 | BUG/MEDIUM: http-ana: Don't ignore L7 retry errors |
| 2026-06-18 | BUG/MINOR: quic: fix Initial length value in sent packets |
| 2026-06-18 | BUG/MEDIUM: checks: Dequeue checks on purge |
| 2026-06-18 | BUG/MINOR: acl: report "ACL" not "map" in ACL ID lookup failures |
| 2026-06-18 | BUG/MEDIUM: check: Skip tcpcheck post-config for external checks |
| 2026-06-03 | BUG/MEDIUM: vars: Properly eval set-var-fmt action for emtpy log-format string |
| 2026-06-03 | BUG/MINOR: tasks: Increase the right niced_task counter |
| 2026-06-03 | BUG/MINOR: applet: Commit changes into input buffer after sending HTX data |
| 2026-06-01 | BUG/MEDIUM: mux-h1: Dup connection/upgrade value to parse it when making headers |
| 2026-06-01 | BUG/MINOR: cache: Fix copy of value when parsing maxage |
| 2026-06-01 | BUG/MEDIUM: resolvers: Wait a bit before calling the xprt prepare_srv |
| 2026-06-01 | BUG/MINOR: cache: fix cache tree iteration |
| 2026-06-01 | BUG/MEDIUM: quic: reset cwnd in slow_start on persistent congestion (cubic) |
| 2026-06-01 | BUG/MINOR: quic: fix ack range node pool_free call passing wrong pointer type |
| 2026-06-01 | BUG/MINOR: mux-h2: Count padding for connection flow control on error path |
| 2026-06-01 | BUG/MEDIUM: quic: handle ECONNREFUSED on RX side |
| 2026-06-01 | BUG/MINOR: qpack: fix huff_dec() error handling in qpack_decode_fs() |
| 2026-06-01 | BUG/MINOR: qpack: fix sign bit mask in qpack_decode_fs_pfx() |
| 2026-06-01 | BUG/MINOR: qpack: fix potential null-pointer dereference in qpack_dht_insert() |
| 2026-06-01 | BUG/MINOR: qpack: Fix index calculation in debug functions |
| 2026-06-01 | Revert "BUG/MEDIUM: dns: fix long loops in additional records parse on name failure" |
| 2026-06-01 | BUG/MINOR: ssl-gencert: validate SNI characters to prevent SAN certificate injection |
| 2026-06-01 | BUG/MINOR: tcpcheck: Check LDAP response to not read more data than available |
| 2026-06-01 | BUG/MINOR: mux-fcgi: Use relative offset to compute contig data in demux buf |
| 2026-06-01 | BUG/MEDIUM: h1-htx: Sanitize parsing to properly handle upgrade requests |
| 2026-06-01 | BUG/MEDIUM: mux-fcgi: reject stream ID 0 for application records |
| 2026-06-01 | BUG/MINOR: quic: reject packet too short for HP decryption |
| 2026-06-01 | BUG/MINOR: hlua: prevent Lua from passing CR/LF/NUL in HTTP headers |
| 2026-06-01 | BUG/MEDIUM: auth: fix unconfigured password NULL deref |
| 2026-06-01 | BUG/MINOR: h3: reject client CANCEL_PUSH frame |
| 2026-06-01 | BUG/MEDIUM: h3: reject client push stream |
| 2026-06-01 | BUG/MINOR: addons/51d: NUL-terminate headers before passing them to Trie API |
| 2026-06-01 | BUG/MINOR: resolvers: switch to a better PRNG for query IDs |
| 2026-06-01 | BUG/MINOR: ssl-hello: make use of the null-terminated servername |
| 2026-06-01 | BUG/MINOR: payload: fix the handshake length bounds check smp_client_hello_parse() |
| 2026-06-01 | BUG/MINOR: base64: return empty string for empty input in base64dec() |
| 2026-06-01 | BUG/MINOR: http-ext: always check remaining data when reading rfc7239 nodeport |
| 2026-06-01 | BUG/MINOR: http-fetch: check against the whole token in get_http_auth() |
| 2026-06-01 | BUG/MINOR: resolvers: relax size checks in authority record parsing |
| 2026-06-01 | BUG/MEDIUM: cache: always verify the primary hash in get_secondary_entry() |
| 2026-06-01 | BUG/MINOR: sample: limit the be2hex converter's chunk size |
| 2026-06-01 | BUG/MINOR: init: use more than ha_random64() for the cluster secret |
| 2026-06-01 | BUG/MINOR: dict: fix refcount race on insert collision |
| 2026-06-01 | BUG/MINOR: log: look for the end of priority before the end of the buffer |
| 2026-06-01 | BUG/MINOR: mux-h2: validate HEADERS frame length before reading stream dep |
| 2026-06-01 | BUG/MINOR: resolvers: fix risk of appending garbage past the domain name |
| 2026-06-01 | BUG/MINOR: resolvers: fix room for trailing zero in resolv_dn_label_to_str() |
| 2026-06-01 | BUG/MEDIUM: cache: fix a refcount leak for missed secondary entries |
| 2026-06-01 | BUG/MEDIUM: log-forward: make sure the month is unsigned |
| 2026-06-01 | BUG/MEDIUM: hlua: Fix integer underflow when receiving line from lua cosocket |
| 2026-06-01 | BUG/MINOR: tcpchecks: Limit parsing of agent-check reply to the buffer |
| 2026-06-01 | BUG/MEDIUM: dict: hold lock while decrementing refcount in dict_entry_unref |
| 2026-06-01 | BUG/MINOR: quic: fix ODCID lookup from derived value |
| 2026-06-01 | BUG/MEDIUM: ssl-gencert: Unlock LRU cache if failing to generate certificate |
| 2026-06-01 | BUG/MEDIUM: resolvers: Fix test on dn label size in resolv_dn_label_to_str() |
| 2026-06-01 | BUG/MEDIUM: applet: Properly handle receives of size 0 |
| 2026-06-01 | BUG/MINOR: ocsp: Manage date too far away in the future |
| 2026-05-21 | BUG/MINOR: backend: fix balance hash calculation when using hash-type none |
| 2026-05-21 | BUG/MINOR: h1: Don't mask websocket protocol if multiple protocols used |
| 2026-05-21 | BUG/MEDIUM: h1: Skip all h2c values from Upgrade headers during parsing |
| 2026-05-21 | BUG/MINOR: httpclient-cli: Destroy http-client context if failing to start it |
| 2026-05-21 | BUG/MINOR: jwt: fix possible memory leak in convert_ecdsa_sig() error path |
| 2026-05-21 | BUG/MINOR: check: properly report errno in chk_report_conn_err() |
| 2026-05-21 | BUG/MINOR: resolvers: fix leaked dgram and dns_ring struct in parse_resolve_conf() |
| 2026-05-21 | BUG/MINOR: resolvers: report the expression error in the do-resolve() action parser |
| 2026-05-21 | BUG/MINOR: dns: fix dangling dgram pointer on dns_dgram_init() failure path |
| 2026-05-21 | BUG/MEDIUM: server/cli: unlock server lock on failure in cli_parse_set_server |
| 2026-05-21 | BUG/MEDIUM: dns: fix memory leak of sockaddr in dns_session_init() error path |
| 2026-05-21 | BUG/MEDIUM: resolvers: fix name compression pointer validation in resolv_read_name() |
| 2026-05-21 | BUG/MEDIUM: dns: fix long loops in additional records parse on name failure |
| 2026-05-21 | BUG/MINOR: config/dns: properly fail on duplicate nameserver name detection |
| 2026-05-21 | BUG/MINOR: backend: correct parameter value validation in get_server_ph_post() |
| 2026-05-21 | BUG/MEDIUM: applet: Fix transfer of HTX data to the applet |
| 2026-05-21 | BUG/MEDIUM: dict: hold read lock while incrementing refcount in dict_insert |
| 2026-05-21 | BUG/MEDIUM: mux_quic: adjust qcc_is_dead() to account detached streams |
| 2026-05-11 | BUG/MEDIUM: tasks: Keep the TASK_RUNNING flag until queued |
| 2026-05-11 | BUG/MINOR: cfgparse-listen: do not emit extraneous line in rule order warnings |
| 2026-05-07 | BUG/MEDIUM: stick-table: properly check permissions on CLI's set/clear cmd |
| 2026-05-07 | BUG/MEDIUM: mux-h2: fix the detection of the ext connect support |
| 2026-05-07 | Revert "BUG/MINOR: mux-h2: condition the processing of 8441 extension to global setting" |
| 2026-05-07 | Revert "BUG/MEDIUM: cli: fix master CLI connection slot leak on client disconnect" |
| 2026-05-07 | BUG/MEDIUM: mux-h2: Properly consume padding for DATA frames |
| 2026-05-06 | BUG/MEDIUM: h1: Enforce the authority validation during H1 request parsing |
| 2026-05-06 | BUG/MAJOR: http: forbid comma character in authority value |
| 2026-05-06 | BUG/MINOR: tools: read_line_to_trash() handle empty files without \n |
| 2026-05-06 | BUG/MEDIUM: h1_htx: Remove reverved block on error during contig chunks parsing |
| 2026-05-06 | BUG/MINOR: http-fetch: Fix http_auth_bearer() when custom header is used |
| 2026-05-06 | BUG/MINOR: h2: only accept :protocol with extended CONNECT |
| 2026-05-06 | BUG/MINOR: mux-h2: condition the processing of 8441 extension to global setting |
| 2026-05-06 | BUG/MINOR: h2: add decoding for :protocol in traces |
