HAProxy known bugs for version v2.4.24 (maintenance branch 2.4) :  201 

This version (2.4.24) is a release belonging to maintenance branch 2.4 whose latest version is 2.4.29. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches.

Quick links

Other versions in the same branch

This branch contains the following releases :

DateVersionComment
2025-04-222.4.29 ⇐ last
2024-11-082.4.28 
2024-06-182.4.27 
2024-04-052.4.26 
2023-12-142.4.25 
2023-08-192.4.24 ⇐ yours
2023-06-092.4.23 
2023-02-142.4.22 
2023-01-272.4.21 
2022-12-092.4.20 
2022-09-282.4.19 
2022-07-272.4.18 
2022-05-132.4.17 
2022-04-292.4.16 
2022-03-142.4.15 
2022-02-252.4.14 
2022-02-162.4.13 
2022-01-112.4.12 
2022-01-072.4.11 
2021-12-232.4.10 
2021-11-242.4.9 
2021-11-032.4.8 
2021-10-042.4.7 
2021-10-042.4.6 
2021-10-012.4.5 
2021-09-072.4.4 
2021-08-172.4.3 
2021-07-072.4.2 
2021-06-172.4.1 
2021-05-142.4.0 

Known bugs affecting this version, and already fixed in the maintenance branch

These fixes have already been queued for a more recent 2.4 version. Some of them might have already been released in a more recent version than yours, and other ones might still be pending in the maintenance branch for a future release. The list may be empty if you're already on the latest version and no new fix was backported.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in this version by category :

