HAProxy known bugs for maintenance branch 3.1 :  0 

This is maintenance branch 3.1 whose latest version is 3.1.17. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches. In short, if you are running any 3.1 version other than 3.1.17, you're running with known bugs.

Quick links

Versions available in this branch

This branch contains the following releases :

DateVersionComment
2026-03-193.1.17 ⇐ last
2026-03-093.1.16 
2026-02-193.1.15 
2026-02-123.1.14 
2026-01-293.1.13 
2025-12-223.1.12 
2025-12-173.1.11 
2025-11-073.1.10 
2025-10-033.1.9 
2025-06-023.1.8 
2025-04-173.1.7 
2025-03-203.1.6 
2025-02-203.1.5 
2025-02-193.1.4 
2025-01-293.1.3 
2025-01-083.1.2 
2024-12-113.1.1 
2024-11-263.1.0 

Fixes for known bugs pending in this branch since the last release (3.1.17)

These fixes have already been queued for the next 3.1 release but no version was released with them yet. Note that fixes are backported several at a time from the development branch to maintenance branches, and the absence of a fix here doesn't mean none will be issued soon.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in the latest version of this branch by category :

TotalCRITICALMAJORMEDIUMMINOR
0 0 0 0 0

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)

Known bugs fixed in the development branch after the last commit in this branch

It is important to understand that not all of these commits are necessarily relevant to this version, but clicking on them will show the bug description. All fixes are made first in the development branch and then backported to the maintenance branches. This ensures no fix is lost when upgrading. If a fix was marked for backporting to this branch and is not there yet, it's likely that it is still missing. Do not hesitate to ask on the haproxy mailing list if you feel like a fix has been skipped.

DateSubject
2026-05-26BUG/MINOR: mux-spop: Use relative offset to compute contig data in demux buf
2026-05-26BUG/MINOR: mux-fcgi: Use relative offset to compute contig data in demux buf
2026-05-26BUG/MEDIUM: h1-htx: Sanitize parsing to properly handle upgrade requests
2026-05-26BUG/MEDIUM: mux-fcgi: reject stream ID 0 for application records
2026-05-26BUG/MEDIUM: jwe: substitute random CEK on RSA1_5 decryption failure per RFC 7516 #11.5
2026-05-26BUG/MINOR: jwe: enforce GCM tag length to 128 bits
2026-05-26BUG/MINOR: quic: reject packet too short for HP decryption
2026-05-26BUG/MINOR: qmux: do not crash on frame parsing issue
2026-05-26BUG/MINOR: hlua: prevent Lua from passing CR/LF/NUL in HTTP headers
2026-05-26BUG/MINOR: h3: add missing break on rcv_buf()
2026-05-26BUG/MEDIUM: auth: fix unconfigured password NULL deref
2026-05-26BUG/MINOR: h3: reject server MAX_PUSH_ID frame
2026-05-26BUG/MINOR: h3: adjust error on PUSH_PROMISE frame reception
2026-05-26BUG/MINOR: h3: reject client CANCEL_PUSH frame
2026-05-26BUG/MINOR: h3: reject server push stream
2026-05-26BUG/MEDIUM: h3: reject client push stream
2026-05-26BUG/MEDIUM: tools: insert an XXH64 layer on the PRNG output
2026-05-26BUG/MINOR: addons/51d: NUL-terminate headers before passing them to Trie API
2026-05-26BUG/MINOR: resolvers: switch to a better PRNG for query IDs
2026-05-26BUG/MINOR: ssl-hello: make use of the null-terminated servername
2026-05-26BUG/MINOR: payload: fix the handshake length bounds check smp_client_hello_parse()
2026-05-26BUG/MINOR: base64: return empty string for empty input in base64dec()
