HAProxy known bugs for version v2.8.2 (maintenance branch 2.8) :  515 

This version (2.8.2) is a release belonging to maintenance branch 2.8 whose latest version is 2.8.15. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches.

Quick links

Other versions in the same branch

This branch contains the following releases :

DateVersionComment
2025-04-222.8.15 ⇐ last
2025-01-292.8.14 
2024-12-122.8.13 
2024-11-082.8.12 
2024-09-192.8.11 
2024-06-142.8.10 
2024-04-052.8.9 
2024-04-052.8.8 
2024-02-262.8.7 
2024-02-152.8.6 
2023-12-072.8.5 
2023-11-172.8.4 
2023-09-072.8.3 
2023-08-092.8.2 ⇐ yours
2023-07-032.8.1 
2023-05-312.8.0 

Known bugs affecting this version, and already fixed in the maintenance branch

These fixes have already been queued for a more recent 2.8 version. Some of them might have already been released in a more recent version than yours, and other ones might still be pending in the maintenance branch for a future release. The list may be empty if you're already on the latest version and no new fix was backported.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in this version by category :

TotalCRITICALMAJORMEDIUMMINOR
515 0 15 198 302

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2025-04-22BUG/MINOR: mux-h2: prevent past scheduling with idle connections
2025-04-22BUG/MINOR debug: fix !USE_THREAD_DUMP in ha_thread_dump_fill()
2025-04-22BUG/MINOR: quic: do not crash on CRYPTO ncbuf alloc failure
2025-04-18BUG/MINOR: mux-quic: fix BUG_ON() crash on init failure after app-ops
2025-04-17BUG/MEDIUM: hlua: fix hlua_applet_{http,tcp}_fct() yield regression (lost data)
2025-04-17BUG/MINOR: h3: reject request URI with invalid characters
2025-04-17BUG/MINOR: h3: reject invalid :path in request
2025-04-17BUG/MINOR: h3: filter upgrade connection header
2025-04-17BUG/MEDIUM: h3: trim whitespaces in header value prior to QPACK encoding
2025-04-17BUG/MEDIUM: h3: trim whitespaces when parsing headers value
2025-04-17BUG/MEDIUM: backend: do not overwrite srv dst address on reuse (2)
2025-04-17BUG/MINOR: backend: fix reuse with set-dst/set-dst-port (2)
2025-04-16BUG/MINOR: sink: add tempo between 2 connection attempts for sft servers (2)
2025-04-16BUG/MINOR: mux-h2: Properly handle full or truncated HTX messages on shut
2025-04-16BUG/MEDIUM: http-ana: Report 502 from req analyzer only during rsp forwarding
2025-04-16BUG/MINOR: http-ana: Properly detect client abort when forwarding the response
2025-04-16BUG/MINOR: hlua: fix invalid errmsg use in hlua_init()
2025-04-16BUG/MINOR: backend: do not use the source port when hashing clientip
2025-04-16BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refs
2025-04-16BUG/MINOR: hlua_fcn: fix potential UAF with Queue:pop_wait()
2025-04-16BUG/MEDIUM: backend: fix reuse with set-dst/set-dst-port
2025-04-16BUG/MINOR: backend: do not overwrite srv dst address on reuse
2025-04-16BUG/MINOR: log: fix gcc warn about truncating NUL terminator while init char arrays
2025-04-16BUG/MINOR: mux-quic: remove extra BUG_ON() in _qcc_send_stream()
2025-04-16BUG/MEDIUM: mux-quic: fix crash on RS/SS emission if already close local
2025-04-16BUG/MEDIUM: peers: prevent learning expiration too far in futur from unsync node
2025-04-16BUG/MINOR: peers: fix expire learned from a peer not converted from ms to ticks
2025-04-16BUG/MEDIUM: hlua/cli: fix cli applet UAF in hlua_applet_wakeup()
2025-04-16BUG/MINOR: namespace: handle a possible strdup() failure
2025-04-16BUG/MINOR: server: dont return immediately from parse_server() when skipping checks
2025-04-16BUG/MINOR: cfgparse/peers: properly handle ignored local peer case
2025-04-16BUG/MINOR: cfgparse/peers: fix inconsistent check for missing peer server
2025-04-16BUG/MEIDUM: startup: return to initial cwd only after check_config_validity()
2025-04-16BUG/MINOR: server: check for either proxy-protocol v1 or v2 to send hedaer
2025-04-16BUG/MINOR: h2: always trim leading and trailing LWS in header values