| 2026-05-04 | BUG/MINOR: mworker/cli: check ci_insert() return value in pcli_parse_request() |
| 2026-05-04 | BUG/MINOR: resolvers: Free opts on parse error in resolv_parse_do_resolve() |
| 2026-05-04 | BUG/MINOR: resolvers: Free new requester on error when linking a resolution |
| 2026-05-04 | BUG/MINOR: tcpcheck: Properly report error for http health-checks |
| 2026-05-04 | BUG/MAJOR: mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in h2c_dec_hdrs() |
| 2026-05-04 | BUG/MEDIUM: mux-h2: fix the body_len to check when parsing request trailers |
| 2026-05-04 | BUG/MINOR: pattern: release the reference on failure to load from file |
| 2026-05-04 | BUG/MINOR: map: do not leak a map descriptor on load error |
| 2026-05-04 | BUG/MINOR: acl: fix a possible arg corruption in smp_fetch_acl_parse() |
| 2026-05-04 | BUG/MEDIUM: cli: fix master CLI connection slot leak on client disconnect |
| 2026-05-04 | BUG/MINOR: hpack: validate idx > 0 in hpack_valid_idx() |
| 2026-05-04 | BUG/MINOR: vars: only print first invalid char in fill_desc() |
| 2026-05-04 | BUG/MINOR: vars: don't store the variable twice with set-var-fmt |
| 2026-05-04 | BUG/MINOR: vars: make parse_store() return error on var_set() failure |
| 2026-04-29 | BUG/MINOR: http-htx: Don't normalize emtpy path for OPTIONS requests |
| 2026-04-29 | BUG/MEDIUM: mux-fcgi: Properly handle full buffer for FCGI_PARAM record |
| 2026-04-29 | BUG/MINOR: payload: prevent integer overflow in distcc token parsing |
| 2026-04-29 | BUG/MINOR: fix various typos and spelling mistakes in user-visible messages |
| 2026-04-29 | BUG/MEDIUM: tasks: Do not loop in task_schedule() if a task is running |
| 2026-04-29 | BUG/MAJOR: mux-h1: Deal with true 64-bits integer to emit chunks size |
| 2026-04-29 | BUG/MEDIUM: http-htx: Loop on full host value during scheme based normalization |
| 2026-04-29 | BUG/MEDIUM: http-htx: Don't use data from HTX message to update authority |
| 2026-04-29 | BUG/MAJOR: http-htx: Store new host in a chunk for scheme-based normalization |
| 2026-04-29 | BUG/MEDIUM: mux_h1: fix stack buffer overflow in h1_append_chunk_size() |
| 2026-04-29 | BUG/MINOR: peers: fix wrong flag reported twice for dump_flags |
| 2026-04-29 | BUG/MINOR: peers: fix logical "and" when checking for local in PEER_APP_ST_STARTING |
| 2026-04-29 | BUG/MINOR: sample: fix memory leak in check_when_cond() when ACL is not found |
| 2026-04-29 | BUG/MINOR: tools: fix memory leak in indent_msg() on out of memory |
| 2026-04-29 | BUG/MINOR: tools: my_memspn/my_memcspn wrong cast causing incorrect byte reading |
| 2026-04-23 | BUG/MEDIUM: mux-h1: Force close mode for bodyless message announcing a C-L |
| 2026-04-23 | BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as well |
| 2026-04-23 | BUG/MINOR: compression: properly disable request when setting response |
| 2026-04-23 | BUG/MINOR: mux-h1: Fix condition to send null-chunk for bodyless message |
| 2026-04-23 | BUG/MINOR: h2: Don't look at the exclusive bit for PRIORITY frame |
| 2026-04-23 | BUG/MEDIUM: tasks: Make sure we don't schedule a task already running |
| 2026-04-23 | BUG/MINOR: mux-h2: count a proto error when rejecting a stream on parsing error |
| 2026-04-23 | BUG/MEDIUM: mux-h2: ignore conn->owner when deciding if a connection is dead |
| 2026-04-23 | BUG/MEDIUM: peers: trash of expired entries delayed after fullresync |
| 2026-04-23 | BUG/MEDIUM: htx: Don't count delta twice when block value is replaced |
| 2026-04-23 | BUG/MEDIUM: htx: Fix function used to change part of a block value when defrag |
| 2026-04-23 | BUG/MINOR: log: Fix error message when using unavailable fetch in logfmt |
| 2026-04-23 | BUG/MINOR: ot: fixed wrong NULL check in flt_ot_parse_cfg_group() |
| 2026-04-23 | BUG/MINOR: hlua: fix use-after-free of HTTP reason string |
| 2026-04-23 | BUG/MEDIUM: mux-fcgi: prevent record-length truncation with large bufsize |
| 2026-04-23 | BUG/MINOR: sample: fix info leak in regsub when exp_replace fails |
| 2026-04-23 | BUG/MEDIUM: samples: Fix handling of SMP_T_METH samples |
| 2026-04-23 | BUG/MINOR: spoe: fix pointer arithmetic overflow in spoe_decode_buffer() |
| 2026-04-23 | BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals |
| 2026-04-23 | BUG/MINOR: peers: fix OOB heap write in dictionary cache update |
| 2026-04-23 | BUG/MINOR: hlua: fix stack overflow in httpclient headers conversion |
| 2026-04-23 | BUG: hlua: fix stack overflow in httpclient headers conversion |
| 2026-04-23 | BUG/MEDIUM: jwt: fix heap overflow in ECDSA signature DER conversion |
| 2026-04-23 | BUG/MEDIUM: payload: validate SNI name_len in req.ssl_sni |
| 2026-04-23 | BUG/MEDIUM: mux-h1: Disable 0-copy forwarding when draining the request |
| 2026-04-23 | BUG/MINOR: cfgcond: fail cleanly on missing argument for "feature" |
| 2026-04-23 | BUG/MINOR: cfgcond: always set the error string on openssl_version checks |
| 2026-04-23 | BUG/MINOR: cfgcond: properly set the error pointer on evaluation error |
| 2026-04-23 | BUG/MINOR: quic: fix documentation for transport params decoding |
| 2026-04-23 | BUG/MINOR: tcpcheck: Use tcpcheck context for expressions parsing |
| 2026-04-23 | BUG/MINOR: tcpcheck: Don't enable http_needed when parsing HTTP samples |
| 2026-04-23 | BUG/MINOR: tcpcheck: Remove unexpected flag on tcpcheck rules for httchck option |
| 2026-04-23 | BUG/MEDIUM: mux-h1: Don't set MSG_MORE on bodyless responses forwarded to client |
| 2026-04-23 | BUG/MEDIUM: map/cli: map/acl commands warn when accessed without admin level |
| 2026-04-23 | BUG/MEDIUM: ssl/ocsp: ocsp commands warn when accessed without admin level |
| 2026-04-23 | BUG/MEDIUM: ssl/cli: tls-keys commands warn when accessed without admin level |
| 2026-04-23 | BUG/MINOR: stconn: Always declare the SC created from healthchecks as a back SC |
| 2026-04-23 | BUG/MINOR: quic: close conn on packet reception with incompatible frame |
| 2026-04-23 | BUG/MINOR: http-ana: Only consider client abort for abortonclose |
| 2026-04-23 | Revert "BUG/MEDIUM: mux-h2: make sure to always report pending errors to the stream" |
| 2026-04-17 | BUG/MINOR: config: Properly test warnif_misplaced_* return values |
| 2026-04-17 | BUG/MINOR: qpack: fix 62-bit overflow and 1-byte OOB reads in decoding |
| 2026-04-17 | BUG/MINOR: sock: adjust accept() error messages for ENFILE and ENOMEM |
| 2026-03-19 | BUG/MEDIUM: h3: reject unaligned frames except DATA |
| 2026-03-19 | BUG/MAJOR: h3: check body size with content-length on empty FIN |
| 2026-03-19 | BUG/MINOR: mux-h2: properly ignore R bit in WINDOW_UPDATE increments |
| 2026-03-19 | BUG/MINOR: mux-h2: properly ignore R bit in GOAWAY stream ID |
| 2026-03-19 | BUG/MEDIUM: peers: enforce check on incoming table key type |
| 2026-03-19 | BUG/MINOR: mjson: make mystrtod() length-aware to prevent out-of-bounds reads |
| 2026-03-19 | BUG/MINOR: stream: Fix crash in stream dump if the current rule has no keyword |
| 2026-03-19 | BUG/MINOR: http-ana: Swap L7 buffer with request buffer by hand |
| 2026-03-19 | BUG/MINOR: h2/h3: Never insert partial headers/trailers in an HTX message |
| 2026-03-19 | BUG/MINOR: h2/h3: Only test number of trailers inserted in HTX message |
| 2026-03-19 | BUG/MINOR: sockpair: set FD_CLOEXEC on fd received via SCM_RIGHTS |
| 2026-03-19 | BUG/MINOR: mworker: fix typo &= instead of & in proc list serialization |
| 2026-03-19 | BUG/MINOR: memprof: avoid a small memory leak in "show profiling" |
| 2026-03-19 | BUG/MINOR: tcpcheck: Fix typo in error error message for `http-check expect` |
| 2026-03-19 | BUG/MINOR: mworker/cli: fix show proc pagination losing entries on resume |
| 2026-03-09 | BUG/MINOR: backend: Don't get proto to use for webscoket if there is no server |
