HAProxy known bugs for maintenance branch 3.2 :  1 

This is maintenance branch 3.2 whose latest version is 3.2.26. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches. In short, if you are running any 3.2 version other than 3.2.26, you're running with known bugs.

Quick links

Versions available in this branch

This branch contains the following releases :

DateVersionComment
2026-10-143.2.26 ⇐ last
2026-09-283.2.25 
2026-09-243.2.24 
2026-08-273.2.23 
2026-07-293.2.22 
2026-07-033.2.21 
2026-06-263.2.20 
2026-05-113.2.19 
2026-05-063.2.18 
2026-04-303.2.17 
2026-04-233.2.16 
2026-03-193.2.15 
2026-03-093.2.14 
2026-02-193.2.13 
2026-02-123.2.12 
2026-01-293.2.11 
2025-12-183.2.10 
2025-11-213.2.9 
2025-11-073.2.8 
2025-10-233.2.7 
2025-10-033.2.6 
2025-09-233.2.5 
2025-08-133.2.4 
2025-07-093.2.3 
2025-07-023.2.2 
2025-06-113.2.1 
2025-05-283.2.0 

Fixes for known bugs pending in this branch since the last release (3.2.26)

These fixes have already been queued for the next 3.2 release but no version was released with them yet. Note that fixes are backported several at a time from the development branch to maintenance branches, and the absence of a fix here doesn't mean none will be issued soon.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in the latest version of this branch by category :

TotalCRITICALMAJORMEDIUMMINOR
1 0 0 1 0

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2026-10-21BUG/MEDIUM: task: do not destroy twice the tasks already killed in mworker_cleantasks()

Known bugs fixed in the development branch after the last commit in this branch

It is important to understand that not all of these commits are necessarily relevant to this version, but clicking on them will show the bug description. All fixes are made first in the development branch and then backported to the maintenance branches. This ensures no fix is lost when upgrading. If a fix was marked for backporting to this branch and is not there yet, it's likely that it is still missing. Do not hesitate to ask on the haproxy mailing list if you feel like a fix has been skipped.

