HAProxy known bugs for version v3.2.7 (maintenance branch 3.2) :  98 

This version (3.2.7) is a release belonging to maintenance branch 3.2 whose latest version is 3.2.12. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches.

Quick links

Other versions in the same branch

This branch contains the following releases :

DateVersionComment
2026-02-123.2.12 ⇐ last
2026-01-293.2.11 
2025-12-183.2.10 
2025-11-213.2.9 
2025-11-073.2.8 
2025-10-233.2.7 ⇐ yours
2025-10-033.2.6 
2025-09-233.2.5 
2025-08-133.2.4 
2025-07-093.2.3 
2025-07-023.2.2 
2025-06-113.2.1 
2025-05-283.2.0 

Known bugs affecting this version, and already fixed in the maintenance branch

These fixes have already been queued for a more recent 3.2 version. Some of them might have already been released in a more recent version than yours, and other ones might still be pending in the maintenance branch for a future release. The list may be empty if you're already on the latest version and no new fix was backported.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in this version by category :

TotalCRITICALMAJORMEDIUMMINOR
98 0 3 46 49

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2026-02-12BUG/MAJOR: quic: fix parsing frame type
2026-02-12BUG/MAJOR: quic: reject invalid token
2026-02-11BUG/MINOR: startup: handle a possible strdup() failure
2026-02-11BUG/MINOR: startup: fix allocation error message of progname string
2026-02-11BUG/MINOR: config: Fix setting of alt_proto
2026-02-11BUG/MEDIUM: lb-chash: always properly initialize lb_nodes with dynamic servers
2026-02-11BUG/MINOR: cpu-topo: count cores not cpus to distinguish core types
2026-02-11BUG/MEDIUM: threads: Atomically set TH_FL_SLEEPING and clr FL_NOTIFIED
2026-01-30BUG/MEDIUM: applet: Fix test on shut flags for legacy applets
2026-01-30BUG/MAJOR: applet: Don't call I/O handler if the applet was shut
2026-01-29BUG/MEDIUM: debug: only dump Lua state when panicking
2026-01-29BUG/MINOR: config: check capture pool creations for failures
2026-01-29BUG/MEDIUM: mux-h2: synchronize all conditions to create a new backend stream
2026-01-28BUG/MINOR: mworker/cli: fix show proc pagination using reload counter
2026-01-28BUG/MINOR: mworker/cli: 'show proc' is limited by buffer size
2026-01-27BUG/MINOR: ssl: fix error message of tune.ssl.certificate-compression
2026-01-23BUG/MEDIUM: mux-h1: Skip UNUSED htx block when formating the start line
2026-01-23BUG/MINOR: promex: Detach promex from the server on error dump its metrics dump
2026-01-23BUG/MINOR: hlua: consume error object if ignored after a failing lua_pcall()
2026-01-23BUG/MEDIUM: hlua: fix invalid lua_pcall() usage in hlua_traceback()
2026-01-23BUG/MINOR: proxy: fix deinit crash on defaults with duplicate name
2026-01-23BUG/MEDIUM: mux-quic: prevent BUG_ON() on aborted uni stream close
2026-01-23BUG/MEDIUM: ssl: fix generate-certificates option when SNI greater than 64bytes
2026-01-23BUG/MEDIUM: ssl: fix error path on generate-certificates
2026-01-23BUG/MEDIUM: log: parsing log-forward options may result in segfault
2026-01-23BUG/MEDIUM: promex: server iteration may rely on stale server
2026-01-23BUG/MINOR: cfgparse: fix "default" prefix parsing
2026-01-23BUG/MINOR: proxy: free persist_rules
2026-01-23BUG/MINOR: http_act: fix deinit performed on uninitialized lf_expr in release_http_map()
2026-01-23BUG/MEDIUM: quic: fix ACK ECN frame parsing
2026-01-23BUG/MINOR: hlua_fcn: ensure Patref:add_bulk() is given a table object before using it
2026-01-23BUG/MINOR: hlua_fcn: fix broken yield for Patref:add_bulk()
2026-01-09BUG/MINOR: cli/stick-tables: argument to "show table" is optional
2026-01-09BUG/MINOR: cfgparse: wrong section name upon error
2026-01-09BUG/MEDIUM: mworker: can't use signals after a failed reload
2026-01-09BUG/MINOR: backend: inspect request not response buffer to check for TFO
2026-01-09BUG/MINOR: backend: fix the conn_retries check for TFO
2026-01-09BUG/MEDIUM: ssl: Don't resume session for check connections
2026-01-09BUG/MEDIUM: ssl: Don't reuse TLS session if the connection's SNI differs
2026-01-09BUG/MINOR: sock-inet: ignore conntrack for transparent sockets on Linux
2026-01-07BUG/MEDIUM: stconn: Don't report abort from SC if read0 was already received
2026-01-07BUG/MEDIUM: http-ana: Properly detect client abort when forwarding response (v2)
