2026-09-18BUG/MEDIUM: limits: properly account for global.maxpipes in compute_ideal_maxconn() 2026-09-18BUG/MEDIUM: htx: Reserve a block descriptor for zero-sized blocks 2026-09-18BUG/MINOR: sample: reject a \0 byte in url_dec, json_query and jwt_*_query 2026-09-18BUG/MINOR: ssl: Fix leak of ca_list in cafile_entry 2026-09-18BUG/MEDIUM: http_act: fix normalize-uri normalizer selection with a condition 2026-09-18BUG/MEDIUM: map: do not overwrite the fetch context in pat_match_regm() 2026-09-18BUG/MINOR: ssl: don't pass the address of a size_t as an int* to OpenSSL 2026-09-18BUG/MINOR: h3: only increment frame type counter on new header 2026-09-18BUG/MINOR: h3: handle empty HEADERS frame as specified 2026-09-18BUG/MEDIUM: h3: do not block FIN on empty DATA frame 2026-09-18BUG/MINOR: hlua: Always return nil if there is no data to dup for HTTP messages 2026-09-18BUG/MEDIUM: hlua: Never release a cosocket applet from the GC 2026-09-18BUG/MINOR: qpack: accept a Required Insert Count which cannot be reached 2026-09-18BUG/MINOR: qpack: encoder and decoder stream data is never consumed 2026-09-18BUG/MINOR: resolvers: classify empty truncated responses 2026-09-18BUG/MINOR: quic: late packets of the first key phase are dropped 2026-09-18BUG/MEDIUM: quic: crash on key update phase change after a failed one 2026-09-18BUG/MINOR: payload: bound ClientHello extension lists by the extension length 2026-08-26BUG/MINOR: flt-http-comp: Don't read next block to detect end of data 2026-08-26BUG/MINOR: fcgi-app: allow explicit filter declaration with non-cache/non-compression filters 2026-08-26BUG/MEDIUM: cache: ignore cache on redundant origin/referer 2026-08-26BUG/MINOR: auth: free user groups on error paths in userlist_postinit() 2026-08-26BUG/MINOR: tools: fix memory leak in env_expand() error path 2026-08-26BUG/MINOR: http-act: set-status() must check the response message, not the request 2026-08-26BUG/MINOR: http-fetch: make http_first_req() check for HTTP first 2026-08-26BUG/MINOR: ot: removed dead code in flt_ot_parse_cfg_str() 2026-08-26BUG/MINOR: config: Check buffer pool creation for failures 2026-08-26BUG/MINOR: wurfl: fix memory leak of information list and patch strings at deinit 2026-08-26BUG/MEDIUM: mux-fcgi: check the room left before appending the index 2026-08-26BUG/MINOR: resolvers: accept fields at the response boundary 2026-08-26BUG/MEDIUM: ssl: isolate TLS session resumption per authentication policy 2026-08-26BUG/MINOR: ssl: isolate TLS session resumption per crt-list filter 2026-08-26BUG/MEDIUM: ssl: isolate TLS session resumption per X509 server certificate 2026-08-26BUG/MINOR: ssl: apply tune.ssl.lifetime to TLS1.3 sessions on BoringSSL/AWS-LC 2026-08-26BUG/MINOR: ssl: release the previous client cert reference at depth > 0 2026-08-26BUG/MINOR: conn: Do not check 'sess_el' list on frontend connections in __trace_enabled 2026-08-26BUG/MINOR: qpack: missing shift count check in qpack_get_varint() (UB) 2026-08-26BUG/MINOR: spoe: check snprintf() return value in spoe_set_var/spoe_unset_var 2026-08-26BUG/MINOR: payload: fix handshake length off-by-4 in ssl_hello_sni/alpn 2026-08-26BUG/MEDIUM: http: fix authority parsing for absolute-form URI with empty path 2026-08-26BUG/MEDIUM: lua: resume Channel:send() from the unsent part of the string 2026-08-26BUG/MINOR: mux-h2: strip the userinfo when deriving :authority for a server 2026-08-26BUG/MINOR: lb-chash: bound the walk when the saved cursor changed tree 2026-08-26BUG/MINOR: connection: reserve the whole CRC32C TLV before saving its pointer 2026-08-26BUG/MINOR: ssl: reject server certificate names containing a NUL byte 2026-08-26BUG/MINOR: mux-fcgi: sanitize the STDERR records before logging them 2026-08-26BUG/MEDIUM: http-ana: check the cookie rewrite