2026-05-26BUG/MINOR: http-ext: always check remaining data when reading rfc7239 nodeport
2026-05-26BUG/MEDIUM: acme: protect against risk of null-deref on connection failure
2026-05-26BUG/MINOR: http-fetch: check against the whole token in get_http_auth()
2026-05-26BUG/MINOR: sample: request an extra output byte for the url_dec converter
2026-05-26BUG/MINOR: resolvers: relax size checks in authority record parsing
2026-05-26BUG/MINOR: cache: also recognize directives in the form "token="
2026-05-26BUG/MEDIUM: cache: always verify the primary hash in get_secondary_entry()
2026-05-26BUG/MEDIUM: h1: limit status codes to 3 digits by default
2026-05-26BUG/MEDIUM: h1: drop headers whose names contain invalid chars
2026-05-25BUG/MINOR: haterm: fix the random suffix multiplication
2026-05-25BUG/MINOR: sample: limit the be2hex converter's chunk size
2026-05-25BUG/MINOR: init: use more than ha_random64() for the cluster secret
2026-05-25BUG/MINOR: dict: fix refcount race on insert collision
2026-05-25BUG/MINOR: log: look for the end of priority before the end of the buffer
2026-05-25BUG/MINOR: mux-h2: validate HEADERS frame length before reading stream dep
2026-05-25BUG/MINOR: resolvers: fix risk of appending garbage past the domain name
2026-05-25BUG/MINOR: resolvers: fix room for trailing zero in resolv_dn_label_to_str()
2026-05-25BUG/MINOR: log: free logformat expr on compile failure in cfg_parse_log_profile
2026-05-25BUG/MEDIUM: cache: fix a refcount leak for missed secondary entries
2026-05-25BUG/MEDIUM: tcpcheck/spoe: bound the SPOP error code to valid values
2026-05-25BUG/MEDIUM: regex: allocate a large enough pcre2 match for all matches
2026-05-25BUG/MEDIUM: log-forward: make sure the month is unsigned
2026-05-23BUG/MEDIUM: acme: NUL terminate response buffer before PEM parsing
2026-05-22BUG/MEDIUM: cli: Fix parsing of pattern finishing a command payload
2026-05-22BUG/MEDIUM: hlua: Fix integer underflow when receiving line from lua cosocket
2026-05-22BUG/MINOR: tcpchecks: Limit parsing of agent-check reply to the buffer
2026-05-22BUG/MEDIUM: dict: hold lock while decrementing refcount in dict_entry_unref
2026-05-22BUG/MINOR: quic: fix ODCID lookup from derived value
2026-05-22BUG/MEDIUM: ssl-gencert: Unlock LRU cache if failing to generate certificate
2026-05-22BUG/MEDIUM: resolvers: Fix test on dn label size in resolv_dn_label_to_str()
2026-05-22BUG/MEDIUM: applet: Properly handle receives of size 0
2026-05-21BUG/MINOR: ocsp: Manage date too far away in the future
2026-05-21BUG/MEDIUM: net_helper: fix a remaining possibly infinite loop in converters
2026-05-20BUG/MEDIUM: htx: Alloc a chunk of right size in htx_replace_blk_value()
2026-05-20BUG/MEDIUM: applet: Fix transfer of HTX data to the applet
2026-05-20BUG/MINOR: htx: Fix value of HTX_XFER_HDRS_ONLY flag
2026-05-20BUG/MINOR: mux_quic: do not exceed stream.max-concurrent on backend side
2026-05-20BUG/MEDIUM: servers: Don't forget to set srv_hash when needed
2026-05-20BUG/MINOR: prevent conn leak in case of xprt_qmux init failure
2026-05-20BUG/MEDIUM: servers: Store the connection hash with the parameter cache
2026-05-19BUG/MINOR: backend: fix balance hash calculation when using hash-type none
2026-05-19BUG/MINOR: server: accept server IDs above 2^31 and clarify error message
2026-05-19BUG/MINOR: httpclient-cli: fix uninit variable in error label
2026-05-19BUG/MINOR: h1: Don't mask websocket protocol if multiple protocols used