| 2026-03-09 | BUG/MINOR: ssl-sample: Fix sample_conv_sha2() by checking EVP_Digest* failures |
| 2026-03-05 | BUG/MEDIUM: mux-fcgi: Use a safe loop to resume each stream eligible for sending |
| 2026-03-05 | BUG/MAJOR: resolvers: Properly lowered the names found in DNS response |
| 2026-03-05 | BUG/MAJOR: fcgi: Fix param decoding by properly checking its size |
| 2026-03-05 | BUG/MINOR: h1-htx: Be sure that H1 response version starts by "HTTP/" |
| 2026-03-05 | BUG/MEDIUM: qpack: correctly deal with too large decoded numbers |
| 2026-03-05 | BUG/MINOR: qpack: fix 1-byte OOB read in qpack_decode_fs_pfx() |
| 2026-03-05 | BUG/MAJOR: qpack: unchecked length passed to huffman decoder |
| 2026-03-05 | BUG/MEDIUM: hpack: correctly deal with too large decoded numbers |
| 2026-03-05 | BUG/MINOR: promex: fix server iteration when last server is deleted |
| 2026-02-26 | BUG/MEDIUM: mux-h2: make sure to always report pending errors to the stream |
| 2026-02-18 | BUG/MINOR: http-ana: Stop to wait for body on client error/abort |
| 2026-02-18 | BUG/MINOR: flt-trace: Properly compute length of the first DATA block |
| 2026-02-18 | BUG/MEDIUM: applet: Fix test on shut flags for legacy applets (v2) |
| 2026-02-18 | BUG/MEDIUM: mux-h1: Stop sending vi fast-forward for unexpected states |
| 2026-02-18 | BUG/MEDIUM: mux-h2/quic: Stop sending via fast-forward if stream is closed |
| 2026-02-18 | BUG/MEDIUM: h3: reject frontend CONNECT as currently not implemented |
| 2026-02-18 | BUG/MAJOR: Revert "MEDIUM: mux-quic: add BUG_ON if sending on locally closed QCS" |
| 2026-02-18 | BUG/MINOR: deviceatlas: set cache_size on hot-reloaded atlas instance |
| 2026-02-18 | BUG/MINOR: deviceatlas: fix deinit to only finalize when initialized |
| 2026-02-18 | BUG/MINOR: deviceatlas: fix resource leak on hot-reload compile failure |
| 2026-02-18 | BUG/MINOR: deviceatlas: fix double-checked locking race in checkinst |
| 2026-02-18 | BUG/MINOR: deviceatlas: fix cookie vlen using wrong length after extraction |
| 2026-02-18 | BUG/MINOR: deviceatlas: fix off-by-one in da_haproxy_conv() |
| 2026-02-18 | BUG/MEDIUM: deviceatlas: fix resource leaks on init error paths |
| 2026-02-18 | BUG/MINOR: deviceatlas: add NULL checks on strdup() results in config parsers |
| 2026-02-18 | BUG/MINOR: deviceatlas: add missing return on error in config parsers |
| 2026-02-12 | BUG/MAJOR: quic: reject invalid token |
| 2026-02-11 | BUG/MEDIUM: lb-chash: always properly initialize lb_nodes with dynamic servers |
| 2026-02-11 | BUG/MEDIUM: threads: Atomically set TH_FL_SLEEPING and clr FL_NOTIFIED |
| 2026-02-11 | BUG/MEDIUM: applet: Fix test on shut flags for legacy applets |
| 2026-02-11 | BUG/MAJOR: applet: Don't call I/O handler if the applet was shut |
| 2026-01-30 | BUG/MEDIUM: mux-h2: synchronize all conditions to create a new backend stream |
| 2026-01-30 | BUG/MINOR: sock-inet: ignore conntrack for transparent sockets on Linux |
| 2026-01-30 | BUG/MEDIUM: ssl: Don't resume session for check connections |
| 2026-01-30 | BUG/MEDIUM: ssl: Don't reuse TLS session if the connection's SNI differs |
| 2026-01-29 | BUG/MEDIUM: debug: only dump Lua state when panicking |
| 2026-01-29 | BUG/MINOR: config: check capture pool creations for failures |
| 2026-01-28 | BUG/MINOR: mworker/cli: fix show proc pagination using reload counter |
| 2026-01-28 | BUG/MINOR: mworker/cli: 'show proc' is limited by buffer size |
| 2026-01-27 | BUG/MINOR: ssl: fix error message of tune.ssl.certificate-compression |
| 2026-01-23 | BUG/MEDIUM: mux-h1: Skip UNUSED htx block when formating the start line |
| 2026-01-23 | BUG/MINOR: promex: Detach promex from the server on error dump its metrics dump |
| 2026-01-23 | BUG/MINOR: hlua: consume error object if ignored after a failing lua_pcall() |
| 2026-01-23 | BUG/MEDIUM: hlua: fix invalid lua_pcall() usage in hlua_traceback() |
| 2026-01-23 | BUG/MEDIUM: ssl: fix generate-certificates option when SNI greater than 64bytes |
| 2026-01-23 | BUG/MEDIUM: ssl: fix error path on generate-certificates |
| 2026-01-23 | BUG/MEDIUM: promex: server iteration may rely on stale server |
| 2026-01-23 | BUG/MINOR: cfgparse: fix "default" prefix parsing |
| 2026-01-23 | BUG/MINOR: proxy: free persist_rules |
| 2026-01-23 | BUG/MINOR: http_act: fix deinit performed on uninitialized lf_expr in release_http_map() |
| 2026-01-23 | BUG/MEDIUM: quic: fix ACK ECN frame parsing |
| 2026-01-09 | BUG/MINOR: cli/stick-tables: argument to "show table" is optional |
| 2026-01-09 | BUG/MINOR: cfgparse: wrong section name upon error |
| 2026-01-09 | BUG/MINOR: backend: inspect request not response buffer to check for TFO |
| 2026-01-09 | BUG/MINOR: backend: fix the conn_retries check for TFO |
| 2026-01-09 | BUG/MINOR: resolvers: ensure fair round robin iteration |
| 2026-01-09 | BUG/MEDIUM: resolvers: break an infinite loop in resolv_get_ip_from_response() |
| 2026-01-09 | BUG/MEDIUM: config: Use the mux protocol ALPN by default for listeners if forced |
| 2026-01-09 | BUG/MEDIUM: resolvers: Wake resolver task up whne unlinking a stream requester |
| 2026-01-09 | BUG/MEDIUM: resolvers: Accept to create resolution without hostname |
| 2026-01-09 | BUG/MEDIUM: resolvers: Make resolution owns its hostname_dn value |
| 2026-01-09 | BUG/MEDIUM: resolvers: Test for empty tree when getting a record from DNS answer |
| 2026-01-09 | BUG/MINOR: resolvers: Restore round-robin selection on records in DNS answers |
| 2026-01-09 | BUG/MEDIUM: resolvers: Properly cache do-resolv resolution |
| 2026-01-07 | BUG/MEDIUM: stconn: Don't report abort from SC if read0 was already received |
| 2026-01-07 | BUG/MEDIUM: http-ana: Properly detect client abort when forwarding response (v2) |
| 2025-12-22 | Revert "BUG/MEDIUM: cli: State the cli have no more data to deliver if it yields" |
| 2025-12-17 | BUG/MEDIUM: quic: Don't try to use hystart if not implemented |
| 2025-12-17 | BUG/MINOR: cfgparse-listen: update err_code for fatal error on proxy directive |
| 2025-12-17 | BUG/MINOR: quic: SSL counters not handled |
| 2025-12-15 | BUG/MINOR: quic: do not set first the default QUIC curves |
| 2025-12-12 | BUG/MEDIUM: http-ana: Don't close server connection on read0 in TUNNEL mode |
| 2025-12-12 | BUG/MINOR: ssl: Don't allow to set NULL sni |
| 2025-12-12 | BUG/MEDIUM: connection: fix "bc_settings_streams_limit" typo |
| 2025-12-12 | BUG/MINOR: jwt: Missing "case" in switch statement |
| 2025-12-12 | BUG/MEDIUM: cli: State the cli have no more data to deliver if it yields |
| 2025-12-12 | BUG/MEDIUM: applet: Fix conditions to detect spinning loop with the new API |
| 2025-12-12 | BUG/MINOR: http-ana: Reset analyse_exp date after 'wait-for-body' action |
| 2025-12-12 | BUG/MEDIUM: h1-htx: Don't set HTX_FL_EOM flag on 1xx informational messages |
| 2025-12-12 | BUG/MEDIUM: mux-quic: adjust wakeup behavior |
| 2025-12-12 | BUG/MINOR: mux-quic: ensure close-spread-time is properly applied |
| 2025-12-12 | BUG/MEDIUM: mux-quic: ensure Early-data header is set |
| 2025-12-12 | BUG/MINOR: ssl: remove dead code in ssl_sock_from_buf() |
| 2025-12-12 | BUG/MEDIUM: h1: prevent a crash on HTTP/2 upgrade |
| 2025-12-12 | BUG/MINOR: stick-tables: Fix return value for __stksess_kill() |
| 2025-12-12 | BUG/MEDIUM: stick-tables: Always return the good stksess from stktable_set_entry |
| 2025-12-12 | BUG/MINOR: quic: close connection on CID alloc failure |
| 2025-12-12 | BUG/MINOR: config: Limit "tune.maxpollevents" parameter to 1000000 |
| 2025-12-12 | BUG/MEDIUM: connection/ssl: also fix the ssl_sock_io_cb() regarding idle list |
| 2025-12-12 | BUG/MEDIUM: connection: do not reinsert a purgeable conn in idle list |
| 2025-12-12 | BUG/MEDIUM: mux-h2: make sure not to move a dead connection to idle |
| 2025-12-12 | BUG/MINOR: ssl: returns when SSL_CTX_new failed during init |
