2026-09-21BUG/MINOR: http-client: Convert server timeout ticks when setting it 2026-09-21BUG/MINOR: ssl: Fix possible null deref on the SSL context in ssl_sock_to_buf() 2026-09-21BUG/MINOR: hlua: release private Lua rule data on teardown 2026-09-18BUG/MINOR: mux-h2: Reject trailers received on a tunneled stream 2026-09-18BUG/MAJOR: htx: Check the header/trailer length limits when one is updated 2026-09-18BUG/MINOR: tools: Don't try to anonymize a NULL string 2026-09-18BUG/MEDIUM: htx: Fix the position returned by htx_defrag() 2026-09-18BUG/MINOR: ssl/ocsp: Report an error when an empty OCSP response is received 2026-09-18BUG/MEDIUM: http-client/cli: Notify the http-client when the response is consumed 2026-09-18BUG/MEDIUM: acme: Set HTTPCLIENT_O_RES_ACCUM option on the http-client 2026-09-18BUG/MEDIUM: ssl/ocsp: Set HTTPCLIENT_O_RES_ACCUM option on the http-client 2026-09-18BUG/MEDIUM: http-client: Don't use the httpclient context if it was released 2026-09-18BUG/MEDIUM: task: Do not destroy a task that is not ours in task_destroy 2026-09-16BUG/MINOR: proxy: pass PR_FL_DEF_EXPLICIT_MODE through cascaded defaults 2026-09-15BUG/MEDIUM: tcp-rules: Don't restart tcp-request content evaluation on yield 2026-09-15BUG/MEDIUM: htx: Reserve a block descriptor for zero-sized blocks 2026-09-14BUG/MEDIUM: ssl: don't set a 0 timeout on an expired TLS session 2026-09-11BUG/MINOR: sample: reject a \0 byte in url_dec, json_query and jwt_*_query 2026-09-11BUG/MINOR: ssl: Fix leak of ca_list in cafile_entry 2026-09-11BUG/MINOR: pattern: do not match a string with an embedded \0 on its prefix 2026-09-11BUG/MINOR: cli: Reject payload with no command 2026-09-11BUG/MEDIUM: cli: Don't read a command or payload line into a full buffer 2026-09-11BUG/MEDIUM: cli: Don't parse next command if input buffer is empty 2026-09-11BUG/MEDIUM: http_act: fix normalize-uri normalizer selection with a condition 2026-09-10BUG/MINOR: stream: resolve foreign groups' addresses for "show sess" 2026-09-10BUG/MEDIUM cli: dump other thread groups' FDs from their own threads 2026-09-10BUG/MEDIUM: listener: Don't drop suspend/resume deferred requests 2026-09-10BUG/MINOR: cli: Make sure two instances of _getsocks don't run 2026-09-10BUG/MEDIUM: map: do not overwrite the fetch context in pat_match_regm() 2026-09-10BUG/MINOR: ssl: don't pass the address of a size_t as an int* to OpenSSL 2026-09-08BUG/MEDIUM: http-ana: apply tunnel timeout with data filters 2026-09-08BUG/MINOR: h3: only increment frame type counter on new header 2026-09-08BUG/MINOR: h3: handle unknown frame type on request stream as specified 2026-09-08BUG/MINOR: h3: handle empty HEADERS frame as specified 2026-09-08BUG/MEDIUM: h3: do not block FIN on empty DATA frame 2026-09-08BUG/MINOR: h3: reject truncated frames with mandatory payload 2026-09-04BUG/MINOR: stream/debug: harden the stream dump function regarding signals 2026-09-04BUG/MINOR: flt-http-comp: Rely on htx_set_eom() to restore EOM flag 2026-09-04BUG/MEDIUM: htx: Don't reset flags when source must be preserved during transfer 2026-09-04BUG/MINOR: hlua: Always return nil if there is no data to dup for HTTP messages 2026-09-04BUG/MINOR: mux-h1: Return an error on trailers if last chunk is unfinished 2026-09-04BUG/MEDIUM: hlua: Never release a cosocket applet from the GC 2026-09-03BUG/MINOR: quic: leak of the NEW_TOKEN frame on token generation failure 2026-09-03BUG/MAJOR: h3: reject H3 truncated frames 2026-09-03BUG/MEDIUM: mux-h2: Make sure we remove H2_SF_NOTIFIED on subscribe 2026-09-03BUG/MINOR: debug: restore complain tail jumps with clang 2026-09-03BUG/MEDIUM: log: encode the whole non-printable range in the +json output 2026-09-03BUG/MINOR: tools: support the documented NULL in cbor_encode_bytes_prefix_bin() 2026-09-02BUG/MINOR: quic: delete the wrong CIDs when post-handshake frames fail 2026-09-02BUG/MINOR: qpack: accept a Required Insert Count which cannot be reached 2026-09-02BUG/MINOR: qpack: encoder and decoder stream data is never consumed 2026-09-01BUG/MINOR: resolvers: classify empty truncated responses 2026-09-01BUG/MEDIUM: resolvers: Use the right server to init DNS streams 2026-09-01BUG/MEDIUM: filters: check the filter name before comparing it 2026-08-31BUG/MINOR: quic: late packets of the first key phase are dropped 2026-08-31BUG/MEDIUM: quic: crash on key update phase change after a failed one 2026-08-29BUG/MINOR: payload: bound ClientHello extension lists by the extension length 2026-08-29BUG/MINOR: payload: fix the cipher_len bound check in smp_client_hello_parse() 2026-08-28BUG/MINOR: quic: fix zero value of tune.quic.sec.stateless-reset-rate 2026-08-28BUG/MEDIUM: server: Fix server-template with default-server 2026-08-28BUG/MEDIUM: mux-spop: Properly handle parsing of split HELLO/DISCONNECT frames 2026-08-26BUG/MINOR: cache: Seed cache primary hash 2026-08-26BUG/MINOR: cache: Manage collisions on primary key 2026-08-26BUG/MINOR: haload: fix hld_new_usr()'s error path 2026-08-26BUG/MEDIUM: sink: do not create one implicit ring per logger copy 2026-08-26BUG/MEDIUM: sink: initialize the settings of the implicit log server 2026-08-26BUG/MEDIUM: flt-http-comp: Block HTX_FL_EOM flag till the end of compression 2026-08-26BUG/MINOR: flt-http-comp: Don't read next block to detect end of data 2026-08-26BUG/MINOR: fcgi-app: allow explicit filter declaration with non-cache/non-compression filters 2026-08-26BUG/MEDIUM: cache: ignore cache on redundant origin/referer 2026-08-25BUG/MEDIUM: sink: do not hold the sft lock around ring_dispatch_messages() 2026-08-25BUG/MEDIUM: connection: fix an infinite loop in the fc_pp_tlv() fetch 2026-08-25BUG/MEDIUM: mux-h1: close the connection on a short content-length 2026-08-24BUG/MINOR: haload: -ee could burst past its floor when many users fail at once 2026-08-24BUG/MINOR: haload: split the rate exactly across threads 2026-08-24BUG/MINOR: haload: make -e react to request timeouts too 2026-08-24BUG/MINOR: haload: count timed-out requests as errors, not successes 2026-08-19BUG/MEDIUM: sink: pre-initialize the implicit log forwarding server 2026-08-19BUG/MINOR: dns: schedule idle task after setting its thread 2026-08-19BUG/MINOR: resolvers: accept fields at the response boundary 2026-08-18BUG/MINOR: ssl/cli: fix frontend-not-found detection in 'show ssl sni -f' 2026-08-18BUG/MINOR: haproxy: fix out-of-scope tmpdir usage in do_chroot() 2026-08-18BUG/MEDIUM: pollers: really create the poller pipes in builds without threads 2026-08-18BUG/MEDIUM: tasks: don't type-pun state and tid in builds without threads 2026-08-18BUG/MEDIUM: ssl: isolate TLS session resumption per