2025-04-16BUG/MINOR: mux-h1: always make sure h1s->sd exists in h1_dump_h1s_info()
2025-04-16BUG/MINOR: sink: add tempo between 2 connection attempts for sft servers
2025-04-16BUG/MINOR: cfgparse: fix NULL ptr dereference in cfg_parse_peers
2025-04-16BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer
2025-04-16BUG/MINOR: flt-trace: Support only one name option
2025-04-16BUG/MINOR: auth: Fix a leak on error path when parsing user's groups
2025-04-16BUG/MINOR: config/userlist: Support one 'users' option for 'group' directive
2025-04-16BUG/MINOR: cli: Fix a possible infinite loop in _getsocks()
2025-04-16BUG/MINOR: cli: Fix memory leak on error for _getsocks command
2025-04-16BUG/MINOR: tcp-rules: Don't forward close during tcp-response content rules eval
2025-04-16BUG/MINOR: quic: prevent crash on conn access after MUX init failure
2025-04-16BUG/MINOR: fcgi: Don't set the status to 302 if it is already set
2025-04-16BUG/MEDIUM: filters: Handle filters registered on data with no payload callback
2025-04-16BUG/MINOR: cli: Wait for the last ACK when FDs are xferred from the old worker
2025-04-16BUG/MINOR: ssl/cli: "show ssl crt-list" lacks sigals
2025-04-16BUG/MINOR: ssl/cli: "show ssl crt-list" lacks client-sigals
2025-04-16BUG/MINOR: quic: fix CRYPTO payload size calcul for encoding
2025-04-16BUG/MINOR: quic: reserve length field for long header encoding
2025-04-16BUG/MEDIUM: debug: close a possible race between thread dump and panic()
2025-04-16BUG/MINOR: server: fix the "server-template" prefix memory leak
2025-04-16BUG/MEDIUM: thread: use pthread_self() not ha_pthread[tid] in set_affinity
2025-04-16BUG/MEDIUM: htx: wrong count computation in htx_xfer_blks()
2025-04-16BUG/MEDIUM: fd: mark FD transferred to another process as FD_CLONED
2025-04-16BUG/MINOR: mux-quic: handle closure of uni-stream
2025-04-16BUG/MEDIUM: mux-quic: do not attach on already closed stream
2025-02-19BUG/MEDIUM: spoe: Don't wakeup idle applets in loop during stopping
2025-02-19BUG/MINOR: spoe: Allow applet creation when closing the last one during stopping
2025-02-19BUG/MINOR: spoe: Check the shared waiting queue to shut applets during stopping
2025-02-19BUG/MEDIUM: clock: make sure now_ms cannot be TICK_ETERNITY
2025-02-11BUG/MEDIUM: ssl: chosing correct certificate using RSA-PSS with TLSv1.3
2025-01-28BUG/MINOR: stream: Properly handle "on-marked-up shutdown-backup-sessions"
2025-01-28BUG/MINOR: ssl: put ssl_sock_load_ca under SSL_NO_GENERATE_CERTIFICATES
2025-01-28BUG/MINOR: quic: do not increase congestion window if app limited
2025-01-23BUG/MEDIUM: mux-h1: Properly close H1C if an error is reported before sending data
2025-01-23MINOR: quic: Add a BUG_ON() on quic_tx_packet refcount
2025-01-23BUG/MINOR: quic: ensure a detached coalesced packet can't access its neighbours
2025-01-23BUG/MINOR: init: set HAPROXY_STARTUP_VERSION from the variable, not the macro
2025-01-23BUG/MAJOR: quic: reject too large CRYPTO frames
2025-01-23BUG/MEDIUM: stktable: fix missing lock on some table converters
2025-01-23BUG/MINOR: quic: reject NEW_TOKEN frames from clients
2025-01-23BUG/MINOR: stktable: fix big-endian compatiblity in smp_to_stkey()
2025-01-09BUG/MEDIUM: queue: Make process_srv_queue return the number of streams
2025-01-09BUG/MEDIUM: queues: Do not use pendconn_grab_from_px().
2025-01-09BUG/MEDIUM: queues: Make sure we call process_srv_queue() when leaving
2025-01-09BUG/MEDIUM: stconn: Only consider I/O timers to update stream's expiration date
2025-01-09BUG/MEDIUM: stconn: Don't forward shut for SC in connecting state
2025-01-09BUG/MEDIUM: quic: prevent crash due to CRYPTO parsing error
2025-01-09BUG/MINOR: quic: repeat packet parsing to deal with fragmented CRYPTO
2025-01-09BUG/MEDIUM: quic: support wait-for-handshake
2025-01-09BUG/MINOR: stream: unblock stream on wait-for-handshake completion
2025-01-09BUG/MEDIUM: pattern: prevent uninitialized reads in pat_match_{str,beg}