| 2025-12-12 | BUG/MINOR: init: Do not close previously created fd in stdio_quiet |
| 2025-12-12 | BUG/MEDIUM: ssl: Crash because of dangling ckch_store reference in a ckch instance |
| 2025-12-11 | BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards |
| 2025-10-27 | BUG/MEDIUM: cli: do not return ACKs one char at a time |
| 2025-10-27 | BUG/MINOR: stick-tables: properly index string-type keys |
| 2025-10-27 | BUG/MEDIUM: applet: Improve again spinning loops detection with the new API |
| 2025-10-27 | BUG/MEDIUM: build: limit excessive and counter-productive gcc-15 vectorization |
| 2025-10-27 | BUG/MAJOR: quic: use ncbmbuf for CRYPTO handling |
| 2025-10-27 | BUG/MEDIUM: h3: properly encode response after interim one in same buf |
| 2025-10-27 | BUG/MAJOR: quic: uninitialized quic_conn_closed struct members |
| 2025-10-27 | BUG/MINOR: quic: check applet_putchk() for 'show quic' first line |
| 2025-10-27 | BUG/MEDIUM: stick-tables: Don't forget to dec count on failure. |
| 2025-10-17 | BUG/MINOR mux-quic: apply correctly timeout on output pending data |
| 2025-10-17 | BUG/MINOR: quic: don't coalesce probing and ACK packet of same type |
| 2025-10-17 | BUG/MEDIUM: h3: handle interim response properly on FE side |
| 2025-10-17 | BUG/MINOR: h3: ensure that invalid status code are not encoded (FE side) |
| 2025-10-17 | BUG/MEDIUM: h3: do not overwrite interim with final response |
| 2025-10-17 | BUG/MINOR: quic: too short PADDING frame for too short packets |
| 2025-10-16 | BUG/MAJOR: lb-chash: fix key calculation when using default hash-key id |
| 2025-10-16 | BUG/MINOR: ssl: Free key_base from global_ssl structure during deinit |
| 2025-10-16 | BUG/MINOR: ssl: Free global_ssl structure contents during deinit |
| 2025-10-14 | BUG/MINOR: sink: retry attempt for sft server may never occur |
| 2025-10-10 | BUG/MEDIUM: apppet: Improve spinning loop detection with the new API |
| 2025-10-10 | BUG/MINOR: ssl: always clear the remains of the first hello for the second one |
| 2025-10-10 | BUG/MEDIUM: ssl: take care of second client hello |
| 2025-10-10 | BUG/MINOr: hlua: Fix receive from HTTP applet by properly accounting data |
| 2025-10-02 | BUG/MINOR: h3: forbid 'Z' as well in header field names checks |
| 2025-10-02 | BUG/MINOR: h2: forbid 'Z' as well in header field names checks |
| 2025-10-02 | BUG/CRITICAL: mjson: fix possible DoS when parsing numbers |
| 2025-10-01 | BUG/MEDIUM: ssl: ca-file directory mode must read every certificates of a file |
| 2025-10-01 | BUG/MINOR: pattern: Fix pattern lookup for map with opt@ prefix |
| 2025-10-01 | BUG/MINOR: pattern: Properly flag virtual maps as using samples |
| 2025-10-01 | BUG/MEDIUM: stick-tables: Don't let table_process_entry() handle refcnt |
| 2025-10-01 | BUG/MINOR: server: Update healthcheck when server settings are changed via CLI |
| 2025-10-01 | BUG/MEDIUM: server: Use sni as pool connection name for SSL server only |
| 2025-10-01 | BUG/MEDIUM: ring: invert the length check to avoid an int overflow |
| 2025-10-01 | BUG/MINOR: resolvers: always normalize FQDN from response |
| 2025-10-01 | BUG/MINOR: ocsp: Crash when updating CA during ocsp updates |
| 2025-10-01 | BUG/MAJOR: stream: Force channel analysis on successful synchronous send |
| 2025-10-01 | BUG/MAJOR: stream: Remove READ/WRITE events on channels after analysers eval |
| 2025-10-01 | BUG/MINOR: activity: fix reporting of task latency |
| 2025-10-01 | BUG/MEDIUM: ssl: create the mux immediately on early data |
| 2025-10-01 | BUG/MEDIUM: h1: Allow reception if we have early data |
| 2025-10-01 | BUG/MEDIUM: checks: fix ALPN inheritance from server |
| 2025-10-01 | BUG/MINOR: cpu_topo: work around a small bug in musl's CPU_ISSET() |
| 2025-10-01 | BUG/MINOR: log: fix potential memory leak upon error in add_to_logformat_list() |
| 2025-10-01 | BUG/MINOR: connection: streamline conn detach from lists |
| 2025-10-01 | BUG/MEDIUM: conn: fix UAF on connection after reversal on edge |
| 2025-10-01 | BUG/MINOR: haproxy: be sure not to quit too early on soft stop |
| 2025-10-01 | BUG/MINOR: quic: fix padding issue on INITIAL retransmit |
| 2025-10-01 | BUG/MINOR: quic: fix room check if padding requested |
| 2025-10-01 | BUG/MINOR: quic: ignore AGAIN ncbuf err when parsing CRYPTO frames |
| 2025-10-01 | BUG/MINOR: tools: Add OOM check for malloc() in indent_msg() |
| 2025-10-01 | BUG/MINOR: compression: Add OOM check for calloc() in parse_compression_options() |
| 2025-10-01 | BUG/MINOR: cfgparse: Add OOM check for calloc() in cfg_parse_listen() |
| 2025-10-01 | BUG/MINOR: acl: Add OOM check for calloc() in smp_fetch_acl_parse() |
| 2025-10-01 | BUG/MINOR: log: Add OOM checks for calloc() and malloc() in logformat parser and dup_logger() |
| 2025-10-01 | BUG/MINOR: halog: Add OOM checks for calloc() in filter_count_srv_status() and filter_count_url() |
| 2025-10-01 | BUG/MEDIUM: server: Duplicate healthcheck's alpn inherited from default server |
| 2025-10-01 | BUG/MAJOR: mux-quic: fix crash on reload during emission |
| 2025-10-01 | BUG/MEDIUM: quic: CRYPTO frame freeing without eb_delete() |
| 2025-10-01 | BUG/MINOR: server: decrement session idle_conns on del server |
| 2025-10-01 | BUG/MINOR: connection: remove extra session_unown_conn() on reverse |
| 2025-10-01 | BUG/MINOR: connection: rearrange union list members |
| 2025-10-01 | BUG/MINOR: acl: set arg_list->kw to aclkw->kw string literal if aclkw is found |
| 2025-10-01 | BUG/MINOR: mux-quic: trace with non initialized qcc |
| 2025-10-01 | BUG/MINOR: quic: reorder fragmented RX CRYPTO frames by their offsets |
| 2025-10-01 | BUG/MEDIUM: Remove sync sends from streams to applets |
| 2025-10-01 | BUG/MEDIUM: stconn: Fix conditions to know an applet can get data from stream |
| 2025-10-01 | BUG/MAJOR: quic: fix INITIAL padding with probing packet only |
| 2025-10-01 | BUG/MINOR: quic: do not emit probe data if CONNECTION_CLOSE requested |
| 2025-10-01 | BUG/MINOR: mux-h1: fix wrong lock label |
| 2025-10-01 | BUG/MEDIUM: http-client: Test HTX_FL_EOM flag before commiting the HTX buffer |
| 2025-10-01 | BUG/MINOR: init: Initialize random seed earlier in the init process |
| 2025-10-01 | BUG/MEDIUM: ssl: fix build with AWS-LC |
| 2025-10-01 | BUG/MEDIUM: ssl: Fix 0rtt to the server |
| 2025-10-01 | BUG/MINOR: stick-table: cap sticky counter idx with tune.nb_stk_ctr instead of MAX_SESS_STKCTR |
| 2025-10-01 | BUG/MEDIUM: threads: Disable the workaround to load libgcc_s on macOS |
| 2025-10-01 | BUG/MINOR: halog: exit with error when some output filters are set simultaneosly |
| 2025-10-01 | BUG/MINOR: applet: Don't trigger BUG_ON if the tid is not on appctx init |
| 2025-10-01 | BUG/MINOR: quic: Wrong source address use on FreeBSD |
| 2025-10-01 | BUG/MEDIUM: http-client: Notify applet has more data to deliver until the EOM |
| 2025-10-01 | BUG/MEDIUM: http-client: Drain the request if an early response is received |
| 2025-10-01 | BUG/MINOR: http-client: Reject any 101-switching-protocols response |
| 2025-10-01 | BUG/MINOR: http-client: Ignore 1XX interim responses in non-HTX mode |
| 2025-10-01 | BUG/MEDIUM: http-client: Ask for more room when request data cannot be xferred |
| 2025-10-01 | BUG/MEDIUM: http-client: Properly inc input data when HTX blocks are xferred |
| 2025-10-01 | BUG/MEDIUM: http-client: Don't wake http-client applet if nothing was xferred |
| 2025-10-01 | BUG/MINOR: listener: really assign distinct IDs to shards |
| 2025-10-01 | BUG/MINOR: hlua: take default-path into account with lua-load-per-thread |
| 2025-10-01 | BUG/MEDIUM: logs: fix sess_build_logline_orig() recursion with options |
| 2025-10-01 | BUG/MEDIUM: dns: Reset reconnect tempo when connection is finally established |