result before moving the offsets 2026-08-26BUG/MEDIUM: sock: bound the recvmsg() length when receiving old sockets 2026-08-26BUG/MINOR: mux-fcgi: don't call fcgi_strm_destroy() on a NULL stream 2026-08-26BUG/MINOR: hlua: use a local buffer to format the socket addresses 2026-08-26BUG/MEDIUM: hpack: encode long methods and schemes using the long form 2026-08-26BUG/MINOR: server: check strdup return value on server ID 2026-07-29BUG/MEDIUM: sample: reject the deprecated protobuf group wire types 2026-07-29BUG/MEDIUM: peers: check the available room before encoding dict values 2026-07-29BUG/MINOR: slz: avoid undefined shifts when building the word byte by byte 2026-07-29BUG/MINOR: slz: fix the adler32 accumulators signedness on 32-bit 2026-07-29BUG/MINOR: slz: do not append a block to an already finished stream 2026-07-29BUG/MEDIUM: slz: bound the bits wasted by the 9-bit literals 2026-07-29BUG/MINOR: slz: use the exact switch cost for the last literals of a block 2026-07-29BUG/MINOR: slz: do not read past the end of the input around the match loop 2026-07-29BUG/MINOR: htx: Transfer HTX_FL_EOM flag on success in htx_append_msg() 2026-07-29BUG/MINOR: htx: Perform raw copy for messages of same size in htx_copy_msg() 2026-07-29BUG/MINOR: http-htx: check the strdup() of the "lf-string" http reply argument 2026-07-29BUG/MINOR: http-act: reject a negative capture id in the capture actions 2026-07-29BUG/MINOR: http-act: restore the response buffer state in the early-hint action 2026-07-29BUG/MINOR: http-act: fix a double free of the map reference on a parsing error 2026-07-29BUG/MINOR: http-act: fix a double free of the regex on a rule parsing error 2026-07-29BUG/MINOR: http-ana: fix a one-byte over-read in the client-side cookie parser 2026-07-29BUG/MINOR: h2: don't use a block pointer to roll back a partial HTX conversion 2026-07-29BUG/MINOR: http-htx: check the trash allocation in http_scheme_based_normalize() 2026-07-29BUG/MEDIUM: http-fetch: reject a negative capture id in capture.{req,res}.hdr 2026-07-29BUG/MEDIUM: http-fetch: don't parse a non-HTTP check buffer as an HTX message 2026-07-29BUG/MINOR: http-htx: fix the length moved when removing a header value 2026-07-22BUG/MEDIUM: sample: Adjust sample size capacity after pointer shift for ltrim() 2026-07-22BUG/MINOR: mux-h1: Don't delay send if message with c-l was fully sent 2026-07-22BUG/MEDIUM: protobuf: fix nested path bypass in field lookup 2026-07-22BUG/MEDIUM: protobuf: adjust sample size capacity after pointer shift 2026-07-22BUG/MEDIUM: ssl-gencert: Don't forget to free memory when done 2026-07-22BUG/MEDIUM: stats: Ensure that Origin is valid on POSTs 2026-07-22BUG/MEDIUM: stats: subject "stats admin" accesses to "stats scope" filtering 2026-07-22BUG/MINOR: http-conv: Make url-dec failed if no space for trailing null byte 2026-07-22BUG/MINOR: sample: Fix a possible underflow on be2hex for large chunk size 2026-07-02BUG/MINOR: http-htx: Don't by-pass HTX API when merging cookie values 2026-07-02BUG/MAJOR: htx: Don't swap buffers for empty HTX message with an error 2026-07-02BUG/MINOR: tools: fix invalid character detection in strl2ic() 2026-07-02BUG/MINOR: sample: set SMP_F_CONST on srv_name fetch 2026-06-26BUG/MEDIUM: mux-quic: Drain the given amount of data in qcs_http_reset_buf() 2026-06-26BUG/MEDIUM: mux-h2: Truly drain outgoing HTX data when the stream is closed 2026-06-26BUG/MEDIUM: mux-fcgi: Truly drain outgoing HTX data when the stream is closed 2026-06-26BUG/MINOR: server: fix add server with consistent hash balancing 2026-06-26BUG/MEDIUM: ssl: Don't free the early data buffer too early 2026-06-26BUG/MINOR: mux-h1: Properly resolve file path for 'h1-case-adjust-file' 2026-06-26BUG/MINOR: mux_h1: handle a possible strdup() failure 