authentication policy 2026-08-18BUG/MINOR: ssl: isolate TLS session resumption per crt-list filter 2026-08-18BUG/MEDIUM: ssl: isolate TLS session resumption per X509 server certificate 2026-08-18BUG/MINOR: ssl: apply tune.ssl.lifetime to TLS1.3 sessions on BoringSSL/AWS-LC 2026-08-18BUG/MEDIUM: ssl: enforce tune.ssl.lifetime across TLS1.3 session renewals 2026-08-17BUG/MEDIUM: ssl: Fix unprotected 'ssl_sock_choose_sni_ctx' calls 2026-08-17BUG/MINOR: ssl: release the previous client cert reference at depth > 0 2026-08-17BUG/MINOR: ssl: Fix leak of X509_NAME in traces 2026-08-17BUG/MINOR: conn: Do not check 'sess_el' list on frontend connections in __trace_enabled 2026-08-14BUG/MINOR: mux-h2: harden h2_dump_h2s_info() against potentially null h2s->sd 2026-08-14BUG/MINOR: uri-auth: never risk to dereference a NULL on error path 2026-08-14BUG/MINOR: log: fix double-free error when error in parse_loger occurs 2026-08-14BUG/MEDIUM: tasks: don't type-pun state and tid in builds without threads 2026-08-14BUG/MEDIUM: pollers: create the poller pipes in builds without threads 2026-08-14BUG/MINOR: qpack: missing shift count check in qpack_get_varint() (UB) 2026-08-14BUG/MINOR: spoe: check snprintf() return value in spoe_set_var/spoe_unset_var 2026-08-13BUG/MINOR: payload: fix handshake length off-by-4 in ssl_hello_sni/alpn 2026-08-13CLEANUP: debug: make __BUG_ON() use abort_with_line() 2026-08-13MINOR: debug: rely on the __dbg_cnt_ counter for _BUG_ON_ONCE() 2026-08-13MINOR: debug: make a pair of __BUG_ON() for modern and obsolete linkers 2026-08-13CLEANUP: debug: remove the unneeded do { } while (0) on __BUG_ON() 2026-08-13MINOR: debug: avoid the break in __BUG_ON() 2026-08-13MINOR: debug: unify __BUG_ON() and __BUG_ON_ONCE() 2026-08-13MINOR: debug: pass the type to the __BUG_ON*() macros 2026-08-13DEBUG: deduplicate __ABORT_NOW() between DEBUG_USE_ABORT and ha_crash_now() 2026-08-13DEBUG: cli: add a "debug dev abort" debugging command 2026-08-13MINOR: debug: check the match count in __BUG_ON_ONCE() and not in complain() 2026-08-13DEBUG: cli: unstatify cli_process_cmdline() 2026-08-13BUG/MEDIUM: bwlim: fix a stick-table entry leak in shared mode 2026-08-13BUG/MEDIUM: http: fix authority parsing for absolute-form URI with empty path 2026-08-12BUG/MINOR: server: fix off-by-one error when parsing and copying source port range 2026-08-12BUG/MINOR: hq_interop: fix potential NULL dereference in _hq_trace_http() 2026-08-12BUG/MINOR: h3: fix potential NULL pointer dereference in _h3_trace_header() 2026-08-12BUG/MINOR: server: fix memory leak on "default-server" parsing failures 2026-08-12BUG/MINOR: quic: avoid a division by zero in the BBR pacing interval 2026-08-12BUG/MINOR: ssl: reject an embedded NUL in the full-DN ssl_*_dn() fetches 2026-08-12BUG/MINOR: ssl: reject an embedded NUL in the ssl_*_dn(entry) fetches 2026-08-12BUG/MINOR: wurfl: fix memory leak of information list and patch strings at deinit 2026-08-12BUG/MEDIUM: cache: do not release an entry under the cache read lock 2026-08-12BUG/MINOR: cache: do not retain imcomplete or stripped secondary entry 2026-08-12BUG/MEDIUM: cache: retain the primary or secondary entry only when detaching its row 2026-08-10BUG/MEDIUM: hlua_fcn: ensure systematic bref cleanup for patref list iterator 2026-08-10BUG/MEDIUM: lua: resume Channel:send() from the unsent part of the string 2026-08-07BUG/MINOR: quic: drop multiple Retry on same connection 2026-08-07BUG/MEDIUM: quic: prevent out-of-bound read on wrapping CRYPTO content 2026-08-07BUG/MINOR: mux-h2: strip the userinfo when deriving :authority for a server 2026-08-07BUG/MINOR: debug: only dump the trace once in __BUG_ON_ONCE() 2026-08-07BUG/MINOR: lb-chash: bound the walk when the saved cursor changed tree 2026-08-07BUG/MEDIUM: session: don't release a reversed connection twice on error 2026-08-07BUG/MINOR: connection: reserve the whole CRC32C TLV before saving its pointer 2026-08-07BUG/MEDIUM: fd: release the port range entry in host byte order 2026-08-07BUG/MINOR: acme: restrict the permissions of the generated account key 2026-08-07BUG/MINOR: ssl: reject server certificate names containing a NUL byte 2026-08-07BUG/MEDIUM: acme: don't delete a NULL token from the map 2026-08-07BUG/MEDIUM: ssl: require a full-length AEAD tag when decrypting with AES-GCM 2026-08-07BUG/MINOR: jwt: don't take an extra reference on the certificate public key 2026-08-07BUG/MEDIUM: jwe: validate the secret length against the algorithm of the token 2026-08-07BUG/MEDIUM: log: always reserve room for trailing 0 when using CBOR encoding helpers 2026-08-07BUG/MINOR: mux-fcgi: sanitize the STDERR records before logging them 2026-08-07BUG/MEDIUM: http-ana: check the cookie rewrite result before moving the offsets 2026-08-07BUG/MEDIUM: sock: bound the recvmsg() length when receiving old sockets 2026-08-07BUG/MEDIUM: stick-tables: use the same bucket for string keys with a NUL 2026-08-07BUG/MEDIUM: http-ana: don't crash on "keep-query" in a response redirect 2026-08-07BUG/MINOR: mux-fcgi: don't call fcgi_strm_destroy() on a NULL stream 2026-08-07BUG/MEDIUM: spoe: clear the applet pointer when the applet fails to start 2026-08-07BUG/MEDIUM: mux-fcgi: check the room left before appending the index 2026-08-06BUG/MINOR: hlua: use a local buffer to format the socket addresses 2026-08-06BUG/MINOR: stats-file: reject tgid 0 when preloading shm objects 2026-08-06BUG/MEDIUM: hpack: encode long methods and schemes using the long form 2026-08-06BUG/MINOR: proxy: release watcher in "show default-server" on CLI abort 2026-08-06BUG/MINOR: proxy: release watcher in various commands on CLI abort 2026-08-05BUG/MINOR: proxy: fix "show backend" 2026-08-03BUG/MINOR: proxy: fix default-server leak on post-parsing cleanup 2026-08-03BUG/MINOR: ech: fix label at end of compound statement 2026-08-03BUG/MINOR: server: check strdup return on server-template ID generation 2026-08-03BUG/MINOR: server: check strdup return value on server ID 2026-07-31BUG/MINOR: haload: fix stale global variables affecting URL allocations 2026-07-30BUG/MEDIUM: filter: Disable auto-close on channel during TCP payload filtering 2026-07-30BUG/MEDIUM: counters: preserve shared.tg pointer on 'clear counters all' 2026-07-30BUG/MINOR: ech: reject an ECH store with no usable private key 2026-07-30BUG/MINOR: ech: propagate error from load_echkeys() 2026-07-30BUG/MINOR: haload: fix rate limit bypass during stream errors 2026-07-29BUG/MINOR: cli: do not reject the "/" form of "show fd" 2026-07-29BUG/MINOR: cli: use the current argument to parse the FD spec in "show fd" 2026-07-29BUG/MINOR: server: fix check