2026-05-19BUG/MEDIUM: h1: Skip all h2c values from Upgrade headers during parsing
2026-05-19BUG/MINOR: httpclient-cli: Destroy http-client context if failing to start it
2026-05-19BUG/MINOR: server: Properly handle init-state value during haproxy startup
2026-05-19BUG/MINOR: jws: Add missing return value check (EVP_PKEY_get_bn_param)
2026-05-19BUG/MINOR: jws: fix OpenSSL 3.0 version check from > to >=
2026-05-19BUG/MEDIUM: limits: properly account for global.maxpipes in compute_ideal_maxconn()
2026-05-18BUG/MINOR: jwt: fix possible memory leak in convert_ecdsa_sig() error path
2026-05-18BUG/MINOR: check: properly report errno in chk_report_conn_err()
2026-05-18BUG/MINOR: sock: store the connection error status
2026-05-16BUG/MINOR: session/trace: use distinct flags for SESS_EV_END and _ERR
2026-05-15BUG/MINOR: resolvers: fix missing task_idle destruction in resolvers_destroy()
2026-05-15BUG/MINOR: resolvers: fix leaked fields on cfg_parse_resolvers() error paths
2026-05-15BUG/MINOR: resolvers: fix leaked dgram and dns_ring struct in parse_resolve_conf()
2026-05-15BUG/MINOR: resolvers: report the expression error in the do-resolve() action parser
2026-05-15BUG/MINOR: proxy: use proxy_drop() in parse_new_proxy() error path
2026-05-15BUG/MINOR: dns: fix dangling dgram pointer on dns_dgram_init() failure path
2026-05-15BUG/MINOR: resolvers: fix dangling list pointer in resolvers_new() error paths
2026-05-15BUG/MEDIUM: server/cli: unlock server lock on failure in cli_parse_set_server
2026-05-15BUG/MINOR: servers: use proper source of pool_conn_name in srv_settings_cpy()
2026-05-15BUG/MINOR: server: better handling of OOM in srv_set_fqdn()
2026-05-15BUG/MEDIUM: dns: fix memory leak of sockaddr in dns_session_init() error path
2026-05-15BUG/MEDIUM: resolvers: fix name compression pointer validation in resolv_read_name()
2026-05-15BUG/MEDIUM: dns: fix long loops in additional records parse on name failure
2026-05-15BUG/MINOR: config/dns: properly fail on duplicate nameserver name detection
2026-05-15BUG/MINOR: backend: correct parameter value validation in get_server_ph_post()
2026-05-13BUG/MINOR: xprt_qstrm: fix conflicting prototype
2026-05-13BUG/MEDIUM: http-client: Only consume input buffer when hc one is empty
2026-05-13BUG/MEDIUM: dict: hold read lock while incrementing refcount in dict_insert
2026-05-11BUG/MEDIUM: tasks: Keep the TASK_RUNNING flag until queued
2026-05-11BUG/MINOR: uri-auth: fix possible null-deref in latest fix for leaks
2026-05-11BUG/MINOR: mqtt: fix PUBLISH flags validation that want all bits to be set
2026-05-11BUG/MINOR: mqtt: connack parser uses wrong bit for SUBSCRIPTION_IDENTIFIERS_AVAILABLE
2026-05-11BUG/MINOR: mqtt: connect parser uses wrong bit field for TOPIC_ALIAS_MAXIMUM
2026-05-11BUG/MINOR: mqtt: connack parser returns MQTT_NEED_MORE_DATA on unknown property
2026-05-11BUG/MINOR: cfgcond: make KQUEUE check for GTUNE_USE_KQUEUE not GTUNE_USE_EPOLL
2026-05-11BUG/MINOR: cache: fix memory leak in parse_cache_rule error path
2026-05-11BUG/MINOR: uri-auth: avoid leaks on initialization error
2026-05-11BUG/MINOR: auth: free user groups on error paths in userlist_postinit()
2026-05-11BUG/MINOR: tools: fix memory leak in env_expand() error path
2026-05-11BUG/MINOR: http-act: set-status() must check the response message, not the request
2026-05-11BUG/MINOR: http-fetch: make http_first_req() check for HTTP first
2026-05-11BUG/MINOR: http-fetch: fix smp_fetch_hdr_ip()'s handling of brackets for IPv6