2025-01-02DEBUG: add a tainted flag when ha_panic() is called
2025-01-02BUG/MEDIUM: mux-h1: Fix how timeouts are applied on H1 connections
2025-01-02BUG/MEDIUM: stconn: Really report blocked send if sends are blocked by an error
2024-12-11BUG/MINOR: server-state: Fix expiration date of srvrq_check tasks
2024-12-11BUG/MINOR: quic: remove startup alert if conn socket-owner unsupported
2024-12-11BUG/MINOR: signal: register default handler for SIGINT in signal_init()
2024-12-11BUG/MINOR: h1-htx: Use default reason if not set when formatting the response
2024-12-11BUG/MEDIUM: http-ana: Reset request flag about data sent to perform a L7 retry
2024-12-11BUG/MEDIUM: event_hdl: fix uninitialized value in async mode when no data is provided
2024-11-27BUG/MEDIUM: sock: Remove FD_POLL_HUP during connect() if FD_POLL_ERR is not set
2024-11-27BUG/MEDIUM: http-ana: Don't release too early the L7 buffer
2024-11-27BUG/MAJOR: quic: fix wrong packet building due to already acked frames
2024-11-26BUG/MINOR: quic: prevent freeze after early QCS closure
2024-11-26BUG/MEDIUM: quic: handle retransmit for standalone FIN STREAM
2024-11-22BUG/MEDIUM: pools/memprofile: always clean stale pool info on pool_destroy()
2024-11-22BUG/MEDIUM: debug: don't set the STUCK flag from debug_handler()
2024-11-22BUG/MEDIUM: h3: Increase max number of headers when sending headers
2024-11-22BUG/MEDIUM: h3: Properly limit the number of headers received
2024-11-22BUG/MEDIUM: mux-h2: Check the number of headers in HEADERS frame after decoding
2024-11-22BUG/MEDIUM: mux-h2: Increase max number of headers when encoding HEADERS frames
2024-11-22BUG/MINOR: http-ana: Adjust the server status before the L7 retries
2024-11-22BUG/MINOR: http_ana: Report -1 for %Tr for invalid response only
2024-11-22BUG/MINOR: peers: make sure to always apply offsets to now_ms in expiration
2024-11-22BUG/MINOR: mux_quic: make sure to always apply offsets to now_ms in expiration
2024-11-22BUG/MEDIUM: mailers: make sure to always apply offsets to now_ms in expiration
2024-11-22BUG/MEDIUM: checks: make sure to always apply offsets to now_ms in expiration
2024-11-22BUG/MINOR: Don't report early srv aborts on request forwarding in DONE state
2024-11-22BUG/MEDIUM: mux-h2: Don't send RST_STREAM frame for streams with no ID
2024-11-22BUG/MEDIUM: resolvers: Insert a non-executed resulution in front of the wait list
2024-11-22BUG/MINOR: cli: don't show sockpairs in HAPROXY_CLI and HAPROXY_MASTER_CLI
2024-11-08BUG/MEDIUM: queue: make sure never to queue when there's no more served conns
2024-11-08BUG/MINOR: http-ana: Disable fast-fwd for unfinished req waiting for upgrade
2024-11-08BUG/MEDIUM: queue: always dequeue the backend when redistributing the last server
2024-11-08BUG/MEDIUM: stream: make stream_shutdown() async-safe
2024-11-08BUG/MEDIUM: mux-h1/mux-h2: Reject upgrades with payload on H2 side only
2024-11-08BUG/MINOR: h2: reject extended connect for h2c protocol
2024-11-08BUG/MINOR: h1: do not forward h2c upgrade header token
2024-11-08BUG/MINOR: ssl_sock: fix xprt_set_used() to properly clear the TASK_F_USR1 bit
2024-11-06BUG/MINOR: http-ana: Report internal error if an action yields on a final eval
2024-11-06BUG/MINOR: ssl/cli: 'set ssl cert' does not check the transaction name correctly
2024-10-24BUG/MEDIUM: server: fix race on servers_list during server deletion
2024-10-24BUG/MEDIUM: stconn: Report blocked send if sends are blocked by an error
2024-10-24BUG/MINOR: http-ana: Fix wrong client abort reports during responses forwarding
2024-10-24BUG/MINOR: server: fix dynamic server leak with check on failed init
2024-10-24BUG/MINOR: mux-quic: do not close STREAM with empty FIN if no data sent
2024-10-23BUG/MEDIUM: connection/http-reuse: fix address collision on unhandled address families
2024-10-23BUG/MINOR: mworker: fix mworker-max-reloads parser
2024-10-23BUG/MINOR: http-ana: Don't report a server abort if response payload is invalid
