HAProxy known bugs for maintenance branch 3.3 :  1 

This is maintenance branch 3.3 whose latest version is 3.3.17. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches. In short, if you are running any 3.3 version other than 3.3.17, you're running with known bugs.

Quick links

Versions available in this branch

This branch contains the following releases :

DateVersionComment
2026-10-143.3.17 ⇐ last
2026-09-283.3.16 
2026-09-243.3.15 
2026-08-273.3.14 
2026-07-293.3.13 
2026-07-033.3.12 
2026-06-263.3.11 
2026-05-113.3.10 
2026-05-063.3.9 
2026-04-303.3.8 
2026-04-233.3.7 
2026-03-193.3.6 
2026-03-093.3.5 
2026-02-193.3.4 
2026-02-123.3.3 
2026-01-293.3.2 
2025-12-193.3.1 
2025-11-263.3.0 

Fixes for known bugs pending in this branch since the last release (3.3.17)

These fixes have already been queued for the next 3.3 release but no version was released with them yet. Note that fixes are backported several at a time from the development branch to maintenance branches, and the absence of a fix here doesn't mean none will be issued soon.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in the latest version of this branch by category :

TotalCRITICALMAJORMEDIUMMINOR
1 0 0 1 0

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2026-10-21BUG/MEDIUM: task: do not destroy twice the tasks already killed in mworker_cleantasks()

Known bugs fixed in the development branch after the last commit in this branch

It is important to understand that not all of these commits are necessarily relevant to this version, but clicking on them will show the bug description. All fixes are made first in the development branch and then backported to the maintenance branches. This ensures no fix is lost when upgrading. If a fix was marked for backporting to this branch and is not there yet, it's likely that it is still missing. Do not hesitate to ask on the haproxy mailing list if you feel like a fix has been skipped.

DateSubject
2026-10-26BUG/MEDIUM: listener: enforce rate-limit sessions across thread groups
2026-10-26BUG/MINOR: peers: forget the remote table when ignoring an unknown key type
2026-10-26BUG/MINOR: peers: don't use remote table definitions from a previous session
2026-10-26BUG/MINOR: peers: compare the received expiration date as unsigned
2026-10-26BUG/MINOR: peers: account incoming sessions in the per-thread applet counters
2026-10-26BUG/MINOR: peers: reject over-long varints in intdecode()
2026-10-26BUG/MINOR: peers: don't lose the peer's version when the hello is fragmented
2026-10-26BUG/MINOR: peers: forget the appctx when the peer session init fails
2026-10-26BUG/MEDIUM: peers: fix byte order of last_get on updates without identifier
2026-10-26BUG/MEDIUM: peers: do not keep a dict entry cached when its update was not sent
2026-10-26BUG/MINOR: deviceatlas: consume a scheduled update before loading it
2026-10-26BUG/MINOR: deviceatlas: use the result's property type when printing
2026-10-26BUG/MINOR: deviceatlas: ignore the scheduler's update in progress marker
2026-10-26BUG/MINOR: deviceatlas: refresh the user-agent evidence id after a reload
2026-10-26BUG/MEDIUM: deviceatlas: isolate threads while swapping the reloaded atlas
2026-10-23BUG/MEDIUM: filters: Don't propagate a close while a filter waits on a channel
2026-10-23BUG/MEDIUM: hlua/filters: Never arm the analysis timer for the lua wake-ups
2026-10-23BUG/MEDIUM: hlua/filters: Make Channel.may_recv relative to the filter's data
2026-10-23BUG/MINOR: hlua/filters: Restrict HTTPMessage.set_eom/unset_eom to visible data
2026-10-23BUG/MEDIUM: hlua/filters: make HTTPMessage.eom/may_recv relative to the filter's data
2026-10-23BUG/MINOR: hlua/filters: Track the payload phase per channel
2026-10-23BUG/MEDIUM: connection: don't leak the fd of an accepted connection
2026-10-23BUG/MINOR: h3: do not wait after Tx realloc failure
2026-10-23BUG/MINOR: h3: do not retry on trailers too large
2026-10-23BUG/MEDIUM: h3: prevent conn failure on trailers decoding without space
2026-10-23BUG/MAJOR: h3: always check :path for all scheme values
2026-10-22BUG/MEDIUM: server: Don't use the cached ALPN for websocket
2026-10-22BUG/MINOR: http-ana: call the http_reset filter callback on L7 retries
2026-10-22BUG/MINOR: promex: don't loop forever when a module skips a time series
2026-10-22BUG/MINOR: mux_quic: fix overflow on avail_streams
2026-10-22BUG/MINOR: mux_quic: fix MAX_STREAMS limit
2026-10-22BUG/MINOR: quic: fix "show quic" filtered connection
2026-10-22BUG/MEDIUM: mux_quic: fix FIN received with an already known offset
2026-10-21BUG/MINOR: mux-quic: prevent send corruption on buf realign
2026-10-21BUG/MINOR: jwt: enforce the ECDSA signature length in jwt_verify
2026-10-21BUG/MINOR: jwe: only match the exact "ALL" word in jwt.decrypt_{alg,enc}_list
2026-10-21BUG/MINOR: jwe: reject non-empty encrypted keys with "dir" and "ECDH-ES"
2026-10-21BUG/MINOR: jwe: only accept exact "alg" and "enc" names in JWE tokens
2026-10-21BUG/MINOR: jws: fix ECDSA_SIG leak in jws_b64_signature()
2026-10-21BUG/MINOR: jwt: don't truncate binary HMAC secrets at the first NULL byte
2026-10-21BUG/MEDIUM: mux_quic: ensure FIN is reported after Rx data transfer
2026-10-21BUG/MEDIUM: mux_quic: fix crash on QCS double remote close
2026-10-21BUG/MEDIUM: task: do not destroy twice the tasks already killed in mworker_cleantasks()

Back to the list of branches and versions
Back to the HAProxy page