2026-05-11BUG/MINOR: mux-h1: only check h1s if not NULL
2026-05-11BUG/MINOR: cfgparse-listen: do not emit extraneous line in rule order warnings
2026-05-09BUG/MEDIUM: servers: Only requeue servers if they are up
2026-05-07BUG/MEDIUM: stick-table: properly check permissions on CLI's set/clear cmd
2026-05-07BUG/MEDIUM: jwe: Fix jwt.decrypt_alg_list to work correctly
2026-05-07BUG/MEDIUM: mux-h2: fix the detection of the ext connect support
2026-05-07Revert "BUG/MINOR: mux-h2: condition the processing of 8441 extension to global setting"
2026-05-07Revert "BUG/MEDIUM: cli: fix master CLI connection slot leak on client disconnect"
2026-05-07BUG/MEDIUM: mux-h2: Properly consume padding for DATA frames
2026-05-07BUG/MINOR: mux_quic: refresh timeout only if I/O performed
2026-05-07BUG/MINOR: mux_quic: fix max stream ID reuse estimation
2026-05-06BUG/MINOR: ssl: Use the sequence number with kTLS and TLS 1.2
2026-05-06BUG/MEDIUM: mux_quic: adjust qcc_is_dead() to account detached streams
2026-05-05DEBUG: haterm: Add hstream flags in the trace messages
2026-05-05BUG/MINOR: haterm: Report a 400-bad-request error on receive error
2026-05-05BUG/MINOR: haterm: Fix condition to use direct data forwarding
2026-05-05BUG/MEDIUM: haterm: Properly handle client timeout
2026-05-05BUG/MEDIUM: haterm: Properly handle end of request and end of response
2026-05-05BUG/MINOR: haterm: Don't set HTX_FL_EOM flag on 100-Continue responses
2026-05-05BUG/MEDIUM: haterm: Subscribe for receives until request was fully drained
2026-05-05BUG/MINOR: haterm: Fix a possible integer overflow on the request body length
2026-05-05BUG/MINOR: haterm: Immediately report error when draining the request
2026-05-05BUG/MEDIUM: h1_htx: Remove reverved block on error during contig chunks parsing
2026-05-05BUG/MINOR: http-fetch: Fix http_auth_bearer() when custom header is used
2026-05-05BUG/MINOR: http_fetch: Check return values of unchecked buffer operations
2026-05-05BUG/MINOR: acme: contact mail should be optional, don't pass ToS bool
2026-05-05BUG/MINOR: h2: only accept :protocol with extended CONNECT
2026-05-05BUG/MINOR: mux-h2: condition the processing of 8441 extension to global setting
2026-05-05BUG/MINOR: h2: add decoding for :protocol in traces
2026-05-04BUG/MINOR: mworker/cli: check ci_insert() return value in pcli_parse_request()
2026-05-04BUG/MEDIUM: mworker/cli: fix user and operator permission via @@ in master CLI
2026-05-04BUG/MAJOR: http-ana: fix private session retrieval on NTLM
2026-05-04BUG/MEDIUM: ssl/sample: check output buffer size in aes_cbc_enc converter
2026-05-04BUG/MAJOR: net_helper: also fix tcp_options_list for OOB write loop
2026-05-04BUG/MINOR: resolvers: Free opts on parse error in resolv_parse_do_resolve()
2026-05-04BUG/MINOR: resolvers: Fix lookup for a hostname in the state-file tree
2026-05-04BUG/MINOR: resolvers: Free new requester on error when linking a resolution
2026-05-04BUG/MINOR: tcpcheck: Properly report error for http health-checks
2026-05-04BUG/MINOR: dns: always validate the source address in responses
2026-05-04BUG/MAJOR: mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in h2c_dec_hdrs()
2026-05-04BUG/MEDIUM: mux-h2: fix the body_len to check when parsing request trailers
2026-05-04BUG/MINOR: quic: fix trace crash on datagram receive
2026-05-04BUG/MEDIUM: acme: fix stalled renewal when opportunistic DNS check fails
2026-05-04BUG/MINOR: quic: fix buffer overflow with sockaddr_in46