TotalCRITICALMAJORMEDIUMMINOR
201 0 5 75 121

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2025-04-22BUG/MINOR: server: check for either proxy-protocol v1 or v2 to send hedaer
2025-04-17BUG/MINOR: h2: always trim leading and trailing LWS in header values
2025-04-17BUG/MINOR: h2: reject extended connect for h2c protocol
2025-04-17BUG/MINOR: h1: do not forward h2c upgrade header token
2025-04-17BUG/MINOR: hlua: fix invalid errmsg use in hlua_init()
2025-04-17BUG/MINOR: backend: do not use the source port when hashing clientip
2025-04-17BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refs
2025-04-17BUG/MINOR: backend: do not overwrite srv dst address on reuse
2025-04-17BUG/MINOR: log: fix gcc warn about truncating NUL terminator while init char arrays
2025-04-17BUG/MEDIUM: peers: prevent learning expiration too far in futur from unsync node
2025-04-17BUG/MINOR: peers: fix expire learned from a peer not converted from ms to ticks
2025-04-17BUG/MEDIUM: hlua/cli: fix cli applet UAF in hlua_applet_wakeup()
2025-04-17BUG/MINOR: namespace: handle a possible strdup() failure
2025-04-17BUG/MINOR: cfgparse/peers: properly handle ignored local peer case
2025-04-17BUG/MINOR: cfgparse/peers: fix inconsistent check for missing peer server
2025-04-17BUG/MEIDUM: startup: return to initial cwd only after check_config_validity()
2025-04-17BUG/MINOR: cfgparse: fix NULL ptr dereference in cfg_parse_peers
2025-04-17BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer
2025-04-17BUG/MINOR: cli: Fix a possible infinite loop in _getsocks()
2025-04-17BUG/MINOR: cli: Fix memory leak on error for _getsocks command
2025-04-17BUG/MINOR: server: fix the "server-template" prefix memory leak
2025-04-17BUG/MINOR: tcp-rules: Don't forward close during tcp-response content rules eval
2025-04-17BUG/MINOR: fcgi: Don't set the status to 302 if it is already set
2025-04-17BUG/MEDIUM: filters: Handle filters registered on data with no payload callback
2025-04-17BUG/MINOR: cli: Wait for the last ACK when FDs are xferred from the old worker
2025-04-17BUG/MEDIUM: htx: wrong count computation in htx_xfer_blks()
2025-04-17BUG/MEDIUM: fd: mark FD transferred to another process as FD_CLONED
2025-04-17BUG/MEDIUM: clock: make sure now_ms cannot be TICK_ETERNITY
2025-04-17BUG/MEDIUM: spoe: Don't wakeup idle applets in loop during stopping
2025-04-17BUG/MINOR: spoe: Allow applet creation when closing the last one during stopping
2025-04-17BUG/MINOR: spoe: Check the shared waiting queue to shut applets during stopping
2025-04-17BUG/MEDIUM: ssl: chosing correct certificate using RSA-PSS with TLSv1.3
2025-04-17BUG/MINOR: ssl: put ssl_sock_load_ca under SSL_NO_GENERATE_CERTIFICATES
2025-04-17BUG/MINOR: stktable: fix big-endian compatiblity in smp_to_stkey()
2025-04-17BUG/MEDIUM: pattern: prevent uninitialized reads in pat_match_{str,beg}
2025-04-17BUG/MEDIUM: mux-h1: Fix how timeouts are applied on H1 connections
2025-04-17BUG/MINOR: server-state: Fix expiration date of srvrq_check tasks
2025-04-17BUG/MINOR: signal: register default handler for SIGINT in signal_init()
2025-04-17BUG/MINOR: h1-htx: Use default reason if not set when formatting the response
2025-04-17BUG/MEDIUM: http-ana: Reset request flag about data sent to perform a L7 retry
2025-04-17BUG/MEDIUM: sock: Remove FD_POLL_HUP during connect() if FD_POLL_ERR is not set
2025-04-17BUG/MEDIUM: http-ana: Don't release too early the L7 buffer
2025-04-17BUG/MEDIUM: mux-h2: Check the number of headers in HEADERS frame after decoding
2025-04-17BUG/MEDIUM: mux-h2: Increase max number of headers when encoding HEADERS frames
2025-04-17BUG/MINOR: http-ana: Adjust the server status before the L7 retries
2025-04-17BUG/MINOR: http_ana: Report -1 for %Tr for invalid response only
2025-04-17BUG/MINOR: peers: make sure to always apply offsets to now_ms in expiration
2025-04-17BUG/MEDIUM: mailers: make sure to always apply offsets to now_ms in expiration
2025-04-17BUG/MEDIUM: checks: make sure to always apply offsets to now_ms in expiration