2026-06-26BUG/MEDIUM: http-ana: Don't ignore L7 retry errors 2026-06-26BUG/MEDIUM: check: Skip tcpcheck post-config for external checks 2026-06-26BUG/MEDIUM: mux-h1: Dup connection/upgrade value to parse it when making headers 2026-06-26BUG/MINOR: cache: Fix copy of value when parsing maxage 2026-06-26BUG/MINOR: qpack: fix huff_dec() error handling in qpack_decode_fs() 2026-06-26BUG/MINOR: qpack: fix sign bit mask in qpack_decode_fs_pfx() 2026-06-26BUG/MINOR: qpack: fix potential null-pointer dereference in qpack_dht_insert() 2026-06-26BUG/MINOR: qpack: Fix index calculation in debug functions 2026-06-26Revert "BUG/MEDIUM: dns: fix long loops in additional records parse on name failure" 2026-06-26BUG/MINOR: ssl-gencert: validate SNI characters to prevent SAN certificate injection 2026-06-26BUG/MINOR: mux-fcgi: Use relative offset to compute contig data in demux buf 2026-06-26BUG/MEDIUM: mux-fcgi: reject stream ID 0 for application records 2026-06-26BUG/MINOR: hlua: prevent Lua from passing CR/LF/NUL in HTTP headers 2026-06-26BUG/MEDIUM: auth: fix unconfigured password NULL deref 2026-06-26BUG/MINOR: addons/51d: NUL-terminate headers before passing them to Trie API 2026-06-26BUG/MINOR: ssl-hello: make use of the null-terminated servername 2026-06-26BUG/MINOR: payload: fix the handshake length bounds check smp_client_hello_parse() 2026-06-26BUG/MINOR: http-fetch: check against the whole token in get_http_auth() 2026-06-26BUG/MEDIUM: cache: always verify the primary hash in get_secondary_entry() 2026-06-26BUG/MINOR: sample: limit the be2hex converter's chunk size 2026-06-26BUG/MINOR: dict: fix refcount race on insert collision 2026-06-26BUG/MINOR: mux-h2: validate HEADERS frame length before reading stream dep 2026-06-26BUG/MINOR: resolvers: fix risk of appending garbage past the domain name 2026-06-26BUG/MINOR: resolvers: fix room for trailing zero in resolv_dn_label_to_str() 2026-06-26BUG/MEDIUM: log-forward: make sure the month is unsigned 2026-06-26BUG/MEDIUM: hlua: Fix integer underflow when receiving line from lua cosocket 2026-06-26BUG/MEDIUM: dict: hold lock while decrementing refcount in dict_entry_unref 2026-06-26BUG/MEDIUM: resolvers: Fix test on dn label size in resolv_dn_label_to_str() 2026-06-19BUG/MEDIUM: mux-fcgi: fix uint16_t overflow in drl += drp 2026-06-19BUG/MINOR: hpack-tbl: add missing NULL check after hpack_dht_defrag() 2026-05-21BUG/MEDIUM: server: Duplicate healthcheck's alpn inherited from default server 2026-05-21BUG/MINOR: h1: Don't mask websocket protocol if multiple protocols used 2026-05-21BUG/MEDIUM: h1: Skip all h2c values from Upgrade headers during parsing 2026-05-21BUG/MINOR: httpclient-cli: Destroy http-client context if failing to start it 2026-05-21BUG/MINOR: jwt: fix possible memory leak in convert_ecdsa_sig() error path 2026-05-21BUG/MINOR: resolvers: report the expression error in the do-resolve() action parser 2026-05-21BUG/MINOR: dns: fix dangling dgram pointer on dns_dgram_init() failure path 2026-05-21BUG/MEDIUM: dns: fix memory leak of sockaddr in dns_session_init() error path 2026-05-21BUG/MEDIUM: resolvers: fix name compression pointer validation in resolv_read_name() 2026-05-21BUG/MEDIUM: dns: fix long loops in additional records parse on name failure 2026-05-21BUG/MINOR: backend: correct parameter value validation in get_server_ph_post() 2026-05-21BUG/MEDIUM: dict: hold read lock while incrementing refcount in dict_insert 2026-05-11BUG/MINOR: cfgparse-listen: do not emit extraneous line in rule order warnings 2026-05-07BUG/MEDIUM: stick-table: properly check permissions on CLI's set/clear cmd 2026-05-07BUG/MEDIUM: mux-h2: fix the detection of the ext connect support 2026-05-07Revert "BUG/MINOR: mux-h2: condition the processing of 8441 extension to global