| 2025-10-01 | BUG/MEDIUM: hlua: Report to SC when output data are blocked on a lua socket |
| 2025-10-01 | BUG/MEDIUM: hlua: Report to SC when data were consumed on a lua socket |
| 2025-10-01 | BUG/MINOR: hlua: Skip headers when a receive is performed on an HTTP applet |
| 2025-10-01 | BUG/MINOR: httpclient: wrongly named httpproxy flag |
| 2025-10-01 | BUG/MINOR: jwt: Copy input and parameters in dedicated buffers in jwt_verify converter |
| 2025-10-01 | BUG/MEDIUM: mux-h2: Properly handle connection error during preface sending |
| 2025-10-01 | BUG/MEDIUM: hlua: Forbid any L6/L7 sample fetche functions from lua services |
| 2025-10-01 | BUG/MINOR: quic: wrong QUIC_FT_CONNECTION_CLOSE(0x1c) frame encoding |
| 2025-10-01 | BUG/MINOR: log: Be able to use %ID alias at anytime of the stream's evaluation |
| 2025-10-01 | BUG/MINOR: stream: Avoid recursive evaluation for unique-id based on itself |
| 2025-10-01 | BUG/MINOR: mux-quic/h3: properly handle too low peer fctl initial stream |
| 2025-10-01 | BUG/MEDIUM: h1/h2/h3: reject forbidden chars in the Host header field |
| 2025-10-01 | BUG/MEDIUM: h2/h3: reject some forbidden chars in :authority before reassembly |
| 2025-08-05 | BUG/MEDIUM: hlua_fcn: ensure systematic watcher cleanup for server list iterator |
| 2025-08-05 | BUG/MINOR: hlua_fcn: restore server pairs iterator pointer consistency |
| 2025-07-22 | BUG/MEDIUM: ssl/clienthello: ECDSA with ssl-max-ver TLSv1.2 and no ECDSA ciphers |
| 2025-06-17 | BUG/MEDIUM: check: Set SOCKERR by default when a connection error is reported |
| 2025-06-17 | BUG/MEDIUM: cli: Don't consume data if outbuf is full or not available |
| 2025-06-17 | BUG/MINOR: config/server: reject QUIC addresses |
| 2025-06-17 | BUG/MINIR: h1: Fix doc of 'accept-unsafe-...-request' about URI parsing |
| 2025-06-17 | BUG/MEDIUM: fd: Use the provided tgid in fd_insert() to get tgroup_info |
| 2025-06-17 | BUG/MINOR: quic: Missing SSL session object freeing |
| 2025-06-17 | BUG/MEDIUM: check: Requeue healthchecks on I/O events to handle check timeout |
| 2025-06-02 | BUG/MINOR: quic: ensure cwnd limits are always enforced |
| 2025-06-02 | BUG/MINOR: mux-quic: do not decode if conn in error |
| 2025-06-02 | BUG/MEDIUM: peers: also limit the number of incoming updates |
| 2025-06-02 | BUG/MEDIUM: httpclient: Throw an error if an lua httpclient instance is reused |
| 2025-05-28 | BUG/MINOR: limits: compute_ideal_maxconn: don't cap remain if fd_hard_limit=0 |
| 2025-05-27 | BUG/MEDIUM: hlua: Fix getline() for TCP applets to work with applet's buffers |
| 2025-05-27 | BUG/MEDIUM: hlua: Properly detect shudowns for TCP applets based on the new API |
| 2025-05-27 | BUG/MINOR: h3: Set HTX flags corresponding to the scheme found in the request |
| 2025-05-27 | BUG/MAJOR: cache: Crash because of wrong cache entry deleted |
| 2025-05-27 | BUG/MEDIUM: server: fix potential null-deref after previous fix |
| 2025-05-27 | BUG/MEDIUM: server: fix crash after duplicate GUID insertion |
| 2025-05-20 | BUG/MINOR: mux-h2: Reset streams with NO_ERROR code if full response was already sent |
| 2025-05-20 | BUG/MEDIUM: stconn: Disable 0-copy forwarding for filters altering the payload |
| 2025-05-20 | BUG/MINOR: h3: don't insert more than one Host header |
| 2025-05-20 | BUG/MINOR: sink: detect and warn when using "send-proxy" options with ring servers |
| 2025-05-20 | BUG/MINOR: hlua: Fix Channel:data() and Channel:line() to respect documentation |
| 2025-05-20 | BUG/MINOR: threads: fix soft-stop without multithreading support |
| 2025-05-20 | BUG/MINOR: ssl/ckch: always free() the previous entry during parsing |
| 2025-05-20 | BUG/MINOR: cli: fix too many args detection for commands |
| 2025-05-20 | BUG/MEDIUM: peers: hold the refcnt until updating ts->seen |
| 2025-05-20 | BUG/MINOR: quic: reject invalid max_udp_payload size |
| 2025-05-20 | BUG/MINOR: quic: fix TP reject on invalid max-ack-delay |
| 2025-05-20 | BUG/MINOR: quic: use proper error code on invalid received TP value |
| 2025-05-20 | BUG/MINOR: quic: reject retry_source_cid TP on server side |
| 2025-05-20 | BUG/MINOR: quic: use proper error code on invalid server TP |
| 2025-05-20 | BUG/MINOR: quic: use proper error code on missing CID in TPs |
| 2025-05-20 | BUG/MINOR: proxy: only use proxy_inc_fe_cum_sess_ver_ctr() with frontends |
| 2025-05-20 | BUG/MINOR: mux-h1: Fix trace message in h1_detroy() to not relay on connection |
| 2025-05-20 | BUG/MINOR: mux-h1: Don't pretend connection was released for TCP>H1>H2 upgrade |
| 2025-05-20 | BUG/MINOR: dns: prevent ds accumulation within dss |
| 2025-05-20 | BUG/MINOR: dns: add tempo between 2 connection attempts for dns servers |
| 2025-05-20 | BUG/MAJOR: listeners: transfer connection accounting when switching listeners |
| 2025-05-20 | BUG/MINOR: cli: Issue an error when too many args are passed for a command |
| 2025-04-30 | BUG/MEDIUM: mux-fcgi: Try to fully fill demux buffer on receive if not empty |
| 2025-04-22 | BUG/MINOR: rhttp: ensure GOAWAY can be emitted after reversal |
| 2025-04-22 | BUG/MINOR: rhttp: fix reconnect if timeout connect unset |
| 2025-04-22 | BUG/MINOR: mux-h2: prevent past scheduling with idle connections |
| 2025-04-22 | BUG/MINOR debug: fix !USE_THREAD_DUMP in ha_thread_dump_fill() |
| 2025-04-22 | DEBUG: epoll: store and compare the FD's generation count with reported event |
| 2025-04-22 | DEBUG: fd: add a counter of takeovers of an FD since it was last opened |
| 2025-04-22 | BUG/MEDIUM: mux-fcgi: Properly handle read0 on partial records |
| 2025-04-22 | BUG/MINOR: stktable: invalid use of stkctr_set_entry() with mixed table types |
| 2025-04-22 | DEBUG: stream: Add debug counters to track some client/server aborts |
| 2025-04-22 | BUG/MINOR: quic: do not crash on CRYPTO ncbuf alloc failure |
| 2025-04-17 | BUG/MEDIUM: hlua: fix hlua_applet_{http,tcp}_fct() yield regression (lost data) |
| 2025-04-17 | BUG/MINOR: h3: reject request URI with invalid characters |
| 2025-04-17 | BUG/MINOR: h3: reject invalid :path in request |
| 2025-04-17 | BUG/MINOR: h3: filter upgrade connection header |
| 2025-04-17 | BUG/MEDIUM: h3: trim whitespaces in header value prior to QPACK encoding |
| 2025-04-17 | BUG/MEDIUM: h3: trim whitespaces when parsing headers value |
| 2025-04-16 | BUG/MINOR: sink: add tempo between 2 connection attempts for sft servers (2) |
| 2025-04-15 | BUG/MEDIUM: http-ana: Report 502 from req analyzer only during rsp forwarding |
| 2025-04-15 | BUG/MINOR: http-ana: Properly detect client abort when forwarding the response |
| 2025-04-15 | BUG/MINOR: hlua: fix invalid errmsg use in hlua_init() |
| 2025-04-15 | BUG/MINOR: backend: do not use the source port when hashing clientip |
| 2025-04-15 | BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refs |
| 2025-04-15 | BUG/MINOR: log: fix CBOR encoding with LOG_VARTEXT_START() + lf_encode_chunk() |
| 2025-04-15 | BUG/MINOR: hlua_fcn: fix potential UAF with Queue:pop_wait() |
| 2025-04-15 | BUG/MEDIUM: stream: Fix a possible freeze during a forced shut on a stream |
| 2025-04-15 | BUG/MEDIUM: backend: fix reuse with set-dst/set-dst-port |
| 2025-04-15 | BUG/MINOR: backend: do not overwrite srv dst address on reuse |
| 2025-04-15 | BUG/MINOR: rhttp: fix incorrect dst/dst_port values |
| 2025-04-15 | BUG/MINOR: log: fix gcc warn about truncating NUL terminator while init char arrays |
| 2025-04-15 | BUG/MINOR: mux-quic: remove extra BUG_ON() in _qcc_send_stream() |
| 2025-04-15 | BUG/MEDIUM: mux-quic: fix crash on RS/SS emission if already close local |
| 2025-04-03 | BUG/MEDIUM: peers: prevent learning expiration too far in futur from unsync node |
| 2025-04-03 | BUG/MINOR: peers: fix expire learned from a peer not converted from ms to ticks |