2025-04-17BUG/MEDIUM: mux-h2: Don't send RST_STREAM frame for streams with no ID
2025-04-17BUG/MEDIUM: resolvers: Insert a non-executed resulution in front of the wait list
2025-04-17BUG/MINOR: cli: don't show sockpairs in HAPROXY_CLI and HAPROXY_MASTER_CLI
2024-12-02BUG/MINOR: ssl: can't load a separated key file with openssl > 3.0
2024-11-06BUG/MINOR: http-ana: Report internal error if an action yields on a final eval
2024-11-06BUG/MINOR: ssl/cli: 'set ssl cert' does not check the transaction name correctly
2024-11-06BUG/MEDIUM: connection/http-reuse: fix address collision on unhandled address families
2024-11-06BUG/MINOR: mworker: fix mworker-max-reloads parser
2024-11-06BUG/MINOR: http-ana: Don't report a server abort if response payload is invalid
2024-11-06BUG/MEDIUM: hlua: properly handle sample func errors in hlua_run_sample_{fetch,conv}()
2024-11-06BUG/MEDIUM: hlua: make hlua_ctx_renew() safe
2024-11-06BUG/MEDIUM: server: server stuck in maintenance after FQDN change
2024-11-06BUG/MINOR: cfgparse-global: fix allowed args number for setenv
2024-11-06BUG/MEDIUM: cli: Deadlock when setting frontend maxconn
2024-09-17BUG/MINOR: server: Don't warn fallback IP is used during init-addr resolution
2024-09-17BUG/MINOR: polling: fix time reporting when using busy polling
2024-09-17BUG/MEDIUM: pattern: prevent UAF on reused pattern expr
2024-09-17BUG/MINOR: pattern: prevent const sample from being tampered in pat_match_beg()
2024-09-17BUG/MINOR: pattern: do not leave a leading comma on "set" error messages
2024-09-17BUG/MINOR: pattern: pat_ref_set: return 0 if err was found
2024-09-17BUG/MINOR: pattern: pat_ref_set: fix UAF reported by coverity
2024-09-17BUG/MINOR: proto_uxst: delete fd from fdtab if listen() fails
2024-09-17BUG/MINOR: proto_tcp: delete fd from fdtab if listen() fails
2024-09-17BUG/MINOR: trace: automatically start in waiting mode with "start "
2024-09-17BUG/MINOR: fcgi-app: handle a possible strdup() failure
2024-09-17BUG/MEDIUM: h2: Only report early HTX EOM for tunneled streams
2024-09-17BUG/MEDIUM: cli: Always release back endpoint between two commands on the mcli
2024-09-17BUG/MEDIUM: stream: Prevent mux upgrades if client connection is no longer ready
2024-09-17BUG/MINOR: cli: Atomically inc the global request counter between CLI commands
2024-09-17BUG/MEDIUM: spoe: Be sure to create a SPOE applet if none on the current thread
2024-07-03BUG/MAJOR: server: do not delete srv referenced by session
2024-07-03BUG/MINOR: hlua: report proper context upon error in hlua_cli_io_handler_fct()
2024-07-03BUG/MINOR: cfgparse: remove the correct option on httpcheck send-state warning
2024-06-19BUG/MEDIUM: cli: fix cli_output_msg() regression
2024-06-10BUG/MINOR: haproxy: only tid 0 must not sleep if got signal
2024-06-10BUG/MAJOR: connection: fix server used_conns with H2 + reuse safe
2024-06-10BUG/MEDIUM: http_ana: ignore NTLM for reuse aggressive/always and no H1
2024-06-10BUG/MEDIUM: ssl: wrong priority whem limiting ECDSA ciphers in ECDSA+RSA configuration
2024-06-10BUG/MINOR: hlua: prevent LJMP in hlua_traceback()
2024-06-10BUG/MINOR: hlua: fix unsafe hlua_pusherror() usage
2024-06-10BUG/MINOR: hlua: don't use lua_pushfstring() when we don't expect LJMP
2024-06-10BUG/MINOR: tools: fix possible null-deref in env_expand() on out-of-memory
2024-06-10BUG/MINOR: tcpcheck: report correct error in tcp-check rule parser
2024-06-10BUG/MINOR: activity: fix Delta_calls and Delta_bytes count
2024-06-10BUG/MINOR: ssl/ocsp: init callback func ptr as NULL
2024-06-10BUG/MINOR: server: Don't reset resolver options on a new default-server line
2024-06-10BUG/MINOR: connection: parse PROXY TLV for LOCAL mode
2024-06-10BUG/MINOR: stats: Don't state the 303 redirect response is chunked
2024-06-10BUG/MINOR: htpp-ana/stats: Specify that HTX redirect messages have a C-L header
2024-06-10BUG/MEDIUM: fd: prevent memory waste in fdtab array
2024-06-10BUG/MEDIUM: stick-tables: properly mark stktable_data as packed