2026-04-30CI: github: add DEBUG_STRICT=2 to ASAN jobs
2026-04-30BUG/MINOR: pattern: release the reference on failure to load from file
2026-04-30BUG/MINOR: map: do not leak a map descriptor on load error
2026-04-30BUG/MINOR: acl: fix a possible arg corruption in smp_fetch_acl_parse()
2026-04-30BUG/MEDIUM: cli: fix master CLI connection slot leak on client disconnect
2026-04-30BUG/MINOR: quic: handle cases where we don't have an address
2026-04-30BUG/MINOR: hpack: validate idx > 0 in hpack_valid_idx()
2026-04-30BUG/MINOR: vars: only print first invalid char in fill_desc()
2026-04-30BUG/MINOR: vars: don't store the variable twice with set-var-fmt
2026-04-30BUG/MINOR: vars: make parse_store() return error on var_set() failure
2026-04-30BUG/MINOR: sink: do not free existing sinks on allocation error
2026-04-29BUG/MINOR: acme: skip auth/challenge steps when newOrder returns a certificate
2026-04-29BUG/MEDIUM: acme: fix segfault on newOrder with empty authorizations
2026-04-29BUG/MINOR: http-htx: Don't normalize emtpy path for OPTIONS requests
2026-04-29BUG/MEDIUM: mux-fcgi: Properly handle full buffer for FCGI_PARAM record
2026-04-29BUG/MINOR: net_helper: fix incomplete decoding in sample_conv_eth_vlan
2026-04-29BUG/MINOR: net_helper: fix out-of-bounds read in sample_conv_tcp_options_list
2026-04-29BUG/MINOR: net_helper: fix out-of-bounds read in tcp_fullhdr_find_opt
2026-04-29BUG/MINOR: payload: prevent integer overflow in distcc token parsing
2026-04-29BUG/MINOR: payload: validate minimum keyshare_len in smp_fetch_ssl_keyshare_groups
2026-04-29BUG/MINOR: fix various typos and spelling mistakes in user-visible messages
2026-04-29BUG/MEDIUM: tasks: Do not loop in task_schedule() if a task is running
2026-04-29BUG/MAJOR: mux-h1: Deal with true 64-bits integer to emit chunks size
2026-04-29BUG/MEDIUM: h1: Enforce the authority validation during H1 request parsing
2026-04-29BUG/MAJOR: http: forbid comma character in authority value
2026-04-29BUG/MEDIUM: http-htx: Loop on full host value during scheme based normalization
2026-04-29BUG/MEDIUM: http-htx: Don't use data from HTX message to update authority
2026-04-29BUG/MAJOR: http-htx: Store new host in a chunk for scheme-based normalization
2026-04-28BUG/MINOR: mux_quic: free frames emitted with QMux
2026-04-27BUG/MINOR: http_ana: use scf to report term_evts in http_wait_for_request()
2026-04-27BUG/MEDIUM: mux_h1: fix stack buffer overflow in h1_append_chunk_size()
2026-04-27BUG/MINOR: peers: fix wrong flag reported twice for dump_flags
2026-04-27BUG/MINOR: peers: fix logical "and" when checking for local in PEER_APP_ST_STARTING
2026-04-27BUG/MINOR: sample: fix NULL strm dereference in sample_conv_when
2026-04-27BUG/MINOR: sample: fix memory leak in smp_resolve_args error paths
2026-04-27BUG/MINOR: sample: fix memory leak in check_when_cond() when ACL is not found
2026-04-27BUG/MINOR: tools: free previously allocated strings on strdup failure in backup_env()
2026-04-27BUG/MINOR: tools: fix memory leak in indent_msg() on out of memory
2026-04-27BUG/MINOR: tools: my_memspn/my_memcspn wrong cast causing incorrect byte reading
2026-04-27BUG/MINOR: tree-wide: fix a few user-visible spelling mistakes from dev7
2026-04-27BUG/MINOR: ssl: fix double-free on failed realloc in ssl_sock.c
2026-04-25BUG/MINOR: ssl: fix memory leak on realloc failure in acme.ips
2026-04-25BUG/MINOR: ssl: fix memory leaks on realloc failure in ssl_sock.c