| 2025-03-20 | BUG/MEDIUM: stream: don't use localtime in dumps from a signal handler |
| 2025-03-20 | BUG/MEDIUM: hlua/cli: fix cli applet UAF in hlua_applet_wakeup() |
| 2025-03-20 | BUG/MINOR: http-check: Don't pretend a C-L heeader is set before adding it |
| 2025-03-20 | BUG/MINOR: ssl_crtlist: handle a possible strdup() failure |
| 2025-03-20 | BUG/MINOR: namespace: handle a possible strdup() failure |
| 2025-03-18 | BUG/MINOR: stats: fix capabilities and hide settings for some generic metrics |
| 2025-03-18 | BUG/MINOR: server: dont return immediately from parse_server() when skipping checks |
| 2025-03-18 | BUG/MINOR: cfgparse/peers: properly handle ignored local peer case |
| 2025-03-18 | BUG/MINOR: cfgparse/peers: fix inconsistent check for missing peer server |
| 2025-03-18 | BUG/MEIDUM: startup: return to initial cwd only after check_config_validity() |
| 2025-03-18 | BUG/MINOR: log: set proper smp size for balance log-hash |
| 2025-03-18 | BUG/MINOR: server: check for either proxy-protocol v1 or v2 to send hedaer |
| 2025-03-18 | BUG/MINOR: h3: do not report transfer as aborted on preemptive response |
| 2025-03-18 | BUG/MINOR: h2: always trim leading and trailing LWS in header values |
| 2025-03-18 | BUG/MEDIUM: stream: use non-blocking freq_ctr calls from the stream dumper |
| 2025-03-18 | BUG/MEDIUM: stream: never allocate connection addresses from signal handler |
| 2025-03-18 | BUG/MINOR: mux-h1: always make sure h1s->sd exists in h1_dump_h1s_info() |
| 2025-03-18 | BUG/MINOR: sink: add tempo between 2 connection attempts for sft servers |
| 2025-03-18 | BUG/MINOR: cfgparse: fix NULL ptr dereference in cfg_parse_peers |
| 2025-03-18 | BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer |
| 2025-03-18 | BUG/MINOR: flt-trace: Support only one name option |
| 2025-03-18 | BUG/MINOR: auth: Fix a leak on error path when parsing user's groups |
| 2025-03-18 | BUG/MINOR: config/userlist: Support one 'users' option for 'group' directive |
| 2025-03-18 | BUG/MINOR: cli: Fix a possible infinite loop in _getsocks() |
| 2025-03-18 | BUG/MINOR: cli: Fix memory leak on error for _getsocks command |
| 2025-03-18 | BUG/MINOR: cli: Don't set SE flags from the cli applet |
| 2025-03-18 | BUG/MINOR: tcp-rules: Don't forward close during tcp-response content rules eval |
| 2025-03-18 | BUG/MINOR: mux-h2: Properly handle full or truncated HTX messages on shut |
| 2025-03-18 | BUG/MINOR: mux-quic: prevent crash after MUX init failure |
| 2025-03-18 | BUG/MINOR: quic: prevent crash on conn access after MUX init failure |
| 2025-03-18 | BUG/MINOR: fcgi: Don't set the status to 302 if it is already set |
| 2025-03-18 | BUG/MEDIUM: filters: Handle filters registered on data with no payload callback |
| 2025-03-18 | BUG/MINOR: cli: Wait for the last ACK when FDs are xferred from the old worker |
| 2025-03-18 | BUG/MINOR: ssl/cli: "show ssl crt-list" lacks sigals |
| 2025-03-18 | BUG/MINOR: ssl/cli: "show ssl crt-list" lacks client-sigals |
| 2025-03-18 | BUG/MINOR: quic: fix CRYPTO payload size calcul for encoding |
| 2025-03-18 | BUG/MINOR: quic: reserve length field for long header encoding |
| 2025-03-18 | BUG/MEDIUM: debug: close a possible race between thread dump and panic() |
| 2025-03-14 | BUG/MINOR: server: fix the "server-template" prefix memory leak |
| 2025-03-13 | BUG/MEDIUM: thread: use pthread_self() not ha_pthread[tid] in set_affinity |
| 2025-03-13 | BUG/MINOR: cfgparse-tcp: relax namespace bind check |
| 2025-03-13 | BUG/MINOR: stream: fix age calculation in "show sess" output |
| 2025-03-13 | BUG/MEDIUM: server: properly initialize PROXY v2 TLVs |
| 2025-03-13 | BUG/MEDIUM: htx: wrong count computation in htx_xfer_blks() |
| 2025-03-13 | BUG/MEDIUM: fd: mark FD transferred to another process as FD_CLONED |
| 2025-02-19 | BUG/MEDIUM: spoe: Don't wakeup idle applets in loop during stopping |
| 2025-02-19 | BUG/MINOR: spoe: Allow applet creation when closing the last one during stopping |
| 2025-02-19 | BUG/MINOR: spoe: Check the shared waiting queue to shut applets during stopping |
| 2025-02-19 | BUG/MINOR: mux-quic: handle closure of uni-stream |
| 2025-02-19 | BUG/MEDIUM: mux-quic: do not attach on already closed stream |
| 2025-02-11 | BUG/MEDIUM: ssl: chosing correct certificate using RSA-PSS with TLSv1.3 |
| 2025-01-28 | BUG/MINOR: stream: Properly handle "on-marked-up shutdown-backup-sessions" |
| 2025-01-28 | BUG/MINOR: ssl: put ssl_sock_load_ca under SSL_NO_GENERATE_CERTIFICATES |
| 2025-01-28 | BUG/MINOR: quic: do not increase congestion window if app limited |
| 2025-01-23 | BUG/MEDIUM: mux-h1: Properly close H1C if an error is reported before sending data |
| 2025-01-23 | MINOR: quic: Add a BUG_ON() on quic_tx_packet refcount |
| 2025-01-23 | BUG/MINOR: quic: ensure a detached coalesced packet can't access its neighbours |
| 2025-01-23 | BUG/MINOR: init: set HAPROXY_STARTUP_VERSION from the variable, not the macro |
| 2025-01-23 | BUG/MAJOR: log/sink: possible sink collision in sink_new_from_srv() |
| 2025-01-23 | BUG/MAJOR: quic: reject too large CRYPTO frames |
| 2025-01-23 | BUG/MEDIUM: promex: Use right context pointers to dump backends extra-counters |
| 2025-01-23 | BUG/MEDIUM: stktable: fix missing lock on some table converters |
| 2025-01-23 | BUG/MINOR: quic: reject NEW_TOKEN frames from clients |
| 2025-01-23 | BUG/MINOR: stktable: fix big-endian compatiblity in smp_to_stkey() |
| 2025-01-09 | MEDIUM: debug: add match counters for BUG_ON/WARN_ON/CHECK_IF |
| 2025-01-09 | CLEANUP: debug: make the BUG_ON() macros check the condition in the outer one |
| 2025-01-09 | BUG/MEDIUM: h1-htx: Properly handle bodyless messages |
| 2025-01-09 | BUG/MEDIUM: promex/resolvers: Don't dump metrics if no nameserver is defined |
| 2025-01-09 | BUG/MINOR: stats: fix segfault caused by uninitialized value in "show schema json" |
| 2025-01-09 | BUG/MEDIUM: queue: Make process_srv_queue return the number of streams |
| 2025-01-09 | BUG/MINOR: h2/rhttp: fix HTTP2 conn counters on reverse |
| 2025-01-09 | BUG/MEDIUM: queues: Do not use pendconn_grab_from_px(). |
| 2025-01-09 | BUG/MEDIUM: queues: Make sure we call process_srv_queue() when leaving |
| 2025-01-09 | BUG/MEDIUM: stconn: Only consider I/O timers to update stream's expiration date |
| 2025-01-09 | BUG/MINOR: cli: cli_snd_buf: preserve \r\n for payload lines |
| 2025-01-09 | BUG/MEDIUM: clock: make sure now_ms cannot be TICK_ETERNITY |
| 2025-01-09 | BUG/MEDIUM: stats/server: use watcher to track server during stats dump |
| 2025-01-09 | BUG/MINOR: stats: decrement srv refcount on stats-file release |
| 2024-12-12 | BUG/MEDIUM: stconn: Don't forward shut for SC in connecting state |
| 2024-12-11 | BUG/MINOR: server-state: Fix expiration date of srvrq_check tasks |
| 2024-12-11 | BUG/MINOR: quic: remove startup alert if conn socket-owner unsupported |
| 2024-12-11 | BUG/MINOR: signal: register default handler for SIGINT in signal_init() |
| 2024-12-11 | BUG/MINOR: h1-htx: Use default reason if not set when formatting the response |
| 2024-12-11 | BUG/MEDIUM: http-ana: Reset request flag about data sent to perform a L7 retry |
| 2024-12-11 | BUG/MEDIUM: event_hdl: fix uninitialized value in async mode when no data is provided |
| 2024-12-11 | BUG/MINOR: log: fix lf_text() behavior with empty string |
| 2024-11-27 | BUG/MEDIUM: sock: Remove FD_POLL_HUP during connect() if FD_POLL_ERR is not set |
| 2024-11-27 | BUG/MEDIUM: http-ana: Don't release too early the L7 buffer |
| 2024-11-27 | BUG/MAJOR: quic: fix wrong packet building due to already acked frames |
| 2024-11-22 | BUG/MAJOR: mux-h1: Properly handle wrapping on obuf when dumping the first-line |
| 2024-11-22 | BUG/MEDIUM: pools/memprofile: always clean stale pool info on pool_destroy() |