2024-06-10BUG/MEDIUM: htx: mark htx_sl as packed since it may be realigned
2024-06-10BUG/MINOR: h1: fix detection of upper bytes in the URI
2024-06-10BUG/MINOR: backend: use cum_sess counters instead of cum_conn
2024-06-10BUG/MINOR: fd: my_closefrom() on Linux could skip contiguous series of sockets
2024-06-10BUG/MINOR: sock: handle a weird condition with connect()
2024-06-10BUG/MEDIUM: cache: Vary not working properly on anything other than accept-encoding
2024-06-10BUG/MEDIUM: evports: do not clear returned events list on signal
2024-06-10BUG/MEDIUM: stconn: Don't forward channel data if input data must be filtered
2024-06-10BUG/MEDIUM: peers/trace: fix crash when listing event types
2024-06-10BUG/MEDIUM: http-ana: Deliver 502 on keep-alive for fressh server connection
2024-06-10BUG/MINOR: log: invalid snprintf() usage in sess_build_logline()
2024-06-10BUG/MINOR: tools/log: invalid encode_{chunk,string} usage
2024-06-10BUG/MINOR: log: fix lf_text_len() truncate inconsistency
2024-06-10BUG/MEDIUM: cli: Warn if pipelined commands are delimited by a \n
2024-06-10BUG/MEDIUM: cli: fix once for all the problem of missing trailing LFs
2024-05-17BUG/MEDIUM: thread/sched: set proper scheduling context upon ha_set_tid()
2024-04-05BUG/MINOR: proxy: fix logformat expression leak in use_backend rules
2024-04-05BUG/MEDIUM: hlua: streams don't support mixing lua-load with lua-load-per-thread (2nd try)
2024-04-05DEBUG: lua: precisely identify if stream is stuck inside lua or not
2024-04-03BUG/MINOR: ist: only store NUL byte on succeeded alloc
2024-04-03BUG/MINOR: backend: properly handle redispatch 0
2024-04-03BUG/MINOR: server: ignore 'enabled' for dynamic servers
2024-04-03BUG/MINOR: server: 'source' interface ignored from 'default-server' directive
2024-04-03BUG/MEDIUM: mux-fcgi: Properly handle EOM flag on end-of-trailers HTX block
2024-04-03BUG/MINOR: session: ensure conn owner is set after insert into session
2024-04-03BUG/MEDIUM: spoe: Return an invalid frame on recv if size is too small
2024-04-03BUG/MINOR: spoe: Be sure to be able to quickly close IDLE applets on soft-stop
2024-04-03BUG/MEDIUM: spoe: Don't rely on stream's expiration to detect processing timeout
2024-04-03BUG/MINOR: listener: Don't schedule frontend without task in listener_release()
2024-04-03BUG/MINOR: listener: Wake proxy's mngmt task up if necessary on session release
2024-04-03BUG/MINOR: ssl: fix possible ctx memory leak in sample_conv_aes_gcm()
2024-04-03BUG/MINOR: cfgparse: report proper location for log-format-sd errors
2024-04-03BUG/MAJOR: hlua: improper lock usage with hlua_ctx_resume()
2024-04-03BUG/MEDIUM: hlua: improper lock usage with SET_SAFE_LJMP()
2024-04-03BUG/MINOR: hlua: don't use lua_tostring() from unprotected contexts
2024-04-03BUG/MINOR: hlua: fix unsafe lua_tostring() usage with empty stack
2024-04-03BUG/MINOR: tools: seed the statistical PRNG slightly better
2024-04-03BUG/MINOR: hlua: Fix log level to the right value when set via TXN:set_loglevel
2024-04-03BUG/MINOR: ssl/cli: duplicate cleaning code in cli_parse_del_crtlist
2024-04-03BUG/MINOR: ist: allocate nul byte on istdup
2024-04-03BUG/MEDIUM: hlua: Don't loop if a lua socket does not consume received data
2024-04-03BUG/MINOR: ssl: Clear the ckch instance when deleting a crt-list line
2024-04-03BUG/MAJOR: ssl_sock: Always clear retry flags in read/write functions
2024-04-03BUG/MEDIUM: h1: always reject the NUL character in header values
2024-04-03BUG/MEDIUM: h1: Don't support LF only to mark the end of a chunk size
2024-04-03BUG/MINOR: h1: Don't support LF only at the end of chunks
2024-04-03BUG/MINOR: h1-htx: properly initialize the err_pos field
2024-04-03BUG/MEDIUM: pool: fix rare risk of deadlock in pool_flush()
2024-04-03BUG/MINOR: vars/cli: fix missing LF after "get var" output
2024-04-03BUG/MEDIUM: cli: some err/warn msg dumps add LR into CSV output on stat's CLI
2024-01-17BUG/MEDIUM: spoe: Never create new spoe applet if there is no server up