2026-04-25BUG/MINOR: ssl: fix memory leaks on realloc failure in ssl_ckch.c
2026-04-24BUG/MEDIUM: stats: fix crash on 'dump stats-file'
2026-04-24BUG/MINOR: tcpcheck: Allow connection reuse without prior traffic
2026-04-24BUG/MINOR: mux_quic: do not release conn on qcc_recv() for QMux
2026-04-24BUG/MINOR: xprt_qstrm: prevent crash if conn release on MUX wake
2026-04-24BUG/MINOR: xprt_qstrm: ensure all local TPs are allocated
2026-04-24BUG/MINOR: mux_quic: prevent crash on qc_frm_free() with QMux
2026-04-23BUG/MEDIUM: mux-h1: Force close mode for bodyless message announcing a C-L
2026-04-23BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as well
2026-04-23BUG/MINOR: server: fix a possible leak of an error message in dynamic servers
2026-04-23Revert "BUG/MINOR: stream: add the newly added SF_TXN_* flags to strm_show_flags()"
2026-04-23BUG/MINOR: debug: properly mark the entire libs archive read-only
2026-04-23BUG/MINOR: stream: add the newly added SF_TXN_* flags to strm_show_flags()
2026-04-23BUG/MINOR: servers: fix last_sess date calculation
2026-04-23BUG/MINOR: compression: properly disable request when setting response
2026-04-23BUG/MINOR: stream: Add SF_TXN_HTTP/SF_TXN_PCLI flags in strm_show_flags()
2026-04-23BUG/MEDIUM: tcpcheck: Release temporary small chunk when retrying on http-check
2026-04-23BUG/MINOR: tcpcheck: Fix a leak on deinit by releasing ruleset's conf.file
2026-04-23BUG/MINOR: tcpcheck: Don't release ruleset when parsing 'spop-check' ruleset
2026-04-23BUG/MINOR: http-act: fix a typo in a "del-heeaders-bin" error message
2026-04-23BUG/MINOR: mux-h1: Fix test to skip trailers from chunked messages
2026-04-23BUG/MINOR: mux-h1: Fix condition to send null-chunk for bodyless message
2026-04-23BUG/MINOR: log: also wait for the response when logging response headers
2026-04-23BUG/MINOR: H2: Don't forget to free shared_rx_bufs on failure
2026-04-23BUG/MINOR: h2: Don't look at the exclusive bit for PRIORITY frame
2026-04-23BUG/MINOR: h2: make tune.h2.log-errors actually work
2026-04-22BUG/MAJOR: net_helper: ip.fp infinite loop on malformed tcp options
2026-04-22BUG/MEDIUM: tasks: Make sure we don't schedule a task already running
2026-04-22BUG/MINOR: mux-h2: count a proto error when rejecting a stream on parsing error
2026-04-22BUG/MINOR: mux-h2: count a protocol error when failing to parse a trailer
2026-04-22BUG/MINOR: reg-tests: make shell syntax errors fatal
2026-04-21BUG/MAJOR: sched: protect task->expire on 32-bit platforms
2026-04-21BUG/MINOR: sample: adjust dependencies for channel output bytes counters
2026-04-21BUG/MINOR: log: consider format expression dependencies to decide when to log
2026-04-20BUG/MEDIUM: checks: Don't forget to set the "alt_proto" field
2026-04-20BUG/MINOR: xprt_qstrm: reduce max record length check
2026-04-20BUG/MINOR: mux_quic: convert QCC rx.rlen to 64bits
2026-04-20BUG/MINOR: xprt_qstrm: read record length in 64bits
2026-04-17BUG/MINOR: mux_quic: limit avail_streams() to 2^62
2026-04-17BUG/MINOR: task: fix uninitialised read in run_tasks_from_lists()
2026-04-16BUG/MEDIUM: mux-h2: ignore conn->owner when deciding if a connection is dead
2026-04-15BUG/MINOR: threads: properly set the number of tgroups when non using policy
2026-04-15BUG/MINOR: acme: fix fallback state after failed initial DNS check
2026-04-15BUG/MEDIUM: peers: trash of expired entries delayed after fullresync
2026-04-14BUG/MEDIUM: htx: Don't count delta twice when block value is replaced