setting" 2026-05-07Revert "BUG/MEDIUM: cli: fix master CLI connection slot leak on client disconnect" 2026-05-06BUG/MEDIUM: h1_htx: Remove reverved block on error during contig chunks parsing 2026-05-06BUG/MINOR: http-fetch: Fix http_auth_bearer() when custom header is used 2026-05-06BUG/MINOR: h2: only accept :protocol with extended CONNECT 2026-05-06BUG/MINOR: mux-h2: condition the processing of 8441 extension to global setting 2026-05-06BUG/MINOR: h2: add decoding for :protocol in traces 2026-05-05BUG/MINOR: tcpcheck: Properly report error for http health-checks 2026-05-04BUG/MEDIUM: cli: fix master CLI connection slot leak on client disconnect 2026-05-04BUG/MINOR: mworker/cli: check ci_insert() return value in pcli_parse_request() 2026-05-04BUG/MINOR: resolvers: Free opts on parse error in resolv_parse_do_resolve() 2026-05-04BUG/MINOR: resolvers: Free new requester on error when linking a resolution 2026-05-04BUG/MAJOR: mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in h2c_dec_hdrs() 2026-05-04BUG/MEDIUM: mux-h2: fix the body_len to check when parsing request trailers 2026-05-04BUG/MINOR: map: do not leak a map descriptor on load error 2026-05-04BUG/MINOR: hpack: validate idx > 0 in hpack_valid_idx() 2026-05-04BUG/MINOR: vars: only print first invalid char in fill_desc() 2026-05-04BUG/MINOR: vars: don't store the variable twice with set-var-fmt 2026-05-04BUG/MINOR: vars: make parse_store() return error on var_set() failure 2026-04-30BUG/MINOR: http-htx: Don't normalize emtpy path for OPTIONS requests 2026-04-29BUG/MEDIUM: mux-fcgi: Properly handle full buffer for FCGI_PARAM record 2026-04-29BUG/MINOR: payload: prevent integer overflow in distcc token parsing 2026-04-29BUG/MEDIUM: http-htx: Loop on full host value during scheme based normalization 2026-04-29BUG/MEDIUM: http-htx: Don't use data from HTX message to update authority 2026-04-29BUG/MAJOR: http-htx: Store new host in a chunk for scheme-based normalization 2026-04-29BUG/MINOR: tools: my_memspn/my_memcspn wrong cast causing incorrect byte reading 2026-04-23BUG/MEDIUM: mux-h1: Force close mode for bodyless message announcing a C-L 2026-04-23BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as well 2026-04-23BUG/MINOR: hlua: fix use-after-free of HTTP reason string 2026-04-23BUG/MEDIUM: mux-fcgi: prevent record-length truncation with large bufsize 2026-04-23BUG/MINOR: sample: fix info leak in regsub when exp_replace fails 2026-04-23BUG/MEDIUM: samples: Fix handling of SMP_T_METH samples 2026-04-23BUG/MINOR: spoe: fix pointer arithmetic overflow in spoe_decode_buffer() 2026-04-23BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals 2026-04-23BUG/MINOR: peers: fix OOB heap write in dictionary cache update 2026-04-23BUG/MINOR: hlua: fix stack overflow in httpclient headers conversion 2026-04-23BUG: hlua: fix stack overflow in httpclient headers conversion 2026-04-23BUG/MEDIUM: jwt: fix heap overflow in ECDSA signature DER conversion 2026-04-23BUG/MEDIUM: payload: validate SNI name_len in req.ssl_sni 2026-04-23BUG/MINOR: cfgcond: fail cleanly on missing argument for "feature" 2026-04-23BUG/MINOR: cfgcond: always set the error string on openssl_version checks 2026-04-23BUG/MINOR: cfgcond: properly set the error pointer on evaluation error 2026-04-17BUG/MINOR: config: Properly test warnif_misplaced_* return values 2026-04-17BUG/MINOR: qpack: fix 62-bit overflow and 1-byte OOB reads in decoding 2026-04-17BUG/MINOR: sock: adjust accept() error messages for ENFILE and ENOMEM 2026-03-20BUG/MEDIUM: h3: reject unaligned frames except DATA 2026-03-20BUG/MAJOR: h3: check body size with content-length on empty FIN 2026-03-20BUG/MINOR: mux-h2: properly ignore R bit in WINDOW_UPDATE increments 2026-03-20BUG/MINOR: mux-h2: properly ignore R