HAProxy known bugs for maintenance branch 3.2 :  16 

This is maintenance branch 3.2 whose latest version is 3.2.4. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches. In short, if you are running any 3.2 version other than 3.2.4, you're running with known bugs.

Quick links

Versions available in this branch

This branch contains the following releases :

DateVersionComment
2025-08-133.2.4 ⇐ last
2025-07-093.2.3 
2025-07-023.2.2 
2025-06-113.2.1 
2025-05-283.2.0 

Fixes for known bugs pending in this branch since the last release (3.2.4)

These fixes have already been queued for the next 3.2 release but no version was released with them yet. Note that fixes are backported several at a time from the development branch to maintenance branches, and the absence of a fix here doesn't mean none will be issued soon.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in the latest version of this branch by category :

TotalCRITICALMAJORMEDIUMMINOR
16 0 1 11 4

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2025-08-26BUG/MEDIUM: spoe: Improve error detection in SPOE applet on client abort
2025-08-26BUG/MEDIUM: http_ana: handle yield for "stats http-request" evaluation
2025-08-26BUG/MEDIUM: mux-spop: Reject connection attempts from a non-spop frontend
2025-08-26BUG/MINOR: quic: don't coalesce probing and ACK packet of same type
2025-08-26BUG/MAJOR: quic: fix INITIAL padding with probing packet only
2025-08-26BUG/MINOR: quic: do not emit probe data if CONNECTION_CLOSE requested
2025-08-26BUG/MEDIUM: quic: reset padding when building GSO datagrams
2025-08-26BUG/MEDIUM: ssl: apply ssl-f-use on every "ssl" bind
2025-08-26BUG/MEDIUM: mux-h2: fix crash on idle-ping due to unwanted ABORT_NOW
2025-08-26BUG/MEDIUM: mworker: more verbose error upon loading failure
2025-08-26BUG/MEDIUM: cli: Report inbuf is no longer full when a line is consumed
2025-08-26BUG/MINOR: spoe: Properly detect and skip empty NOTIFY frames
2025-08-26BUG/MINOR: mux-h1: fix wrong lock label
2025-08-26BUG/MEDIUM: quic: listener connection stuck during handshakes (OpenSSL 3.5)
2025-08-26BUG/MEDIUM: Remove sync sends from streams to applets
2025-08-26BUG/MEDIUM: stconn: Fix conditions to know an applet can get data from stream

Known bugs fixed in the development branch after the last commit in this branch

It is important to understand that not all of these commits are necessarily relevant to this version, but clicking on them will show the bug description. All fixes are made first in the development branch and then backported to the maintenance branches. This ensures no fix is lost when upgrading. If a fix was marked for backporting to this branch and is not there yet, it's likely that it is still missing. Do not hesitate to ask on the haproxy mailing list if you feel like a fix has been skipped.

DateSubject
2025-09-12BUG/MEDIUM: resolvers: Accept to create resolution without hostname
2025-09-12BUG/MEDIUM: resolvers: Make resolution owns its hostname_dn value
2025-09-12BUG/MEDIUM: resolvers: Test for empty tree when getting a record from DNS answer
2025-09-11BUG/MINOR: resolvers: Restore round-robin selection on records in DNS answers
2025-09-11BUG/MEDIUM: resolvers: Properly cache do-resolv resolution
2025-09-11BUG/MINOR: ocsp: prototype inconsistency
2025-09-11BUG/MINOR: ssl: Fix potential NULL deref in trace callback
2025-09-11BUG/MINOR: ssl: Potential NULL deref in trace macro
2025-09-11BUG/MEDIUM: jws: return size_t in JWS functions
2025-09-11BUG/MINOR: acme: null pointer dereference upon allocation failure
2025-09-11BUG/MAJOR: stream: Force channel analysis on successful synchronous send
2025-09-10BUG/MINOR: stick-table: make sure never to miss a process_table_expire update
2025-09-10BUG/MEDIUM: ssl: Fix a crash if we failed to create the mux
2025-09-10BUG/MEDIUM: ssl: Fix a crash when using QUIC
2025-09-10DEBUG: stick-tables: export stktable_add_pend_updates() for better reporting
2025-09-10BUG/MEDIUM: stick-tables: don't loop on non-expirable entries
2025-09-10BUG/MINOR: activity: fix reporting of task latency
2025-09-09BUG/MEDIUM: ssl: create the mux immediately on early data
2025-09-09BUG/MEDIUM: h1: Allow reception if we have early data
2025-09-09DEBUG: peers: export functions that use locks
2025-09-09DEBUG: stream: count the number of passes in the connect loop
2025-09-09BUG/MINOR: check: ensure checks are compatible with QUIC servers
2025-09-09BUG/MEDIUM: checks: fix ALPN inheritance from server
2025-09-09BUG/MINOR: hq-interop: adjust parsing/encoding on backend side
2025-09-09BUG/MEDIUM: mux-h2: Reinforce conditions to report an error to app-layer stream
2025-09-09BUG/MEDIUM: mux-h2: Report RST/error to app-layer stream during 0-copy fwding
2025-09-09BUG/MINOR: mux-h2: Remove H2_CF_DEM_DFULL flags when the demux buffer is reset
2025-09-09BUG/MEDIUM: mux-h2: Restart reading when mbuf ring is no longer full
2025-09-09BUG/MEDIUM: mux-h2; Don't block reveives in H2_CS_ERROR and H2_CS_ERROR2 states
2025-09-09BUG/MEDIUM: mux-h2: Reset MUX blocking flags when a send error is caught
2025-09-08BUG/MINOR: quic: properly support GSO on backend side
2025-09-08BUG/MINOR: pools: Fix the dump of pools info to deal with buffers limitations
2025-09-08BUG/MEDIUM: proxy: fix crash with stop_proxy() called during init
2025-09-06BUG/MEDIUM: ssl: Properly initialize msg_controllen.
2025-09-06BUG/MINOR: cpu_topo: work around a small bug in musl's CPU_ISSET()

Back to the list of branches and versions
Back to the HAProxy page