2026-04-14BUG/MEDIUM: htx: Properly handle block modification during defragmentation
2026-04-13BUG/MINOR: haterm: don't apply the default pipe size margin twice
2026-04-13BUG/MINOR: acme: don't pass NULL into format string
2026-04-13BUG/MINOR: acme: read the wildcard flag from the authorization response
2026-04-13BUG/MINOR: haterm: preserve the pipe size margin for splicing
2026-04-13BUG/MEDIUM: cli: Properly handle too big payload on a command line
2026-04-13BUG/MINOR: log: Fix error message when using unavailable fetch in logfmt
2026-04-13BUG/MINOR: quic: do not use hardcoded values in QMux TP frame builder
2026-04-13BUG/MINOR: ot: fixed wrong NULL check in flt_ot_parse_cfg_group()
2026-04-13BUG/MINOR: ot: removed dead code in flt_ot_parse_cfg_str()
2026-04-13BUG/MINOR: xprt_qstrm: do not parse record length on read again
2026-04-13BUG/MINOR: mux_quic: prevent QMux crash on qcc_io_send() error path
2026-04-10BUG/MEDIUM: haterm: Properly initialize the splicing support for haterm
2026-04-10Revert "BUG/MEDIUM: haterm: Move all init functions of haterm in haterm_init.c"
2026-04-10BUG/MINOR: do not crash on QMux reception of BLOCKED frames
2026-04-10BUG/MINOR: quic: increment pos pointer on QMux transport params parsing
2026-04-10BUG/MINOR: mux-quic: fix potential NULL deref on qcc_release()
2026-04-10BUG/MINOR: hlua: fix use-after-free of HTTP reason string
2026-04-10BUG/MEDIUM: mux-fcgi: prevent record-length truncation with large bufsize
2026-04-10BUG/MINOR: sample: fix info leak in regsub when exp_replace fails
2026-04-09BUG/MEDIUM: samples: Fix handling of SMP_T_METH samples
2026-04-09BUG/MINOR: haterm: Return the good start-line for 100-continue interim message
2026-04-09BUG/MINOR: http-act: validate decoded lengths in *-headers-bin
2026-04-09BUG/MINOR: spoe: fix pointer arithmetic overflow in spoe_decode_buffer()
2026-04-09BUG/MINOR: resolvers: fix memory leak on AAAA additional records
2026-04-08BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals
2026-04-08Revert "BUG: hlua: fix stack overflow in httpclient headers conversion"
2026-04-08BUG/MEDIUM: connection: Wake the stconn on error when failing to create mux
2026-04-07BUG/MINOR: peers: fix OOB heap write in dictionary cache update
2026-04-07BUG/MEDIUM: chunk: fix infinite loop in get_larger_trash_chunk()
2026-04-07BUG/MEDIUM: chunk: fix typo allocating small trash with bufsize_large
2026-04-07BUG/MINOR: hlua: fix format-string vulnerability in Patref error path
2026-04-07BUG/MINOR: hlua: fix stack overflow in httpclient headers conversion
2026-04-07BUG: hlua: fix stack overflow in httpclient headers conversion
2026-04-07BUG/MEDIUM: jwe: fix memory leak in jwt_decrypt_secret with var argument
2026-04-07BUG/MEDIUM: jwt: fix heap overflow in ECDSA signature DER conversion
2026-04-07BUG/MEDIUM: jwe: fix NULL deref crash with empty CEK and non-dir alg
2026-04-07BUG/MEDIUM: payload: validate SNI name_len in req.ssl_sni
2026-04-05BUG/MEDIUM: tcpcheck: Properly retrieve tcpcheck type to install the best mux
2026-04-04BUG/MINOR: counters: fix unexpected 127 char GUID truncation for shm-stats-file objects
2026-04-03BUG/MEDIUM: tcpcheck/server: Fix parsing of healthcheck param for dynamic servers
2026-04-03BUG/MINOR: http-act: fix a typo in the "pause" action error message
2026-04-03BUG/MEDIUM: mux-h1: Disable 0-copy forwarding when draining the request
2026-04-03BUG/MEDIUM: haterm: Move all init functions of haterm in haterm_init.c