2025-12-16BUG/MEDIUM: quic: Don't try to use hystart if not implemented
2025-12-15BUG/MEDIUM: quic: handle collision on CID generation
2025-12-15BUG/MINOR: check: only try connection reuse for http-check rulesets
2025-12-15BUG/MINOR: mux-h2: send the preface along with the first request if needed
2025-12-15BUG/MINOR: cfgparse-listen: update err_code for fatal error on proxy directive
2025-12-15BUG/MEDIUM: quic: support some ciphersuites and curves related options
2025-12-12BUG/MEDIUM: http-ana: Don't close server connection on read0 in TUNNEL mode
2025-12-12BUG/MINOR: ssl: Don't allow to set NULL sni
2025-12-12BUG/MINOR: quic/ssl: crash in ClientHello callback ssl traces
2025-12-12BUG/MEDIUM: connection: fix "bc_settings_streams_limit" typo
2025-12-12BUG/MINOR: jwt: Missing "case" in switch statement
2025-12-12BUG/MINOR: acme: fix ha_alert() call
2025-12-12BUG/MINOR: acme: warning ‘ctx’ may be used uninitialized
2025-12-12BUG/MINOR: acme: better challenge_ready processing
2025-12-12BUG/MINOR: acme: prevent creating map entries with dns-01
2025-12-12BUG/MINOR: acme: handle multiple auth with the same name
2025-12-12BUG/MEDIUM: cli: State the cli have no more data to deliver if it yields
2025-12-12BUG/MEDIUM: applet: Fix conditions to detect spinning loop with the new API
2025-12-12BUG/MINOR: http-ana: Reset analyse_exp date after 'wait-for-body' action
2025-12-12BUG/MEDIUM: h1-htx: Don't set HTX_FL_EOM flag on 1xx informational messages
2025-12-11BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards
2025-11-20BUG/MEDIUM: proxy: do not align proxy_per_tgroup beyond allocator's capabilities
2025-11-20BUG/MEDIUM: config: Use the mux protocol ALPN by default for listeners if forced
2025-11-20BUG/MEDIUM: queues: Don't forget to unlock the queue before exiting
2025-11-20BUG/MINOR: acme: alert when the map doesn't exist at startup
2025-11-20BUG/MINOR: ssl: remove dead code in ssl_sock_from_buf()
2025-11-20BUG/MINOR: mworker: wrong signals during startup
2025-11-20BUG/MEDIUM: mworker: signals inconsistencies during startup and reload
2025-11-20BUG/MINOR: quic-be: backend SSL session reuse fix (OpenSSL 3.5)
2025-11-20BUG/MEDIUM: h1: prevent a crash on HTTP/2 upgrade
2025-11-20BUG/MINOR: stick-tables: Fix return value for __stksess_kill()
2025-11-20BUG/MEDIUM: stick-tables: Always return the good stksess from stktable_set_entry
2025-11-20BUG/MINOR: check: fix reuse-pool if MUX inherited from server
2025-11-20BUG/MINOR: acme: can't override the default resolver
2025-11-20BUG/MEDIUM: acme: move from mt_list to a rwlock + ebmbtree
2025-11-20BUG/MINOR: acme: more explicit error when BIO_new_file()
2025-11-20BUG/MINOR: quic: close connection on CID alloc failure
2025-11-20BUG/MEDIUM: stick-tables: Make sure updates are seen as local
2025-11-20BUG/MINOR: config: Limit "tune.maxpollevents" parameter to 1000000
2025-11-20BUG/MEDIUM: connection/ssl: also fix the ssl_sock_io_cb() regarding idle list
2025-11-20BUG/MEDIUM: connection: do not reinsert a purgeable conn in idle list
2025-11-20Revert "BUG/MEDIUM: connections: permit to permanently remove an idle conn"
2025-11-07BUG/MINOR: acme: wrong dns-01 challenge in the log
2025-11-07BUG/MEDIUM: server: close a race around ready_srv when deleting a server
2025-11-05BUG/MEDIUM: connections: permit to permanently remove an idle conn
2025-11-05BUG/MEDIUM: mux-h2: make sure not to move a dead connection to idle
2025-11-05BUG/MEDIUM: mux-h1: fix 414 / 431 status code reporting
2025-11-05BUG/MINOR: resolvers: ensure fair round robin iteration
2025-11-05BUG/MINOR: ssl: returns when SSL_CTX_new failed during init
2025-11-05BUG/MINOR: resolvers: Apply dns-accept-family setting on additional records
2025-11-05BUG/MINOR: init: Do not close previously created fd in stdio_quiet
2025-11-05BUG/MEDIUM: ssl: Crash because of dangling ckch_store reference in a ckch instance
2025-10-27BUG/MEDIUM: cli: do not return ACKs one char at a time
2025-10-27BUG/MEDIUM: mt_list: Use atomic operations to prevent compiler optims
2025-10-27BUG/MINOR: stick-tables: properly index string-type keys
2025-10-27BUG/MEDIUM: applet: Improve again spinning loops detection with the new API
2025-10-27BUG/MEDIUM: mt_lists: Avoid el->prev = el->next = el

Back to the list of branches and versions
Back to the HAProxy page