bit in GOAWAY stream ID 2026-03-20BUG/MEDIUM: peers: enforce check on incoming table key type 2026-03-20BUG/MINOR: mjson: make mystrtod() length-aware to prevent out-of-bounds reads 2026-03-20BUG/MINOR: stream: Fix crash in stream dump if the current rule has no keyword 2026-03-20BUG/MINOR: http-ana: Swap L7 buffer with request buffer by hand 2026-03-20BUG/MINOR: h2/h3: Never insert partial headers/trailers in an HTX message 2026-03-20BUG/MINOR: h2/h3: Only test number of trailers inserted in HTX message 2026-03-20BUG/MINOR: sockpair: set FD_CLOEXEC on fd received via SCM_RIGHTS 2026-03-20BUG/MINOR: mworker: fix typo &= instead of & in proc list serialization 2026-03-20BUG/MINOR: tcpcheck: Fix typo in error error message for `http-check expect` 2026-03-09BUG/MINOR: backend: Don't get proto to use for webscoket if there is no server 2026-03-09BUG/MINOR: ssl-sample: Fix sample_conv_sha2() by checking EVP_Digest* failures 2026-03-05BUG/MEDIUM: mux-fcgi: Use a safe loop to resume each stream eligible for sending 2026-03-05BUG/MAJOR: resolvers: Properly lowered the names found in DNS response 2026-03-05BUG/MINOR: resolvers: always normalize FQDN from response 2026-03-05BUG/MAJOR: fcgi: Fix param decoding by properly checking its size 2026-03-05BUG/MINOR: h1-htx: Be sure that H1 response version starts by "HTTP/" 2026-03-05BUG/MEDIUM: qpack: correctly deal with too large decoded numbers 2026-03-05BUG/MINOR: qpack: fix 1-byte OOB read in qpack_decode_fs_pfx() 2026-03-05BUG/MAJOR: qpack: unchecked length passed to huffman decoder 2026-03-05BUG/MEDIUM: hpack: correctly deal with too large decoded numbers 2025-10-14BUG/MINOR: sink: retry attempt for sft server may never occur 2025-10-10BUG/MINOR: ssl: always clear the remains of the first hello for the second one 2025-10-10BUG/MEDIUM: ssl: take care of second client hello 2025-10-02BUG/MINOR: h3: forbid 'Z' as well in header field names checks 2025-10-02BUG/MINOR: h2: forbid 'Z' as well in header field names checks 2025-10-02BUG/CRITICAL: mjson: fix possible DoS when parsing numbers 2025-05-28BUG/MINOR: limits: compute_ideal_maxconn: don't cap remain if fd_hard_limit=0 2025-05-28BUG/MINOR: h3: Set HTX flags corresponding to the scheme found in the request 2025-05-28BUG/MINOR: mux-h2: Reset streams with NO_ERROR code if full response was already sent 2025-05-28BUG/MINOR: sink: detect and warn when using "send-proxy" options with ring servers 2025-05-28BUG/MINOR: hlua: Fix Channel:data() and Channel:line() to respect documentation 2025-05-28BUG/MINOR: cli: fix too many args detection for commands 2025-05-28BUG/MINOR: quic: reject invalid max_udp_payload size 2025-05-28BUG/MINOR: quic: fix TP reject on invalid max-ack-delay 2025-05-28BUG/MINOR: quic: use proper error code on invalid received TP value 2025-05-28BUG/MINOR: quic: reject retry_source_cid TP on server side 2025-05-28BUG/MINOR: quic: use proper error code on invalid server TP 2025-05-28BUG/MINOR: quic: use proper error code on missing CID in TPs 2025-05-28BUG/MINOR: mux-h1: Fix trace message in h1_detroy() to not relay on connection 2025-05-28BUG/MINOR: mux-h1: Don't pretend connection was released for TCP>H1>H2 upgrade 2025-05-28BUG/MINOR: dns: add tempo between 2 connection attempts for dns servers 2025-05-28BUG/MINOR: cli: Issue an error when too many args are passed for a command 2025-04-22BUG/MINOR: mux-quic: fix BUG_ON() crash on init failure after app-ops 2025-04-22BUG/MINOR: mux-h2: prevent past scheduling with idle connections 2025-04-22BUG/MINOR: quic: do not crash on CRYPTO ncbuf alloc failure 2025-04-22BUG/MINOR: h3: reject request URI with invalid characters 2025-04-22BUG/MINOR: h3: reject invalid :path in request 2025-04-22BUG/MINOR: h3: filter upgrade connection header 2025-04-22BUG/MEDIUM: h3: trim whitespaces in header value prior to QPACK encoding 2025-04-22BUG/MEDIUM: h3: trim whitespaces when parsing headers value 2025-04-17BUG/MINOR: sink: add tempo between 2 connection attempts for sft servers (2) 2025-04-17BUG/MINOR: hlua: fix invalid errmsg use in hlua_init() 2025-04-17BUG/MINOR: backend: do not use the source port when hashing clientip 2025-04-17BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refs 2025-04-17BUG/MEDIUM: backend: fix reuse with set-dst/set-dst-port 2025-04-17BUG/MINOR: backend: do not overwrite srv dst address on reuse 2025-04-17BUG/MINOR: log: fix gcc warn about truncating NUL terminator while init char arrays 2025-04-17BUG/MEDIUM: peers: prevent learning expiration too far in futur from unsync node 2025-04-17BUG/MINOR: peers: fix expire learned from a peer not converted from ms to ticks 2025-04-17BUG/MEDIUM: hlua/cli: fix cli applet UAF in hlua_applet_wakeup() 2025-04-17BUG/MINOR: namespace: handle a possible strdup() failure 2025-04-17BUG/MINOR: server: dont return immediately from parse_server() when skipping checks 2025-04-17BUG/MINOR: cfgparse/peers: properly handle ignored local peer case 2025-04-17BUG/MINOR: cfgparse/peers: fix inconsistent check for missing peer server 2025-04-17BUG/MEIDUM: startup: return to initial cwd only after check_config_validity() 2025-04-17BUG/MINOR: server: check for either proxy-protocol v1 or v2 to send hedaer 2025-04-17BUG/MINOR: h2: always trim leading and trailing LWS in header values 2025-04-17BUG/MINOR: sink: add tempo between 2 connection attempts for sft servers 2025-04-17BUG/MINOR: cfgparse: fix NULL ptr dereference in cfg_parse_peers 2025-04-17BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer 2025-04-17BUG/MINOR: flt-trace: Support only one name option 2025-04-17BUG/MINOR: auth: Fix a leak on error path when parsing user's groups 2025-04-17BUG/MINOR: config/userlist: Support one 'users' option for 'group' directive 2025-04-17BUG/MINOR: cli: Fix a possible infinite loop in _getsocks() 2025-04-17BUG/MINOR: cli: Fix memory leak on error for _getsocks command 2025-04-17BUG/MINOR: tcp-rules: Don't forward close during tcp-response content rules eval 2025-04-17BUG/MINOR: quic: prevent crash on conn access after MUX init failure 2025-04-17BUG/MINOR: fcgi: Don't set the status to 302 if it is already set 2025-04-17BUG/MEDIUM: filters: Handle filters registered on data with no payload callback 2025-04-17BUG/MINOR: cli: Wait for the last ACK when FDs are xferred from the old worker 2025-04-17BUG/MINOR: quic: fix CRYPTO payload size calcul for encoding 2025-04-17BUG/MINOR: quic: reserve length field for long header encoding 2025-04-17BUG/MINOR: server: fix the "server-template" prefix memory leak 2025-04-16BUG/MEDIUM: thread: use pthread_self() not ha_pthread[tid] in set_affinity 2025-04-16BUG/MEDIUM: htx: wrong count computation in htx_xfer_blks() 2025-04-16BUG/MEDIUM: fd: mark FD transferred to another process as FD_CLONED 2025-04-16BUG/MEDIUM: clock: make sure now_ms cannot be TICK_ETERNITY 2025-02-19BUG/MEDIUM: spoe: Don't wakeup idle applets in loop during stopping 2025-02-19BUG/MINOR: spoe: Allow applet creation when closing the last one during stopping 2025-02-19BUG/MINOR: spoe: Check the shared waiting queue to shut applets during stopping 2025-02-19BUG/MINOR: http-ana: Disable fast-fwd for unfinished req waiting for upgrade 2025-02-19BUG/MEDIUM: mux-h1/mux-h2: Reject upgrades with payload on H2 side only 2025-02-19BUG/MINOR: h2: reject extended connect for h2c protocol 2025-02-19BUG/MINOR: h1: do not forward h2c upgrade header token 2025-02-19BUG/MINOR: ssl_sock: fix xprt_set_used() to properly clear the TASK_F_USR1 bit 2025-02-11BUG/MEDIUM: ssl: chosing correct certificate using RSA-PSS with TLSv1.3