DateSubject
2026-11-03BUG/MINOR: ssl/ckch: free the new instance when ckch_inst_rebuild() fails
2026-11-03BUG/MINOR: filters: Reject id-less implicit instances of multi-instance classes
2026-11-03BUG/MEDIUM: mux-h1: don't drop pending output on a short content-length
2026-11-03BUG/MINOR: compression: pass the configured level to slz
2026-11-03BUG/MINOR: flt-http-comp: check the block returned by htx_replace_blk_value()
2026-11-03BUG/MEDIUM: compression: fix incompatibility between compression and large-buffers
2026-11-03BUG/MINOR: sample: realign the ungrpc converter on message boundaries
2026-11-03BUG/MINOR: quic: fix the header protection key length dump with AWS-LC
2026-11-02BUG/MEDIUM: leastconn: reset the smallest key when backups take over
2026-11-02BUG/MINOR: http-ana: fix response compression for applets
2026-11-02BUG/MEDIUM: proxy: fix stick table expired entries cleanup on stopping
2026-11-02BUG/MEDIUM: ssl: skip TLS 1.3 suites in the FIPS TLS 1.2 cipher check
2026-10-30BUG/MINOR: debug: fix "debug dev fd" crash on unknown address families
2026-10-30BUG/MINOR: sample: fix NULL dereference in the ltime/utime converters
2026-10-29BUG/MINOR: errors: reset diagnostic buffers after thread cleanup
2026-10-29BUG/MINOR: checks/log: force implicit UDP checks as TCP for log backend
2026-10-28BUG/MEDIUM: mux-spop: Don't include DALLOC/DFULL flags in SPOP_CF_DEM_BLOCK_ANY
2026-10-28BUG/MINOR: server: free the sample expression when it is not usable on a server
2026-10-28BUG/MINOR: ssl: support SCTL in TLS 1.3 Certificate messages
2026-10-28BUG/MINOR: ssl: fix a double-free of the .sctl buffer with several contexts
2026-10-28BUG/MEDIUM: ssl: support SCTL with AWS-LC
2026-10-28BUG/MEDIUM: ssl: fix an out-of-bounds read on SSL_CTX switch with a .sctl file
2026-10-28BUG/MEDIUM: ssl-gencert: fix a NULL dereference with QUIC listeners
2026-10-28BUG/MINOR: connection: check the IP header length in NetScaler CIP
2026-10-28BUG/MINOR: connection: check the NetScaler CIP header length against received data
2026-10-28BUG/MINOR: stick-table: reject negative stick counter IDs in sc-* actions
2026-10-28BUG/MINOR: cfgparse-listen: reject negative capture lengths
2026-10-28BUG/MINOR: tools: make strl2irc() and strl2llrc() reject a lone minus sign
2026-10-28BUG/MINOR: thread: don't turn reversed thread ranges into "even"
2026-10-28BUG/MINOR: h3: reset HTX message after trailers parsing error
2026-10-28BUG/MINOR: mux_quic: fix stream elasticity dec on qcm_init() failure
2026-10-28BUG/MINOR: mux_quic: fix ALPN retrieval from server
2026-10-28BUG/MINOR: mux_quic: fix possible BUG_ON() after frame alloc failure
2026-10-28BUG/MEDIUM: mux_quic: do not reset timeout after shut
2026-10-28BUG/MAJOR: mux_quic: remove data not yet sent on reset stream
2026-10-27BUG/MEDIUM: applet: check buffer sizes before HTX transfer
2026-10-27BUG/MINOR: hlua: unlock Patref before add_bulk type error
2026-10-26BUG/MEDIUM: listener: enforce rate-limit sessions across thread groups
2026-10-26BUG/MINOR: peers: forget the remote table when ignoring an unknown key type
2026-10-26BUG/MINOR: peers: don't use remote table definitions from a previous session
2026-10-26BUG/MINOR: peers: compare the received expiration date as unsigned
2026-10-26BUG/MINOR: peers: account incoming sessions in the per-thread applet counters
2026-10-26BUG/MINOR: peers: reject over-long varints in intdecode()
2026-10-26BUG/MINOR: peers: don't lose the peer's version when the hello is fragmented
2026-10-26BUG/MINOR: peers: forget the appctx when the peer session init fails
2026-10-26BUG/MEDIUM: peers: fix byte order of last_get on updates without identifier
2026-10-26BUG/MEDIUM: peers: do not keep a dict entry cached when its update was not sent
2026-10-26BUG/MINOR: deviceatlas: consume a scheduled update before loading it
2026-10-26BUG/MINOR: deviceatlas: use the result's property type when printing
2026-10-26BUG/MINOR: deviceatlas: ignore the scheduler's update in progress marker
2026-10-26BUG/MINOR: deviceatlas: refresh the user-agent evidence id after a reload
2026-10-26BUG/MEDIUM: deviceatlas: isolate threads while swapping the reloaded atlas
2026-10-23BUG/MEDIUM: filters: Don't propagate a close while a filter waits on a channel
2026-10-23BUG/MEDIUM: hlua/filters: Never arm the analysis timer for the lua wake-ups
2026-10-23BUG/MEDIUM: hlua/filters: Make Channel.may_recv relative to the filter's data
2026-10-23BUG/MINOR: hlua/filters: Restrict HTTPMessage.set_eom/unset_eom to visible data
2026-10-23BUG/MEDIUM: hlua/filters: make HTTPMessage.eom/may_recv relative to the filter's data
2026-10-23BUG/MINOR: hlua/filters: Track the payload phase per channel
2026-10-23BUG/MEDIUM: connection: don't leak the fd of an accepted connection
2026-10-23BUG/MINOR: h3: do not wait after Tx realloc failure
2026-10-23BUG/MINOR: h3: do not retry on trailers too large
2026-10-23BUG/MEDIUM: h3: prevent conn failure on trailers decoding without space
2026-10-23BUG/MAJOR: h3: always check :path for all scheme values
2026-10-22BUG/MEDIUM: server: Don't use the cached ALPN for websocket
2026-10-22BUG/MINOR: http-ana: call the http_reset filter callback on L7 retries
2026-10-22BUG/MINOR: promex: don't loop forever when a module skips a time series
2026-10-22BUG/MINOR: mux_quic: fix overflow on avail_streams
2026-10-22BUG/MINOR: mux_quic: fix MAX_STREAMS limit
2026-10-22BUG/MINOR: quic: fix "show quic" filtered connection
2026-10-22BUG/MEDIUM: mux_quic: fix FIN received with an already known offset

Back to the list of branches and versions
Back to the HAProxy page