| 2024-11-22 | BUG/MINOR: activity/memprofile: reinitialize the free calls on DSO summary |
| 2024-11-22 | BUG/MEDIUM: wdt: fix the stuck detection for warnings |
| 2024-11-22 | BUG/MEDIUM: debug: don't set the STUCK flag from debug_handler() |
| 2024-11-22 | BUG/MEDIUM: h3: Increase max number of headers when sending headers |
| 2024-11-22 | BUG/MEDIUM: h3: Properly limit the number of headers received |
| 2024-11-22 | BUG/MEDIUM: mux-h2: Check the number of headers in HEADERS frame after decoding |
| 2024-11-22 | BUG/MEDIUM: mux-h2: Increase max number of headers when encoding HEADERS frames |
| 2024-11-22 | BUG/MINOR: http-ana: Adjust the server status before the L7 retries |
| 2024-11-22 | BUG/MINOR: http_ana: Report -1 for %Tr for invalid response only |
| 2024-11-22 | BUG/MINOR: peers: make sure to always apply offsets to now_ms in expiration |
| 2024-11-22 | BUG/MINOR: mux_quic: make sure to always apply offsets to now_ms in expiration |
| 2024-11-22 | BUG/MEDIUM: mailers: make sure to always apply offsets to now_ms in expiration |
| 2024-11-22 | BUG/MEDIUM: checks: make sure to always apply offsets to now_ms in expiration |
| 2024-11-22 | BUG/MINOR: Don't report early srv aborts on request forwarding in DONE state |
| 2024-11-22 | BUG/MEDIUM: mux-h2: Don't send RST_STREAM frame for streams with no ID |
| 2024-11-13 | BUG/MEDIUM: resolvers: Insert a non-executed resulution in front of the wait list |
| 2024-11-13 | BUG/MINOR: cli: don't show sockpairs in HAPROXY_CLI and HAPROXY_MASTER_CLI |
| 2024-11-13 | BUG/MEDIUM: quic: prevent crash due to CRYPTO parsing error |
| 2024-11-13 | BUG/MINOR: guid/server: ensure thread-safety on GUID insert/delete |
| 2024-11-08 | BUG/MINOR: quic: repeat packet parsing to deal with fragmented CRYPTO |
| 2024-11-08 | BUG/MEDIUM: quic: support wait-for-handshake |
| 2024-11-08 | BUG/MINOR: stream: unblock stream on wait-for-handshake completion |
| 2024-11-08 | BUG/MEDIUM: pattern: prevent uninitialized reads in pat_match_{str,beg} |
| 2024-11-06 | DEBUG: wdt: add a stats counter "BlockedTrafficWarnings" in show info |
| 2024-11-06 | DEBUG: wdt: make the blocked traffic warning delay configurable |
| 2024-11-06 | DEBUG: cli: make it possible for "debug dev loop" to trigger warnings |
| 2024-11-06 | DEBUG: wdt: better detect apparently locked up threads and warn about them |
| 2024-11-06 | BUG/MINOR: stats: Fix the name for the total number of streams created |
| 2024-11-06 | BUG/MINOR: quic: fix malformed probing packet building |
| 2024-11-06 | BUG/MEDIUM: promex: Fix dump of extra counters |
| 2024-11-06 | BUG/MINOR: http-ana: Report internal error if an action yields on a final eval |
| 2024-11-06 | BUG/MEDIUM: mux-h1: Fix how timeouts are applied on H1 connections |
| 2024-11-06 | BUG/MINOR: ssl/cli: 'set ssl cert' does not check the transaction name correctly |
| 2024-11-06 | BUG/MINOR: trace: stop rewriting argv with -dt |
| 2024-10-24 | BUG/MEDIUM: server: fix race on servers_list during server deletion |
| 2024-10-24 | BUG/MINOR: stconn: Don't disable 0-copy FF if EOS was reported on consumer side |
| 2024-10-24 | BUG/MINOR: http-ana: Fix wrong client abort reports during responses forwarding |
| 2024-10-24 | BUG/MEDIUM: stconn: Report blocked send if sends are blocked by an error |
| 2024-10-24 | BUG/MINOR: server: fix dynamic server leak with check on failed init |
| 2024-10-23 | BUG/MEDIUM: connection/http-reuse: fix address collision on unhandled address families |
| 2024-10-23 | BUG/MEDIUM: mux-h2: Remove H2S from send list if data are sent via 0-copy FF |
| 2024-10-23 | BUG/MEDIUM: stats-html: Never dump more data than expected during 0-copy FF |
| 2024-10-23 | BUG/MINOR: mux-quic: do not close STREAM with empty FIN if no data sent |
| 2024-10-23 | BUG/MINOR: mworker: fix mworker-max-reloads parser |
| 2024-10-23 | BUG/MEDIUM: quic: avoid freezing 0RTT connections |
| 2024-10-23 | BUG/MINOR: quic: avoid leaking post handshake frames |
| 2024-10-23 | BUG/MAJOR: filters/htx: Add a flag to state the payload is altered by a filter |
| 2024-10-23 | BUG/MEDIUM: stconn: Check FF data of SC to perform a shutdown in sc_notify() |
| 2024-10-23 | BUG/MINOR: http-ana: Don't report a server abort if response payload is invalid |
| 2024-10-23 | BUG/MEDIUM: stconn: Wait iobuf is empty to shut SE down during a check send |
| 2024-10-23 | BUG/MINOR: httpclient: return NULL when no proxy available during httpclient_new() |
| 2024-10-23 | BUG/MEDIUM: queue: make sure never to queue when there's no more served conns |
| 2024-10-23 | BUG/MEDIUM: mux-quic: ensure timeout server is active for short requests |
| 2024-10-23 | BUG/MEDIUM: hlua: properly handle sample func errors in hlua_run_sample_{fetch,conv}() |
| 2024-10-23 | BUG/MEDIUM: hlua: make hlua_ctx_renew() safe |
| 2024-10-21 | BUG/MEDIUM: server: server stuck in maintenance after FQDN change |
| 2024-10-02 | BUG/MINOR: http-ana: Disable fast-fwd for unfinished req waiting for upgrade |
| 2024-10-02 | BUG/MINOR: mux-h1: Fix condition to set EOI on SE during zero-copy forwarding |
| 2024-10-02 | BUG/MEDIUM: queue: always dequeue the backend when redistributing the last server |
| 2024-10-02 | BUG/MINOR: queue: make sure that maintenance redispatches server queue |
| 2024-10-02 | BUG/MEDIUM: stream: make stream_shutdown() async-safe |
| 2024-10-01 | BUG/MINOR: cfgparse-global: fix allowed args number for setenv |
| 2024-10-01 | BUG/MINOR: server: make sure the HMAINT state is part of MAINT |
| 2024-10-01 | BUG/MEDIUM: cli: Deadlock when setting frontend maxconn |
| 2024-10-01 | BUG/MEDIUM: cli: Be sure to catch immediate client abort |
| 2024-10-01 | BUG/MINOR: mux-quic: report glitches to session |
| 2024-10-01 | BUG/MEDIUM: mux-h1/mux-h2: Reject upgrades with payload on H2 side only |
| 2024-10-01 | BUG/MINOR: h2: reject extended connect for h2c protocol |
| 2024-10-01 | BUG/MINOR: h1: do not forward h2c upgrade header token |
| 2024-09-19 | BUG/MINOR: quic: prevent freeze after early QCS closure |
| 2024-09-19 | BUG/MEDIUM: quic: handle retransmit for standalone FIN STREAM |
| 2024-09-18 | BUG/MINOR: cfgparse-listen: fix option httpslog override warning message |
| 2024-09-17 | BUG/MEDIUM: promex: Wait to have the request before sending the response |
| 2024-09-17 | BUG/MEDIUM: cache/stats: Wait to have the request before sending the response |
| 2024-09-17 | BUG/MEDIUM: sc_strm/applet: Wake applet after a successfull synchronous send |
| 2024-09-17 | BUG/MINOR: peers: local entries updates may not be advertised after resync |
| 2024-09-17 | BUG/MEDIUM: queue: implement a flag to check for the dequeuing |
| 2024-09-17 | BUG/MINOR: clock: validate that now_offset still applies to the current date |
| 2024-09-17 | BUG/MINOR: clock: make time jump corrections a bit more accurate |
| 2024-09-17 | BUG/MINOR: polling: fix time reporting when using busy polling |
| 2024-09-10 | BUG/MINOR: pattern: do not leave a leading comma on "set" error messages |
| 2024-09-09 | BUG/MINOR: h1-htx: Don't flag response as bodyless when a tunnel is established |
| 2024-09-09 | BUG/MAJOR: mux-h1: Wake SC to perform 0-copy forwarding in CLOSING state |
| 2024-09-09 | BUG/MEDIUM: pattern: prevent UAF on reused pattern expr |
| 2024-09-09 | BUG/MINOR: pattern: prevent const sample from being tampered in pat_match_beg() |
| 2024-09-09 | BUG/MEDIUM: clock: detect and cover jumps during execution |
| 2024-09-06 | BUG/MINOR: quic: Too short datagram during packet building failures (aws-lc only) |
| 2024-09-05 | BUG/MINOR: quic: Crash from trace dumping SSL eary data status (AWS-LC) |
| 2024-09-05 | BUG/MEDIUM: quic: always validate sender address on 0-RTT |
| 2024-09-05 | BUG/MINOR: quic: Missing incrementation in NEW_TOKEN frame builder |