reuse-pool in srv_settings_cpy() 2026-07-29BUG/MINOR: server: duplicate server alt_proto in srv_settings_cpy() 2026-07-29BUG/MINOR: server: fix QUIC on server-template 2026-07-28BUG/MAJOR: ssl/ocsp: lock the OCSP response around reads in the stapling callback 2026-07-28BUG/MEDIUM: sample: reject the deprecated protobuf group wire types 2026-07-28BUG/MEDIUM: peers: check the available room before encoding dict values 2026-07-28BUG/MINOR: slz: avoid undefined shifts when building the word byte by byte 2026-07-28BUG/MINOR: slz: fix the adler32 accumulators signedness on 32-bit 2026-07-28BUG/MINOR: slz: do not append a block to an already finished stream 2026-07-28BUG/MEDIUM: slz: bound the bits wasted by the 9-bit literals 2026-07-28BUG/MINOR: slz: use the exact switch cost for the last literals of a block 2026-07-28BUG/MINOR: slz: do not read past the end of the input around the match loop 2026-07-28BUG/MINOR: http-rules: fix release of a failed "set-cookie-fmt" redirect rule 2026-07-28BUG/MINOR: htx: Transfer HTX_FL_EOM flag on success in htx_append_msg() 2026-07-28BUG/MINOR: htx: Perform raw copy for messages of same size in htx_copy_msg() 2026-07-28BUG/MEDIUM: tools: make string encoding possible to fail instead of truncating 2026-07-27BUG/MINOR: http-htx: check the strdup() of the "lf-string" http reply argument 2026-07-27BUG/MINOR: http-act: reject a negative capture id in the capture actions 2026-07-27BUG/MINOR: http-act: work on a copy of the sample in del-headers-bin 2026-07-27BUG/MINOR: http-act: restore the response buffer state in the early-hint action 2026-07-27BUG/MINOR: http-act: fix a double free of the map reference on a parsing error 2026-07-27BUG/MINOR: http-act: fix a double free of the regex on a rule parsing error 2026-07-27BUG/MINOR: http-ana: fix a one-byte over-read in the client-side cookie parser 2026-07-27BUG/MINOR: h3: don't use a block pointer to roll back a partial HTX conversion 2026-07-27BUG/MINOR: h2: don't use a block pointer to roll back a partial HTX conversion 2026-07-27BUG/MINOR: h1: report the right error position on authority/host mismatch 2026-07-27BUG/MINOR: http-htx: check the trash allocation in http_scheme_based_normalize() 2026-07-27BUG/MINOR: http: fix an out-of-bounds read in http_get_host_port() on empty host 2026-07-27BUG/MINOR: http-fetch: fix a NULL channel dereference in smp_fetch_body() 2026-07-27BUG/MEDIUM: http-fetch: reject a negative capture id in capture.{req,res}.hdr 2026-07-27BUG/MEDIUM: http-fetch: don't parse a non-HTTP check buffer as an HTX message 2026-07-27BUG/MINOR: http-htx: fix the length moved when removing a header value 2026-07-24BUG/MINOR: haload: fix CPU topology detection by omitting forced "nbthread" 2026-07-24BUG/MEDIUM: mux-h1: Always adjust case for all outgoing headers as expected 2026-07-24DEBUG: fd: catch access attempts to closed FDs 2026-07-24BUG/MEDIUM: ssl: Put CO_ER_SSL_KEYUPDATE at the right place 2026-07-24BUG/MEDIUM: ssl: Handle non-application data record while splicing 2026-07-23BUG/MEDIUM: ssl: Spell HAVE_VANILLA_OPENSSL correctly 2026-07-23BUG/MINOR: haload: fix display glitches by flushing stdout in summary 2026-07-23BUG/MINOR: haload: set default thread count to 1 2026-07-23BUG/MINOR: haload: fix use-after-free upon updating task expiration 2026-07-23BUG/MEDIUM: proxy: protect "show errors" against backend deletion 2026-07-22BUG/MINOR: resolvers: do not index resolvers names in the proxies 2026-07-22BUG/MEDIUM: server: Properly check for streams before deletion 2026-07-21BUG/MEDIUM: proxy: protect show backend against be deletion 2026-07-21BUG/MEDIUM: proxy: protect "show servers ..." against backend deletion 2026-07-21BUG/MEDIUM: proxy: protect "show servers ..." against server deletion 2026-07-21BUG/MINOR: sample: Fix bytes() when length it greater than remaining data 2026-07-21BUG/MEDIUM: sample: Adjust sample size capacity after pointer shift for ltrim() 2026-07-21BUG/MEDIUM: sample: Adjust sample size capacity after pointer shift for bytes() 2026-07-21BUG/MEDIUM: net-helper: Adjust sample size capacity after pointer shift 2026-07-21BUG/MINOR: mux-h1: Don't delay send if message with c-l was fully sent 2026-07-16CLEANUP: event_hdl: Use BUG_ON_STATIC() 2026-07-16DEBUG: add BUG_ON_STATIC(): a compile-time BUG_ON() 2026-07-16BUG/MINOR: ssl: fix proxy lookup for show ssl sni 2026-07-16BUG/MEDIUM: protobuf: fix nested path bypass in field lookup 2026-07-16BUG/MEDIUM: protobuf: adjust sample size capacity after pointer shift 2026-07-15BUG/MEDIUM: ssl-gencert: Don't forget to free memory when done 2026-07-15BUG/MEDIUM: stats: Ensure that Origin is valid on POSTs 2026-07-10BUG/MEDIUM: cache: reattach the row when a secondary entry is incomplete 2026-07-10BUG/MINOR: shctx: fix shctx_row_data_get() when offset exceeds a block 2026-07-10BUG/MEDIUM: stats: subject "stats admin" accesses to "stats scope" filtering 2026-07-10BUG/MEDIUM: applet: Reenable reads in applet context if requesting a connection 2026-07-10BUG/MINOR: hlua: Apply socket timeout on server side only 2026-07-08BUG/MINOR: http-conv: Make url-dec failed if no space for trailing null byte 2026-07-08BUG/MINOR: stream: Fix custom max-retries initialization when setting backend 2026-07-08BUG/MINOR: stream: Fix custom timeouts initialization when setting backend 2026-07-08BUG/MEDIUM: chunk: Review chunks usage to not retrieve a large buffer by error 2026-07-08BUG/MINOR: sample: Fix a possible underflow on be2hex for large chunk size 2026-07-08BUG/MEDIUM: tcpcheck: Add proxy used for healthcheck sections in proxies list 2026-07-08BUG/MINOR: hbuf: treat unexpected escape sequences as literals 2026-07-08BUG/MINOR: haload: fix spurious task wakeup in hld_strm_task() 2026-07-06BUG/MEDIUM: fd: Fix a deadlock when closing other tgroups fds 2026-07-06BUG/MINOR: quic: ignore STREAM after MUX closure on BE side 2026-07-06BUG/MEDIUM: mux_quic: complete stream shutdown for read channel 2026-07-06BUG/MEDIUM: mux_quic: do not free QCS if STOP_SENDING to sent 2026-07-03BUG/MINOR: trace/quic_frame: use buf, not trace_buf in chunk_frm_appendf() 2026-07-03BUG/MINOR: mux_quic: prevent multiple STOP_SENDING emission per stream 2026-07-03BUG/MEDIUM: h3: fix parser desync on error with multiple frames 2026-07-02BUG/MINOR: http-htx: Don't by-pass HTX API when merging cookie values 2026-07-02BUG/MINOR: mux-quic: Fix handling EOM after in qcs_http_rcv_buf() 2026-07-02BUG/MAJOR: htx: Don't swap buffers for empty HTX message with an error 2026-07-02BUG/MINOR: tools: fix invalid character detection in strl2ic() 2026-07-02BUG/MINOR: init: fix default global settings being