2026-04-03BUG/MINOR: ssl: fix memory leak in ssl_fc_crtname by using SSL_CTX ex_data index
2026-04-03BUG/MINOR: cfgcond: fail cleanly on missing argument for "feature"
2026-04-03BUG/MINOR: cfgcond: always set the error string on awslc_api checks
2026-04-03BUG/MINOR: cfgcond: always set the error string on openssl_version checks
2026-04-03BUG/MINOR: cfgcond: properly set the error pointer on evaluation error
2026-04-02BUG/MINOR: mux_quic: fix uninit for QMux emission
2026-04-02DEBUG: connection/flags: add QSTRM flags for the decoder
2026-04-02BUG/MINOR: quic: fix documentation for transport params decoding
2026-04-01BUG/MINOR: tcpcheck: Use tcpcheck context for expressions parsing
2026-04-01BUG/MINOR: tcpcheck: Don't enable http_needed when parsing HTTP samples
2026-04-01BUG/MINOR: tcpcheck: Remove unexpected flag on tcpcheck rules for httchck option
2026-04-01BUG/MINOR: http_act: Make set/add-headers-bin compatible with ACL conditions
2026-04-01BUG/MINOR: http_act: Properly handle decoding errors in *-headers-bin actions
2026-03-31BUG/MEDIUM: mux-h1: Don't set MSG_MORE on bodyless responses forwarded to client
2026-03-31BUG/MEDIUM: map/cli: CLI commands lack admin permission checks
2026-03-31BUG/MEDIUM: ssl/ocsp: ocsp commands are missing permission checks
2026-03-31BUG/MEDIUM: ssl/cli: tls-keys commands are missing permission checks
2026-03-31BUG/MEDIUM: map/cli: map/acl commands warn when accessed without admin level
2026-03-31BUG/MEDIUM: ssl/ocsp: ocsp commands warn when accessed without admin level
2026-03-31BUG/MEDIUM: ssl/cli: tls-keys commands warn when accessed without admin level
2026-03-30BUG/MINOR: net_helper: fix length controls on ip.fp tcp options parsing
2026-03-30BUG/MINOR: stconn: Always declare the SC created from healthchecks as a back SC
2026-03-30BUG/MINOR: quic: close conn on packet reception with incompatible frame
2026-03-27BUG/MEDIUM: htx: Fix htx_xfer() to consume more data than expected
2026-03-27BUG/MINOR: acme: fix task allocation leaked upon error
2026-03-27BUG/MEDIUM: acme: skip doing challenge if it is already valid
2026-03-27BUG/MINOR: http-ana: Only consider client abort for abortonclose
2026-03-27BUG/MINOR: config: Properly test warnif_misplaced_* return values
2026-03-27BUG/MINOR: config: Warn only if warnif_cond_conflicts report a conflict
2026-03-26BUG/MEDIUM: check: Don't reuse the server xprt if we should not
2026-03-25BUG/MINOR: acme: permission checks on the CLI
2026-03-25BUG/MINOR: ech: permission checks on the CLI
2026-03-23BUG/MINOR: acme/cli: fix argument check and error in 'acme challenge_ready'
2026-03-23BUG/MINOR: acme: replace atol with len-bounded __strl2uic() for retry-after
2026-03-23BUG/MINOR: acme: free() DER buffer on a2base64url error path
2026-03-23BUG/MINOR: acme: NULL check on my_strndup()
2026-03-23Revert "BUG/MEDIUM: mux-h2: make sure to always report pending errors to the stream"
2026-03-23BUG/MINOR: http_htx: fix null deref in http-errors config check
2026-03-23BUG/MINOR: acme/cli: wrong argument check in 'acme renew'
2026-03-23BUG/MINOR: acme: wrong error when checking for duplicate section
2026-03-23BUG/MINOR: acme: leak of ext_san upon insertion error
2026-03-23BUG/MEDIUM: acme: fix multiple resource leaks in acme_x509_req()
2026-03-20BUG/MINOR: qpack: fix 62-bit overflow and 1-byte OOB reads in decoding
2026-03-20BUG/MINOR: sock: adjust accept() error messages for ENFILE and ENOMEM

Back to the list of branches and versions
Back to the HAProxy page