2024-01-17BUG/MEDIUM: stconn: Forward shutdown on write timeout only if it is forwardable
2024-01-17BUG/MEDIUM: mux-h2: Report too large HEADERS frame only when rxbuf is empty
2024-01-17BUG/MEDIUM: connection: report connection errors even when no mux is installed
2024-01-17BUG/MINOR: sock: mark abns sockets as non-suspendable and always unbind them
2023-12-14BUG/MINOR: startup: set GTUNE_SOCKET_TRANSFER correctly
2023-12-14BUG/MEDIUM: pattern: don't trim pools under lock in pat_ref_purge_range()
2023-12-14BUG/MINOR: cache: Remove incomplete entries from the cache when stream is closed
2023-12-14BUG/MINOR: sample: Make the `word` converter compatible with `-m found`
2023-12-14BUG/MINOR: config: Stopped parsing upon unmatched environment variables
2023-12-14BUG/MINOR: server: do not leak default-server in defaults sections
2023-12-14BUG/MINOR: proxy/stktable: missing frees on proxy cleanup
2023-12-14BUG/MINOR: stream/cli: report correct stream age in "show sess"
2023-12-14BUG/MEDIUM: mux-fcgi: fail earlier on malloc in takeover()
2023-12-14BUG/MEDIUM: mux-h1: fail earlier on malloc in takeover()
2023-12-14BUG/MEDIUM: mux-h2: fail earlier on malloc in takeover()
2023-12-14BUG/MINOR: stconn: Use HTX-aware channel's functions to get info on buffer
2023-12-14BUG/MINOR: stconn: Fix streamer detection for HTX streams
2023-12-14BUG/MEDIUM: stream: Don't call mux .ctl() callback if not implemented
2023-12-13BUG/MEDIUM: stream: Properly handle abortonclose when set on backend only
2023-12-13BUG/MINOR: stconn: Handle abortonclose if backend connection was already set up
2023-12-13BUG/MINOR: mux-h1: Properly handle http-request and http-keep-alive timeouts
2023-12-13BUG/MINOR: stick-table/cli: Check for invalid ipv4 key
2023-12-13BUG/MINOR: cfgparse/stktable: fix error message on stktable_init() failure
2023-12-13BUG/MINOR: stktable: missing free in parse_stick_table()
2023-12-13BUG/MINOR: tcpcheck: Report hexstring instead of binary one on check failure
2023-12-13BUG/MEDIUM: ssl: segfault when cipher is NULL
2023-12-13BUG/MINOR: ssl: suboptimal certificate selection with TLSv1.3 and dual ECDSA/RSA
2023-12-13BUG/MINOR: mux-h2: update tracked counters with req cnt/req err
2023-12-13BUG/MINOR: mux-h2: commit the current stream ID even on reject
2023-12-13BUG/MEDIUM: peers: Be sure to always refresh recconnect timer in sync task
2023-12-13BUG/MEDIUM: mux-h2: Don't report an error on shutr if a shutw is pending
2023-12-13BUG/MINOR: mux-h2: make up other blocked streams upon removal from list
2023-12-13BUG/MEDIUM: actions: always apply a longest match on prefix lookup
2023-12-06BUG/MINOR: debug: enter ha_panic() only once
2023-11-24BUG/MEDIUM: listener/proxy: fix listeners notify for proxy resume (2nd try)
2023-10-04BUG/MINOR: server: add missing free for server->rdr_pfx
2023-10-04BUG/MAJOR: mux-h2: Report a protocol error for any DATA frame before headers
2023-10-04BUG/MINOR: freq_ctr: fix possible negative rate with the scaled API
2023-10-04BUG/MINOR: promex: fix backend_agg_check_status
2023-10-04BUG/MEDIUM: mux-fcgi: Don't swap trash and dbuf when handling STDERR records
2023-10-04BUG/MINOR: hlua/init: coroutine may not resume itself
2023-10-04BUG/MEDIUM: hlua: don't pass stale nargs argument to lua_resume()
2023-10-04BUG/MEDIUM: hlua: streams don't support mixing lua-load with lua-load-per-thread
2023-10-04BUG/MINOR: hlua/action: incorrect message on E_YIELD error
2023-10-04BUG/MEDIUM: stconn/stream: Forward shutdown on write timeout
2023-10-04BUG/MEDIUM: stconn: Wake applets on sending path if there is a pending shutdown
2023-10-04BUG/MINOR: ssl_sock: fix possible memory leak on OOM
2023-10-04BUG/MINOR: hlua_fcn: potentially unsafe stktable_data_ptr usage
2023-10-04BUG/MINOR: stktable: allow sc-set-gpt(0) from tcp-request connection
2023-10-04BUG/MINOR: hlua: fix invalid use of lua_pop on error paths
2023-09-04BUG/MEDIUM: dns: Be sure to unlock DSS when existing dns_session_io_handler()

Back to the list of branches and versions
Back to the HAProxy page