overwritten by -G 2026-07-01BUG/MEDIUM: servers: Use a refcount for port_range and free it properly 2026-07-01BUG/MINOR: sample: set SMP_F_CONST on srv_name fetch 2026-06-30BUG/MEDIUM: server: initialise agent.health in srv_settings_init() 2026-06-29BUG/MINOR: h3: adjust HTTP headers traces 2026-06-29BUG/MINOR: hq-interop: support transcoding of absolute URI 2026-06-29BUG/MINOR: hq-interop: fix transcoding of wrapping response buffer 2026-06-26BUG/MEDIUM: mux_quic: fix memory leak of rx app_buf on stream free 2026-06-26BUG/MEDIUM: h3: fix trace crash on frontend response headers 2026-06-24BUG/MEDIUM: mux-quic: Drain the given amount of data in qcs_http_reset_buf() 2026-06-24BUG/MEDIUM: mux-spop: Truly drain outgoing data when the stream is closed 2026-06-24BUG/MEDIUM: mux-h2: Truly drain outgoing HTX data when the stream is closed 2026-06-24BUG/MEDIUM: mux-fcgi: Truly drain outgoing HTX data when the stream is closed 2026-06-24BUG/MINOR: poller: fix wait time calculation that is always 1 extra ms 2026-06-24DEBUG: cli: relax tid check in "debug dev task" for recent sched changes 2026-06-24BUG/MEDIUM: h3: increment unknown request payload length 2026-06-22BUG/MINOR: hq-interop: support response buffer wrapping 2026-06-22BUG/MINOR: hq-interop: support full demux buf on large response 2026-06-22BUG/MEDIUM: hlua: Properly report EOS when http applet exits 2026-06-19BUG/MINOR: hq-interop: prevent reset if missing content-length 2026-06-18BUG/MINOR: hq-interop: reject too big content 2026-06-16BUG/MEDIUM: mux-fcgi: fix uint16_t overflow in drl += drp 2026-06-16BUG/MEDIUM: http-act: Make a copy of the sample expr in (set/add)-headers-bin 2026-06-16BUG/MEDIUM: mux_quic: fix freeze transfer after QCS rxbuf realign 2026-06-16BUG/MINOR: hpack-tbl: add missing NULL check after hpack_dht_defrag() 2026-06-15BUG/MEDIUM: ssl: Don't free the early data buffer too early 2026-06-15BUG/MINOR: quic: fix rxbuf settings on backend side 2026-06-15BUG/MINOR: mux-h1: Properly resolve file path for 'h1-case-adjust-file' 2026-06-15BUG/MEDIUM: http-ana: Don't ignore L7 retry errors 2026-06-15BUG/MINOR: http-ana: Remove a debugging memset on redirect 2026-06-15DEBUG: stconn: Add a BUG_ON on shut flags when the endpoint is shut 2026-06-12BUG/MINOR: server: fix add server with consistent hash balancing 2026-06-12BUG/MEDIUM: h3: Properly handle PUSH_PROMISE on backend connections 2026-06-11BUG/MINOR: cpu-topo: use ha_diag_notice() to report thread creations 2026-06-11BUG/MEDIUM: ktls: defer enabling TLS ULP on a socket until connected 2026-06-10BUG/MEDIUM: acme: stuck ACME task when authz is already "valid" 2026-06-09BUG/MINOR: quic: fix Initial length value in sent packets 2026-06-08BUG/MEDIUM: checks: Dequeue checks on purge 2026-06-08BUG/MINOR: acl: report "ACL" not "map" in ACL ID lookup failures 2026-06-08BUG/MEDIUM: xprt_qmux: implement ->get_ssl_sock_ctx() to get the SSL laye 2026-06-08BUG/MEDIUM: threads: Fiw build when using no thread 2026-06-07BUG/MEDIUM: regex: initialize the match array earlier during boot 2026-06-05BUG/MINOR: tcpcheck: Override external check if healthcheck section is set 2026-06-05BUG/MINOR: mux_quic: do not interrupt recv on error/incomplete data 2026-06-05BUG/MEDIUM: mux_quic: prevent risk of infinite loop on recv 2026-06-04BUG/MEDIUM: server/checks: Support healtcheck keyword on default-server lines 2026-06-04BUG/MEDIUM: check: Ignore small-buffer option when starting an external check 2026-06-04BUG/MEDIUM: check: Skip tcpcheck post-config for external checks 2026-06-03BUG/MEDIUM: chunk: do not rely on small trash by default for expressions 2026-06-03BUG/MINOR: jwe: don't write randoms past MAX_DECRYPTED_CEK_LEN in RSA_PKCS1_PADDING 2026-06-03BUG/MEDIUM: stream: Don't use small buffer on queuing with a request data filter 2026-06-03BUG/MEDIUM: vars: Properly eval set-var-fmt action for emtpy log-format string 2026-06-03BUG/MEDIUM: channel: Fix condition to know if a channel may send 2026-06-02BUG/MINOR: haterm: also apply the tcp-bind-opts to clear TCP "bind" lines 2026-06-02BUG/MINOR: haterm: do not try to bind QUIC when not supported 2026-06-02BUG/MINOR: startup: unbreak chroot with CAP_SYS_CHROOT 2026-06-02BUG/MINOR: http-act: Properly handle final evaluation in pause action 2026-06-01BUG/MINOR: tasks: Increase the right niced_task counter 2026-06-01BUG/MEDIUM: leastconn: Unlock the write lock on allocation failure 2026-06-01BUG/MINOR: mux-spop: Fix possible off-by-one OOB read in spop_get_varint() 2026-06-01BUG/MINOR: applet: Commit changes into input buffer after sending HTX data 2026-06-01BUG/MEDIUM: ssl: Make sure the alpn length is small enough 2026-06-01BUG/MEDIUM: htx: Fix headers rollback on partial copy in htx_xfer() 2026-06-01BUG/MEDIUM: mux-h1: Dup connection/upgrade value to parse it when making headers 2026-06-01BUG/MINOR: cache: Fix copy of value when parsing maxage 2026-06-01BUG/MEDIUM: h3: fix MAX_PUSH_ID handling 2026-06-01BUG/MEDIUM: qmux: Close connection on invalid frame 2026-05-29BUG/MEDIUM: resolvers: Wait a bit before calling the xprt prepare_srv 2026-05-29BUG/MINOR: cache: fix cache tree iteration 2026-05-29BUG/MINOR: quic: Fix another buffer overflow with sockaddr_in46 2026-05-28BUG/MEDIUM: threads: ignore max-threads-per-group when thread-groups is set 2026-05-28BUG/MINOR: threads: set at least grp_max when mtpg is too small 2026-05-28BUG/MEDIUM: lua: register hlua_init() as a pre-check to fix crash without Lua config 2026-05-28BUG/MINOR: quic: update drs->lost before calling on_ack_recv 2026-05-28BUG/MEDIUM: quic: reset consecutive_losses on exit from recovery period (cubic) 2026-05-28BUG/MEDIUM: quic: reset cwnd in slow_start on persistent congestion (cubic) 2026-05-28BUG/MINOR: quic: fix ack range node pool_free call passing wrong pointer type 2026-05-28BUG/MINOR: mux_quic: prevent BE reuse with an errored conn 2026-05-28BUG/MINOR: mux_quic: fix BE conn removal on app shutdown 2026-05-28BUG/MINOR: mux_quic: open an idle QCS on reset on BE side 2026-05-28BUG/MINOR: mux-h2: Count padding for connection flow control on error path 2026-05-28BUG/MEDIUM: lua: defer Lua VM initialisation to the first Lua config keyword 2026-05-28BUG/MINOR: quic: Fix memory leak in quic_deallocate_dghdlrs() 2026-05-28BUG/MEDIUM: quic: handle ECONNREFUSED on RX side 2026-05-27BUG/MINOR: qpack: fix huff_dec() error handling in qpack_decode_fs() 2026-05-27BUG/MINOR: qpack: fix sign bit mask in qpack_decode_fs_pfx() 2026-05-27BUG/MINOR: qpack: fix potential null-pointer dereference in qpack_dht_insert() 2026-05-27BUG/MINOR: qpack: Fix index calculation in debug functions 2026-05-27Revert "BUG/MEDIUM: dns: fix long loops in additional records parse on name failure" 2026-05-27BUG/MINOR: qmux: reject too large initial record 2026-05-27BUG/MEDIUM: qmux: do not crash on receiving an invalid first frame 2026-05-27BUG/MEDIUM: qmux: do not crash on too large record 2026-05-27BUG/MEDIUM: cpu-topo: Enforce thread-hard-limit on policy 2026-05-27BUG/MINOR: mux-h1: H2 preface rejection doesn't update stick-table glitches 2026-05-27BUG/MINOR: ssl-gencert: validate SNI characters to prevent SAN certificate injection 2026-05-27BUG/MINOR: tcpcheck: Check LDAP response to not read more data than available 2026-05-26BUG/MINOR: mux-spop: Use relative offset to compute contig data in demux buf 2026-05-26BUG/MINOR: mux-fcgi: Use relative offset to compute contig data in demux buf 2026-05-26BUG/MEDIUM: h1-htx: Sanitize parsing to properly handle upgrade requests 2026-05-26BUG/MEDIUM: mux-fcgi: reject stream ID 0 for application records 2026-05-26BUG/MEDIUM: jwe: substitute random CEK on RSA1_5 decryption failure per RFC 7516 #11.5 2026-05-26BUG/MINOR: jwe: enforce GCM tag length to 128 bits 2026-05-26BUG/MINOR: quic: reject packet too short for HP decryption 2026-05-26BUG/MINOR: qmux: do not crash on frame parsing issue 2026-05-26BUG/MINOR: hlua: prevent Lua from passing CR/LF/NUL in HTTP headers 2026-05-26BUG/MINOR: h3: add missing break on rcv_buf() 2026-05-26BUG/MEDIUM: auth: fix unconfigured password NULL deref 2026-05-26BUG/MINOR: h3: reject server MAX_PUSH_ID frame 2026-05-26BUG/MINOR: h3: adjust error on PUSH_PROMISE frame reception 2026-05-26BUG/MINOR: h3: reject client CANCEL_PUSH frame 2026-05-26BUG/MINOR: h3: reject server push stream 2026-05-26BUG/MEDIUM: h3: reject client push stream 2026-05-26BUG/MEDIUM: tools: insert an XXH64 layer on the PRNG output 2026-05-26BUG/MINOR: addons/51d: NUL-terminate headers before passing them to Trie API 2026-05-26BUG/MINOR: resolvers: switch to a better PRNG for query IDs 2026-05-26BUG/MINOR: ssl-hello: make use of the null-terminated servername 2026-05-26BUG/MINOR: payload: fix the handshake length bounds check smp_client_hello_parse() 2026-05-26BUG/MINOR: base64: return empty string for empty input in base64dec() 2026-05-26BUG/MINOR: http-ext: always check remaining data when reading rfc7239 nodeport 2026-05-26BUG/MEDIUM: acme: protect against risk of null-deref on connection failure 2026-05-26BUG/MINOR: http-fetch: check against the whole token in get_http_auth() 2026-05-26BUG/MINOR: sample: request an extra output byte for the url_dec converter 2026-05-26BUG/MINOR: resolvers: relax size checks in authority record parsing 2026-05-26BUG/MINOR: cache: also recognize directives in the form "token=" 2026-05-26BUG/MEDIUM: cache: always verify the primary hash in get_secondary_entry() 2026-05-26BUG/MEDIUM: h1: limit status codes to 3 digits by default 2026-05-26BUG/MEDIUM: h1: drop headers whose names contain invalid chars 2026-05-25BUG/MINOR: haterm: fix the random suffix multiplication 2026-05-25BUG/MINOR: sample: limit the be2hex converter's chunk size 2026-05-25BUG/MINOR: init: use more than ha_random64() for the cluster secret 2026-05-25BUG/MINOR: dict: fix refcount race on insert collision 2026-05-25BUG/MINOR: log: look for the end of priority before the end of the buffer 2026-05-25BUG/MINOR: mux-h2: validate HEADERS frame length before reading stream dep 2026-05-25BUG/MINOR: resolvers: fix risk of appending garbage past the domain name 2026-05-25BUG/MINOR: resolvers: fix room for trailing zero in resolv_dn_label_to_str() 2026-05-25BUG/MINOR: log: free logformat expr on compile failure in cfg_parse_log_profile 2026-05-25BUG/MEDIUM: cache: fix a refcount leak for missed secondary entries 2026-05-25BUG/MEDIUM: tcpcheck/spoe: bound the SPOP error code to valid values 2026-05-25BUG/MEDIUM: regex: allocate a large enough pcre2 match for all matches 2026-05-25BUG/MEDIUM: log-forward: make sure the month is unsigned 2026-05-23BUG/MEDIUM: acme: NUL terminate response buffer before PEM parsing 2026-05-22BUG/MEDIUM: cli: Fix parsing of pattern finishing a command payload 2026-05-22BUG/MEDIUM: hlua: Fix integer underflow when receiving line from lua cosocket 2026-05-22BUG/MINOR: tcpchecks: Limit parsing of agent-check reply to the buffer 2026-05-22BUG/MEDIUM: dict: hold lock while decrementing refcount in dict_entry_unref 2026-05-22BUG/MINOR: quic: fix ODCID lookup from derived value 2026-05-22BUG/MEDIUM: ssl-gencert: Unlock LRU cache if failing to generate certificate 2026-05-22BUG/MEDIUM: resolvers: Fix test on dn label size in resolv_dn_label_to_str() 2026-05-22BUG/MEDIUM: applet: Properly handle receives of size 0 2026-05-21BUG/MINOR: ocsp: Manage date too far away in the future 2026-05-21BUG/MEDIUM: net_helper: fix a remaining possibly infinite loop in converters 2026-05-20BUG/MEDIUM: htx: Alloc a chunk of right size in htx_replace_blk_value() 2026-05-20BUG/MEDIUM: applet: Fix transfer of HTX data to the applet 2026-05-20BUG/MINOR: htx: Fix value of HTX_XFER_HDRS_ONLY flag 2026-05-20BUG/MINOR: mux_quic: do not exceed stream.max-concurrent on backend side 2026-05-20BUG/MEDIUM: servers: Don't forget to set srv_hash when needed 2026-05-20BUG/MINOR: prevent conn leak in case of xprt_qmux init failure 2026-05-20BUG/MEDIUM: servers: Store the connection hash with the parameter cache 2026-05-19BUG/MINOR: backend: fix balance hash calculation when using hash-type none 2026-05-19BUG/MINOR: server: accept server IDs above 2^31 and clarify error message 2026-05-19BUG/MINOR: httpclient-cli: fix uninit variable in error label 2026-05-19BUG/MINOR: h1: Don't mask websocket protocol if multiple protocols used 2026-05-19BUG/MEDIUM: h1: Skip all h2c values from Upgrade headers during parsing 2026-05-19BUG/MINOR: httpclient-cli: Destroy http-client context if failing to start it 2026-05-19BUG/MINOR: server: Properly handle init-state value during haproxy startup 2026-05-19BUG/MINOR: jws: Add missing return value check (EVP_PKEY_get_bn_param) 2026-05-19BUG/MINOR: jws: fix OpenSSL 3.0 version check from > to >= 2026-05-19BUG/MEDIUM: limits: properly account for global.maxpipes in compute_ideal_maxconn() 2026-05-18BUG/MINOR: jwt: fix possible memory leak in convert_ecdsa_sig() error path 2026-05-18BUG/MINOR: check: properly report errno in chk_report_conn_err() 2026-05-18BUG/MINOR: sock: store the connection error status 2026-05-16BUG/MINOR: session/trace: use distinct flags for SESS_EV_END and _ERR 2026-05-15BUG/MINOR: resolvers: fix missing task_idle destruction in resolvers_destroy() 2026-05-15BUG/MINOR: resolvers: fix leaked fields on cfg_parse_resolvers() error paths 