| 2024-09-04 | BUG/MEDIUM: clock: also update the date offset on time jumps |
| 2024-09-03 | BUG/MINOR: cfgparse-global: remove tune.fast-forward from common_kw_list |
| 2024-09-03 | BUG/MINOR: pattern: pat_ref_set: return 0 if err was found |
| 2024-09-03 | BUG/MINOR: pattern: pat_ref_set: fix UAF reported by coverity |
| 2024-09-03 | BUG/MINOR: h3: properly reject too long header responses |
| 2024-09-03 | BUG/MINOR: proto_uxst: delete fd from fdtab if listen() fails |
| 2024-09-03 | BUG/MINOR: mux-quic: do not send too big MAX_STREAMS ID |
| 2024-09-03 | BUG/MEDIUM: mworker/cli: fix pipelined modes on master CLI |
| 2024-09-03 | BUG/MINOR: proto_tcp: keep error msg if listen() fails |
| 2024-09-03 | BUG/MINOR: proto_tcp: delete fd from fdtab if listen() fails |
| 2024-09-03 | BUG/MINOR: quic/trace: make quic_conn_enc_level_init() emit NEW not CLOSE |
| 2024-09-03 | BUG/MINOR: trace/quic: make "qconn" selectable as a lockon criterion |
| 2024-09-03 | BUG/MINOR: trace: automatically start in waiting mode with "start " |
| 2024-09-03 | BUG/MEDIUM: trace: fix null deref in lockon mechanism since TRACE_ENABLED() |
| 2024-09-03 | BUG/MINOR: trace/quic: permit to lock on frontend/connect/session etc |
| 2024-09-03 | BUG/MINOR: trace/quic: enable conn/session pointer recovery from quic_conn |
| 2024-09-03 | BUG/MINOR: fcgi-app: handle a possible strdup() failure |
| 2024-09-03 | BUG/MEDIUM: peer: Notify the applet won't consume data when it waits for sync |
| 2024-09-03 | BUG/MEDIUM: mux-h2: Propagate term flags to SE on error in h2s_wake_one_stream |
| 2024-09-03 | BUG/MEDIUM: h2: Only report early HTX EOM for tunneled streams |
| 2024-09-03 | BUG/MEDIUM: http-ana: Report error on write error waiting for the response |
| 2024-09-03 | BUG/MEDIUM: quic: prevent conn freeze on 0RTT undeciphered content |
| 2024-09-03 | BUG/MEDIUM: ssl: 0-RTT initialized at the wrong place for AWS-LC |
| 2024-09-03 | BUG/MEDIUM: ssl: reactivate 0-RTT for AWS-LC |
| 2024-09-03 | BUG/MINOR: stconn: bs.id and fs.id had their dependencies incorrect |
| 2024-09-03 | BUG/MEDIUM: mux-pt/mux-h1: Release the pipe on connection error on sending path |
| 2024-09-03 | BUG/MEDIUM: stconn: Report error on SC on send if a previous SE error was set |
| 2024-09-03 | BUG/MEDIUM: server/addr: fix tune.events.max-events-at-once event miss and leak |
| 2024-09-03 | BUG/MEDIUM: mux-pt: Fix condition to perform a shutdown for writes in mux_pt_shut() |
| 2024-09-03 | BUG/MINOR: Crash on O-RTT RX packet after dropping Initial pktns |
| 2024-09-03 | BUG/MINOR: quic: Too shord datagram during O-RTT handshakes (aws-lc only) |
| 2024-09-03 | BUG/MAJOR: mux-h2: always clear MUX_MFULL and DEM_MROOM when clearing the mbuf |
| 2024-09-03 | BUG/MEDIUM: mux-h1: Properly handle empty message when an error is triggered |
| 2024-09-03 | BUG/MINOR: quic: unexploited retransmission cases for Initial pktns. |
| 2024-09-03 | BUG/MEDIUM: cli: Always release back endpoint between two commands on the mcli |
| 2024-09-03 | BUG/MEDIUM: mux-pt: Never fully close the connection on shutdown |
| 2024-09-02 | BUG/MINIR: proxy: Match on 429 status when trying to perform a L7 retry |
| 2024-09-02 | BUG/MEDIUM: stream: Prevent mux upgrades if client connection is no longer ready |
| 2024-09-02 | BUG/MEDIUM: mux-h2: Set ES flag when necessary on 0-copy data forwarding |
| 2024-07-29 | BUG/MEDIUM: init: fix fd_hard_limit default in compute_ideal_maxconn |
| 2024-07-29 | BUG/MEDIUM: queue: deal with a rare TOCTOU in assign_server_and_queue() |
| 2024-07-29 | BUG/MEDIUM: jwt: Clear SSL error queue on error when checking the signature |
| 2024-07-29 | BUG/MINOR: quic: Lack of precision when computing K (cubic only cc) |
| 2024-07-29 | BUG/MINOR: quic: Non optimal first datagram. |
| 2024-07-29 | BUG/MINOR: cli: Atomically inc the global request counter between CLI commands |
| 2024-07-29 | BUG/MINOR: server: Don't warn fallback IP is used during init-addr resolution |
| 2024-07-29 | BUG/MINOR: stick-table: fix crash for src_inc_gpc() without stkcounter |
| 2024-07-29 | BUG/MAJOR: mux-h2: force a hard error upon short read with pending error |
| 2024-07-29 | BUG/MEDIUM: ssl_sock: fix deadlock in ssl_sock_load_ocsp() on error path |
| 2024-07-29 | BUG/MEDIUM: debug/cli: fix "show threads" crashing with low thread counts |
| 2024-07-29 | BUG/MINOR: session: Eval L4/L5 rules defined in the default section |
| 2024-07-29 | BUG/MEDIUM: quic: prevent crash on accept queue full |
| 2024-07-11 | BUG/MEDIUM: bwlim: Be sure to never set the analyze expiration date in past |
| 2024-07-11 | BUG/MEDIUM: spoe: Be sure to create a SPOE applet if none on the current thread |
| 2024-07-11 | BUG/MEDIUM: h1: Reject empty Transfer-encoding header |
| 2024-07-11 | BUG/MINOR: h1: Reject empty coding name as last transfer-encoding value |
| 2024-07-11 | BUG/MINOR: h1: Fail to parse empty transfer coding names |
| 2024-07-11 | BUG/MINOR: jwt: fix variable initialisation |
| 2024-07-05 | BUG/MEDIUM: peers: Fix crash when syncing learn state of a peer without appctx |
| 2024-07-05 | BUG/MINOR: jwt: don't try to load files with HMAC algorithm |
| 2024-07-05 | BUG/MEDIUM: server: fix race on server_atomic_sync() |
| 2024-07-03 | BUG/MEDIUM: hlua/cli: Fix lua CLI commands to work with applet's buffers |
| 2024-07-03 | BUG/MINOR: promex: Remove Help prefix repeated twice for each metric |
| 2024-07-03 | BUG/MEDIUM: quic: fix possible exit from qc_check_dcid() without unlocking |
| 2024-07-03 | BUG/MINOR: quic: fix race-condition on trace for CID retrieval |
| 2024-07-03 | BUG/MINOR: quic: fix race condition in qc_check_dcid() |
| 2024-07-03 | BUG/MEDIUM: quic: fix race-condition in quic_get_cid_tid() |
| 2024-07-03 | BUG/MEDIUM: h3: ensure the ":scheme" pseudo header is totally valid |
| 2024-07-03 | BUG/MEDIUM: h3: ensure the ":method" pseudo header is totally valid |
| 2024-07-03 | BUG/MEDIUM: server/dns: prevent DOWN/UP flap upon resolution timeout or error |
| 2024-07-03 | BUG/MINOR: server: fix first server template name lookup UAF |
| 2024-06-26 | BUG/MEDIUM: stick-table: Decrement the ref count inside lock to kill a session |
| 2024-06-26 | BUG/MINOR: hlua: report proper context upon error in hlua_cli_io_handler_fct() |
| 2024-06-26 | BUG/MINOR: quic: fix BUG_ON() on Tx pkt alloc failure |
| 2024-06-26 | BUG/MINOR: h3: fix BUG_ON() crash on control stream alloc failure |
| 2024-06-26 | BUG/MINOR: mux-quic: fix crash on qcs SD alloc failure |
| 2024-06-26 | BUG/MINOR: h3: fix crash on STOP_SENDING receive after GOAWAY emission |
| 2024-06-26 | BUG/MAJOR: quic: fix padding with short packets |
| 2024-06-26 | BUG/MEDIUM: proxy: fix email-alert invalid free |
| 2024-06-26 | DEBUG: hlua: distinguish burst timeout errors from exec timeout errors |
| 2024-06-26 | BUG/MINOR: log: fix broken '+bin' logformat node option |
| 2024-06-14 | BUG/MINOR: quic: fix padding of INITIAL packets |
| 2024-06-12 | BUG/MAJOR: mux-h1: Prevent any UAF on H1 connection after draining a request |
| 2024-06-12 | BUG/MEDIUM: proxy: fix UAF with {tcp,http}checks logformat expressions |
| 2024-06-12 | BUG/MINOR: promex: Skip resolvers metrics when there is no resolver section |
| 2024-06-12 | BUG/MEDIUM: log: fix lf_expr_postcheck() behavior with default section |
| 2024-06-12 | BUG/MINOR: proxy: fix header_unique_id leak on deinit() |
| 2024-06-12 | BUG/MINOR: proxy: fix source interface and usesrc leaks on deinit() |
| 2024-06-12 | BUG/MINOR: proxy: fix dyncookie_key leak on deinit() |
| 2024-06-12 | BUG/MINOR: proxy: fix check_{command,path} leak on deinit() |
| 2024-06-12 | BUG/MINOR: proxy: fix email-alert leak on deinit() |
| 2024-06-12 | BUG/MINOR: proxy: fix log_tag leak on deinit() |
| 2024-06-12 | BUG/MINOR: proxy: fix server_id_hdr_name leak on deinit() |