2026-05-15BUG/MINOR: resolvers: fix leaked dgram and dns_ring struct in parse_resolve_conf() 2026-05-15BUG/MINOR: resolvers: report the expression error in the do-resolve() action parser 2026-05-15BUG/MINOR: proxy: use proxy_drop() in parse_new_proxy() error path 2026-05-15BUG/MINOR: dns: fix dangling dgram pointer on dns_dgram_init() failure path 2026-05-15BUG/MINOR: resolvers: fix dangling list pointer in resolvers_new() error paths 2026-05-15BUG/MEDIUM: server/cli: unlock server lock on failure in cli_parse_set_server 2026-05-15BUG/MINOR: servers: use proper source of pool_conn_name in srv_settings_cpy() 2026-05-15BUG/MINOR: server: better handling of OOM in srv_set_fqdn() 2026-05-15BUG/MEDIUM: dns: fix memory leak of sockaddr in dns_session_init() error path 2026-05-15BUG/MEDIUM: resolvers: fix name compression pointer validation in resolv_read_name() 2026-05-15BUG/MEDIUM: dns: fix long loops in additional records parse on name failure 2026-05-15BUG/MINOR: config/dns: properly fail on duplicate nameserver name detection 2026-05-15BUG/MINOR: backend: correct parameter value validation in get_server_ph_post() 2026-05-13BUG/MINOR: xprt_qstrm: fix conflicting prototype 2026-05-13BUG/MEDIUM: http-client: Only consume input buffer when hc one is empty 2026-05-13BUG/MEDIUM: dict: hold read lock while incrementing refcount in dict_insert 2026-05-11BUG/MEDIUM: tasks: Keep the TASK_RUNNING flag until queued 2026-05-11BUG/MINOR: uri-auth: fix possible null-deref in latest fix for leaks 2026-05-11BUG/MINOR: mqtt: fix PUBLISH flags validation that want all bits to be set 2026-05-11BUG/MINOR: mqtt: connack parser uses wrong bit for SUBSCRIPTION_IDENTIFIERS_AVAILABLE 2026-05-11BUG/MINOR: mqtt: connect parser uses wrong bit field for TOPIC_ALIAS_MAXIMUM 2026-05-11BUG/MINOR: mqtt: connack parser returns MQTT_NEED_MORE_DATA on unknown property 2026-05-11BUG/MINOR: cfgcond: make KQUEUE check for GTUNE_USE_KQUEUE not GTUNE_USE_EPOLL 2026-05-11BUG/MINOR: cache: fix memory leak in parse_cache_rule error path 2026-05-11BUG/MINOR: uri-auth: avoid leaks on initialization error 2026-05-11BUG/MINOR: auth: free user groups on error paths in userlist_postinit() 2026-05-11BUG/MINOR: tools: fix memory leak in env_expand() error path 2026-05-11BUG/MINOR: http-act: set-status() must check the response message, not the request 2026-05-11BUG/MINOR: http-fetch: make http_first_req() check for HTTP first 2026-05-11BUG/MINOR: http-fetch: fix smp_fetch_hdr_ip()'s handling of brackets for IPv6 2026-05-11BUG/MINOR: mux-h1: only check h1s if not NULL 2026-05-11BUG/MINOR: cfgparse-listen: do not emit extraneous line in rule order warnings 2026-05-09BUG/MEDIUM: servers: Only requeue servers if they are up 2026-05-07BUG/MEDIUM: stick-table: properly check permissions on CLI's set/clear cmd 2026-05-07BUG/MEDIUM: jwe: Fix jwt.decrypt_alg_list to work correctly 2026-05-07BUG/MEDIUM: mux-h2: fix the detection of the ext connect support 2026-05-07Revert "BUG/MINOR: mux-h2: condition the processing of 8441 extension to global setting" 2026-05-07Revert "BUG/MEDIUM: cli: fix master CLI connection slot leak on client disconnect" 2026-05-07BUG/MEDIUM: mux-h2: Properly consume padding for DATA frames 2026-05-07BUG/MINOR: mux_quic: refresh timeout only if I/O performed 2026-05-07BUG/MINOR: mux_quic: fix max stream ID reuse estimation 2026-05-06BUG/MINOR: ssl: Use the sequence number with kTLS and TLS 1.2 2026-05-06BUG/MEDIUM: mux_quic: adjust qcc_is_dead() to account detached streams 2026-05-05DEBUG: haterm: Add hstream flags in the trace messages 2026-05-05BUG/MINOR: haterm: Report a 400-bad-request error on receive error 2026-05-05BUG/MINOR: haterm: Fix condition to use direct data forwarding 2026-05-05BUG/MEDIUM: haterm: Properly handle client timeout 2026-05-05BUG/MEDIUM: haterm: Properly handle end of request and end of response 2026-05-05BUG/MINOR: haterm: Don't set HTX_FL_EOM flag on 100-Continue responses 2026-05-05BUG/MEDIUM: haterm: Subscribe for receives until request was fully drained 2026-05-05BUG/MINOR: haterm: Fix a possible integer overflow on the request body length 2026-05-05BUG/MINOR: haterm: Immediately report error when draining the request 2026-05-05BUG/MEDIUM: h1_htx: Remove reverved block on error during contig chunks parsing 2026-05-05BUG/MINOR: http-fetch: Fix http_auth_bearer() when custom header is used 2026-05-05BUG/MINOR: http_fetch: Check return values of unchecked buffer operations 2026-05-05BUG/MINOR: acme: contact mail should be optional, don't pass ToS bool 2026-05-05BUG/MINOR: h2: only accept :protocol with extended CONNECT 2026-05-05BUG/MINOR: mux-h2: condition the processing of 8441 extension to global setting 2026-05-05BUG/MINOR: h2: add decoding for :protocol in traces 2026-05-04BUG/MINOR: mworker/cli: check ci_insert() return value in pcli_parse_request() 2026-05-04BUG/MEDIUM: mworker/cli: fix user and operator permission via @@ in master CLI 2026-05-04BUG/MAJOR: http-ana: fix private session retrieval on NTLM 2026-05-04BUG/MEDIUM: ssl/sample: check output buffer size in aes_cbc_enc converter 2026-05-04BUG/MAJOR: net_helper: also fix tcp_options_list for OOB write loop 2026-05-04BUG/MINOR: resolvers: Free opts on parse error in resolv_parse_do_resolve() 2026-05-04BUG/MINOR: resolvers: Fix lookup for a hostname in the state-file tree 2026-05-04BUG/MINOR: resolvers: Free new requester on error when linking a resolution 2026-05-04BUG/MINOR: tcpcheck: Properly report error for http health-checks 2026-05-04BUG/MINOR: dns: always validate the source address in responses 2026-05-04BUG/MAJOR: mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in h2c_dec_hdrs() 2026-05-04BUG/MEDIUM: mux-h2: fix the body_len to check when parsing request trailers 2026-05-04BUG/MINOR: quic: fix trace crash on datagram receive 2026-05-04BUG/MEDIUM: acme: fix stalled renewal when opportunistic DNS check fails 2026-05-04BUG/MINOR: quic: fix buffer overflow with sockaddr_in46 2026-04-30CI: github: add DEBUG_STRICT=2 to ASAN jobs 2026-04-30BUG/MINOR: pattern: release the reference on failure to load from file 2026-04-30BUG/MINOR: map: do not leak a map descriptor on load error 2026-04-30BUG/MINOR: acl: fix a possible arg corruption in smp_fetch_acl_parse() 2026-04-30BUG/MEDIUM: cli: fix master CLI connection slot leak on client disconnect 2026-04-30BUG/MINOR: quic: handle cases where we don't have an address 2026-04-30BUG/MINOR: hpack: validate idx > 0 in hpack_valid_idx() 2026-04-30BUG/MINOR: vars: only print first invalid char in fill_desc() 2026-04-30BUG/MINOR: vars: don't store the variable twice with set-var-fmt 2026-04-30BUG/MINOR: vars: make parse_store() return error on var_set() failure 2026-04-30BUG/MINOR: sink: do not free existing sinks on allocation error 2026-04-29BUG/MINOR: acme: skip auth/challenge steps when newOrder returns a certificate 2026-04-29BUG/MEDIUM: acme: fix segfault on newOrder with empty authorizations 2026-04-29BUG/MINOR: http-htx: Don't normalize emtpy path for OPTIONS requests 2026-04-29BUG/MEDIUM: mux-fcgi: Properly handle full buffer for FCGI_PARAM record 2026-04-29BUG/MINOR: net_helper: fix incomplete decoding in sample_conv_eth_vlan 2026-04-29BUG/MINOR: net_helper: fix out-of-bounds read in sample_conv_tcp_options_list 2026-04-29BUG/MINOR: net_helper: fix out-of-bounds read in tcp_fullhdr_find_opt 2026-04-29BUG/MINOR: payload: prevent integer overflow in distcc token parsing 2026-04-29BUG/MINOR: payload: validate minimum keyshare_len in smp_fetch_ssl_keyshare_groups 2026-04-29BUG/MINOR: fix various typos and spelling mistakes in user-visible messages 2026-04-29BUG/MEDIUM: tasks: Do not loop in task_schedule() if a task is running 2026-04-29BUG/MAJOR: mux-h1: Deal with true 64-bits integer to emit chunks size 2026-04-29BUG/MEDIUM: h1: Enforce the authority validation during H1 request parsing 2026-04-29BUG/MAJOR: http: forbid comma character in authority value 2026-04-29BUG/MEDIUM: http-htx: Loop on full host value during scheme based normalization 2026-04-29BUG/MEDIUM: http-htx: Don't use data from HTX message to update authority 2026-04-29BUG/MAJOR: http-htx: Store new host in a chunk for scheme-based normalization 2026-04-28BUG/MINOR: mux_quic: free frames emitted with QMux 2026-04-27BUG/MINOR: http_ana: use scf to report term_evts in http_wait_for_request() 2026-04-27BUG/MEDIUM: mux_h1: fix stack buffer overflow in h1_append_chunk_size() 2026-04-27BUG/MINOR: peers: fix wrong flag reported twice for dump_flags 2026-04-27BUG/MINOR: peers: fix logical "and" when checking for local in PEER_APP_ST_STARTING 2026-04-27BUG/MINOR: sample: fix NULL strm dereference in sample_conv_when 2026-04-27BUG/MINOR: sample: fix memory leak in smp_resolve_args error paths 2026-04-27BUG/MINOR: sample: fix memory leak in check_when_cond() when ACL is not found 2026-04-27BUG/MINOR: tools: free previously allocated strings on strdup failure in backup_env() 2026-04-27BUG/MINOR: tools: fix memory leak in indent_msg() on out of memory 2026-04-27BUG/MINOR: tools: my_memspn/my_memcspn wrong cast causing incorrect byte reading 2026-04-27BUG/MINOR: tree-wide: fix a few user-visible spelling mistakes from dev7 2026-04-27BUG/MINOR: ssl: fix double-free on failed realloc in ssl_sock.c 2026-04-25BUG/MINOR: ssl: fix memory leak on realloc failure in acme.ips 2026-04-25BUG/MINOR: ssl: fix memory leaks on realloc failure in ssl_sock.c 2026-04-25BUG/MINOR: ssl: fix memory leaks on realloc failure in ssl_ckch.c 2026-04-24BUG/MEDIUM: stats: fix crash on 'dump stats-file' 2026-04-24BUG/MINOR: tcpcheck: Allow connection reuse without prior traffic 2026-04-24BUG/MINOR: mux_quic: do not release conn on qcc_recv() for QMux 2026-04-24BUG/MINOR: xprt_qstrm: prevent crash if conn release on MUX wake 2026-04-24BUG/MINOR: xprt_qstrm: ensure all local TPs are allocated 2026-04-24BUG/MINOR: mux_quic: prevent crash on qc_frm_free() with QMux 2026-04-23BUG/MEDIUM: mux-h1: Force close mode for bodyless message announcing a C-L 2026-04-23BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as well 2026-04-23BUG/MINOR: server: fix a possible leak of an error message in dynamic servers 2026-04-23Revert "BUG/MINOR: stream: add the newly added SF_TXN_* flags to strm_show_flags()" 2026-04-23BUG/MINOR: debug: properly mark the entire libs archive read-only 2026-04-23BUG/MINOR: stream: add the newly added SF_TXN_* flags to strm_show_flags() 2026-04-23BUG/MINOR: servers: fix last_sess date calculation 2026-04-23BUG/MINOR: compression: properly disable request when setting response 2026-04-23BUG/MINOR: stream: Add SF_TXN_HTTP/SF_TXN_PCLI flags in strm_show_flags() 2026-04-23BUG/MEDIUM: tcpcheck: Release temporary small chunk when retrying on http-check 2026-04-23BUG/MINOR: tcpcheck: Fix a leak on deinit by releasing ruleset's conf.file 2026-04-23BUG/MINOR: tcpcheck: Don't release ruleset when parsing 'spop-check' ruleset 2026-04-23BUG/MINOR: http-act: fix a typo in a "del-heeaders-bin" error message 2026-04-23BUG/MINOR: mux-h1: Fix test to skip trailers from chunked messages 2026-04-23BUG/MINOR: mux-h1: Fix condition to send null-chunk for bodyless message 2026-04-23BUG/MINOR: log: also wait for the response when logging response headers 2026-04-23BUG/MINOR: H2: Don't forget to free shared_rx_bufs on failure 2026-04-23BUG/MINOR: h2: Don't look at the exclusive bit for PRIORITY frame 2026-04-23BUG/MINOR: h2: make tune.h2.log-errors actually work 2026-04-22BUG/MAJOR: net_helper: ip.fp infinite loop on malformed tcp options 2026-04-22BUG/MEDIUM: tasks: Make sure we don't schedule a task already running 2026-04-22BUG/MINOR: mux-h2: count a proto error when rejecting a stream on parsing error 2026-04-22BUG/MINOR: mux-h2: count a protocol error when failing to parse a trailer 2026-04-22BUG/MINOR: reg-tests: make shell syntax errors fatal 2026-04-21BUG/MAJOR: sched: protect task->expire on 32-bit platforms 2026-04-21BUG/MINOR: sample: adjust dependencies for channel output bytes counters 2026-04-21BUG/MINOR: log: consider format expression dependencies to decide when to log 2026-04-20BUG/MEDIUM: checks: Don't forget to set the "alt_proto" field 2026-04-20BUG/MINOR: xprt_qstrm: reduce max record length check 2026-04-20BUG/MINOR: mux_quic: convert QCC rx.rlen to 64bits 2026-04-20BUG/MINOR: xprt_qstrm: read record length in 64bits 2026-04-17BUG/MINOR: mux_quic: limit avail_streams() to 2^62 2026-04-17BUG/MINOR: task: fix uninitialised read in run_tasks_from_lists() 2026-04-16BUG/MEDIUM: mux-h2: ignore conn->owner when deciding if a connection is dead 2026-04-15BUG/MINOR: threads: properly set the number of tgroups when non using policy 2026-04-15BUG/MINOR: acme: fix fallback state after failed initial DNS check 2026-04-15BUG/MEDIUM: peers: trash of expired entries delayed after fullresync 2026-04-14BUG/MEDIUM: htx: Don't count delta twice when block value is replaced 2026-04-14BUG/MEDIUM: htx: Properly handle block modification during defragmentation 2026-04-13BUG/MINOR: haterm: don't apply the default pipe size margin twice 2026-04-13BUG/MINOR: acme: don't pass NULL into format string 2026-04-13BUG/MINOR: acme: read the wildcard flag from the authorization response 2026-04-13BUG/MINOR: haterm: preserve the pipe size margin for splicing 2026-04-13BUG/MEDIUM: cli: Properly handle too big payload on a command line 2026-04-13BUG/MINOR: log: Fix error message when using unavailable fetch in logfmt 2026-04-13BUG/MINOR: quic: do not use hardcoded values in QMux TP frame builder 2026-04-13BUG/MINOR: ot: fixed wrong NULL check in flt_ot_parse_cfg_group() 2026-04-13BUG/MINOR: ot: removed dead code in flt_ot_parse_cfg_str() 2026-04-13BUG/MINOR: xprt_qstrm: do not parse record length on read again 2026-04-13BUG/MINOR: mux_quic: prevent QMux crash on qcc_io_send() error path 2026-04-10BUG/MEDIUM: haterm: Properly initialize the splicing support for haterm 2026-04-10Revert "BUG/MEDIUM: haterm: Move all init functions of haterm in haterm_init.c" 2026-04-10BUG/MINOR: do not crash on QMux reception of BLOCKED frames 2026-04-10BUG/MINOR: quic: increment pos pointer on QMux transport params parsing 2026-04-10BUG/MINOR: mux-quic: fix potential NULL deref on qcc_release() 2026-04-10BUG/MINOR: hlua: fix use-after-free of HTTP reason string 2026-04-10BUG/MEDIUM: mux-fcgi: prevent record-length truncation with large bufsize 2026-04-10BUG/MINOR: sample: fix info leak in regsub when exp_replace fails 2026-04-09BUG/MEDIUM: samples: Fix handling of SMP_T_METH samples 2026-04-09BUG/MINOR: haterm: Return the good start-line for 100-continue interim message 2026-04-09BUG/MINOR: http-act: validate decoded lengths in *-headers-bin 2026-04-09BUG/MINOR: spoe: fix pointer arithmetic overflow in spoe_decode_buffer() 2026-04-09BUG/MINOR: resolvers: fix memory leak on AAAA additional records 2026-04-08BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals 2026-04-08Revert "BUG: hlua: fix stack overflow in httpclient headers conversion" 2026-04-08BUG/MEDIUM: connection: Wake the stconn on error when failing to create mux 2026-04-07BUG/MINOR: peers: fix OOB heap write in dictionary cache update 2026-04-07BUG/MEDIUM: chunk: fix infinite loop in get_larger_trash_chunk() 2026-04-07BUG/MEDIUM: chunk: fix typo allocating small trash with bufsize_large 2026-04-07BUG/MINOR: hlua: fix format-string vulnerability in Patref error path 2026-04-07BUG/MINOR: hlua: fix stack overflow in httpclient headers conversion 2026-04-07BUG: hlua: fix stack overflow in httpclient headers conversion 2026-04-07BUG/MEDIUM: jwe: fix memory leak in jwt_decrypt_secret with var argument 2026-04-07BUG/MEDIUM: jwt: fix heap overflow in ECDSA signature DER conversion 2026-04-07BUG/MEDIUM: jwe: fix NULL deref crash with empty CEK and non-dir alg 2026-04-07BUG/MEDIUM: payload: validate SNI name_len in req.ssl_sni 2026-04-05BUG/MEDIUM: tcpcheck: Properly retrieve tcpcheck type to install the best mux 2026-04-04BUG/MINOR: counters: fix unexpected 127 char GUID truncation for shm-stats-file objects 2026-04-03BUG/MEDIUM: tcpcheck/server: Fix parsing of healthcheck param for dynamic servers 2026-04-03BUG/MINOR: http-act: fix a typo in the "pause" action error message 2026-04-03BUG/MEDIUM: mux-h1: Disable 0-copy forwarding when draining the request 2026-04-03BUG/MEDIUM: haterm: Move all init functions of haterm in haterm_init.c 2026-04-03BUG/MINOR: ssl: fix memory leak in ssl_fc_crtname by using SSL_CTX ex_data index 2026-04-03BUG/MINOR: cfgcond: fail cleanly on missing argument for "feature" 2026-04-03BUG/MINOR: cfgcond: always set the error string on awslc_api checks 2026-04-03BUG/MINOR: cfgcond: always set the error string on openssl_version checks 2026-04-03BUG/MINOR: cfgcond: properly set the error pointer on evaluation error 2026-04-02BUG/MINOR: mux_quic: fix uninit for QMux emission 2026-04-02DEBUG: connection/flags: add QSTRM flags for the decoder 2026-04-02BUG/MINOR: quic: fix documentation for transport params decoding 2026-04-01BUG/MINOR: tcpcheck: Use tcpcheck context for expressions parsing 2026-04-01BUG/MINOR: tcpcheck: Don't enable http_needed when parsing HTTP samples 2026-04-01BUG/MINOR: tcpcheck: Remove unexpected flag on tcpcheck rules for httchck option 2026-04-01BUG/MINOR: http_act: Make set/add-headers-bin compatible with ACL conditions 2026-04-01BUG/MINOR: http_act: Properly handle decoding errors in *-headers-bin actions 2026-03-31BUG/MEDIUM: mux-h1: Don't set MSG_MORE on bodyless responses forwarded to client 2026-03-31BUG/MEDIUM: map/cli: CLI commands lack admin permission checks 2026-03-31BUG/MEDIUM: ssl/ocsp: ocsp commands are missing permission checks 2026-03-31BUG/MEDIUM: ssl/cli: tls-keys commands are missing permission checks 2026-03-31BUG/MEDIUM: map/cli: map/acl commands warn when accessed without admin level 2026-03-31BUG/MEDIUM: ssl/ocsp: ocsp commands warn when accessed without admin level 2026-03-31BUG/MEDIUM: ssl/cli: tls-keys commands warn when accessed without admin level 2026-03-30BUG/MINOR: net_helper: fix length controls on ip.fp tcp options parsing 2026-03-30BUG/MINOR: stconn: Always declare the SC created from healthchecks as a back SC 2026-03-30BUG/MINOR: quic: close conn on packet reception with incompatible frame 2026-03-27BUG/MEDIUM: htx: Fix htx_xfer() to consume more data than expected 2026-03-27BUG/MINOR: acme: fix task allocation leaked upon error 2026-03-27BUG/MEDIUM: acme: skip doing challenge if it is already valid 2026-03-27BUG/MINOR: http-ana: Only consider client abort for abortonclose 2026-03-27BUG/MINOR: config: Properly test warnif_misplaced_* return values 2026-03-27BUG/MINOR: config: Warn only if warnif_cond_conflicts report a conflict 2026-03-26BUG/MEDIUM: check: Don't reuse the server xprt if we should not 2026-03-25BUG/MINOR: acme: permission checks on the CLI 2026-03-25BUG/MINOR: ech: permission checks on the CLI 2026-03-23BUG/MINOR: acme/cli: fix argument check and error in 'acme challenge_ready' 2026-03-23BUG/MINOR: acme: replace atol with len-bounded __strl2uic() for retry-after 2026-03-23BUG/MINOR: acme: free() DER buffer on a2base64url error path 2026-03-23BUG/MINOR: acme: NULL check on my_strndup() 2026-03-23Revert "BUG/MEDIUM: mux-h2: make sure to always report pending errors to the stream" 2026-03-23BUG/MINOR: http_htx: fix null deref in http-errors config check 2026-03-23BUG/MINOR: acme/cli: wrong argument check in 'acme renew' 2026-03-23BUG/MINOR: acme: wrong error when checking for duplicate section 2026-03-23BUG/MINOR: acme: leak of ext_san upon insertion error 2026-03-23BUG/MEDIUM: acme: fix multiple resource leaks in acme_x509_req() 2026-03-20BUG/MINOR: qpack: fix 62-bit overflow and 1-byte OOB reads in decoding 2026-03-20BUG/MINOR: sock: adjust accept() error messages for ENFILE and ENOMEM 2026-03-19BUG/MINOR: mworker: fix sort order of mworker_proc in 'show proc' 2026-03-19BUG/MINOR: mworker/cli: fix show proc pagination losing entries on resume