2024-10-23BUG/MINOR: httpclient: return NULL when no proxy available during httpclient_new()
2024-10-23BUG/MEDIUM: mux-quic: ensure timeout server is active for short requests
2024-10-23BUG/MEDIUM: hlua: properly handle sample func errors in hlua_run_sample_{fetch,conv}()
2024-10-23BUG/MEDIUM: hlua: make hlua_ctx_renew() safe
2024-10-21BUG/MEDIUM: server: server stuck in maintenance after FQDN change
2024-10-01BUG/MINOR: cfgparse-global: fix allowed args number for setenv
2024-10-01BUG/MINOR: server: make sure the HMAINT state is part of MAINT
2024-10-01BUG/MEDIUM: cli: Deadlock when setting frontend maxconn
2024-10-01BUG/MEDIUM: mux-pt: Never fully close the connection on shutdown
2024-10-01BUG/MEDIUM: ssl: Fix crash when calling "update ssl ocsp-response" when an update is ongoing
2024-10-01BUG/MAJOR: ocsp: Separate refcount per instance and per store
2024-09-18BUG/MINOR: cfgparse-listen: fix option httpslog override warning message
2024-09-17BUG/MEDIUM: promex: Wait to have the request before sending the response
2024-09-17BUG/MEDIUM: cache/stats: Wait to have the request before sending the response
2024-09-17BUG/MEDIUM: queue: implement a flag to check for the dequeuing
2024-09-17BUG/MINOR: clock: validate that now_offset still applies to the current date
2024-09-17BUG/MINOR: clock: make time jump corrections a bit more accurate
2024-09-17BUG/MINOR: polling: fix time reporting when using busy polling
2024-09-10BUG/MAJOR: mux-h1: Wake SC to perform 0-copy forwarding in CLOSING state
2024-09-10BUG/MEDIUM: pattern: prevent UAF on reused pattern expr
2024-09-10BUG/MINOR: pattern: prevent const sample from being tampered in pat_match_beg()
2024-09-10BUG/MEDIUM: clock: detect and cover jumps during execution
2024-09-10BUG/MINOR: pattern: do not leave a leading comma on "set" error messages
2024-09-10BUG/MINOR: pattern: pat_ref_set: return 0 if err was found
2024-09-10BUG/MINOR: pattern: pat_ref_set: fix UAF reported by coverity
2024-09-05BUG/MINOR: stconn: Request to send something to be woken up when the pipe is full
2024-09-05BUG/MEDIUM: mux-pt/mux-h1: Release the pipe on connection error on sending path
2024-09-05BUG/MEDIUM: clock: also update the date offset on time jumps
2024-09-05BUG/MINOR: h3: properly reject too long header responses
2024-09-05BUG/MINOR: proto_uxst: delete fd from fdtab if listen() fails
2024-09-05BUG/MINOR: mux-quic: do not send too big MAX_STREAMS ID
2024-09-05BUG/MEDIUM: mworker/cli: fix pipelined modes on master CLI
2024-09-05BUG/MINOR: proto_tcp: keep error msg if listen() fails
2024-09-05BUG/MINOR: proto_tcp: delete fd from fdtab if listen() fails
2024-09-05BUG/MINOR: quic/trace: make quic_conn_enc_level_init() emit NEW not CLOSE
2024-09-05BUG/MINOR: trace/quic: make "qconn" selectable as a lockon criterion
2024-09-05BUG/MINOR: trace: automatically start in waiting mode with "start "
2024-09-05BUG/MEDIUM: trace: fix null deref in lockon mechanism since TRACE_ENABLED()
2024-09-05BUG/MINOR: trace/quic: permit to lock on frontend/connect/session etc
2024-09-05BUG/MINOR: trace/quic: enable conn/session pointer recovery from quic_conn
2024-09-05BUG/MINOR: fcgi-app: handle a possible strdup() failure
2024-09-05BUG/MEDIUM: mux-h2: Propagate term flags to SE on error in h2s_wake_one_stream
2024-09-05BUG/MEDIUM: h2: Only report early HTX EOM for tunneled streams
2024-09-05BUG/MEDIUM: http-ana: Report error on write error waiting for the response
2024-09-05BUG/MEDIUM: quic: prevent conn freeze on 0RTT undeciphered content
2024-09-05BUG/MEDIUM: stconn: Report error on SC on send if a previous SE error was set
2024-09-05BUG/MEDIUM: mux-h1: Properly handle empty message when an error is triggered
2024-09-05BUG/MEDIUM: cli: Always release back endpoint between two commands on the mcli
2024-09-05BUG/MEDIUM: stream: Prevent mux upgrades if client connection is no longer ready
2024-07-29BUG/MEDIUM: init: fix fd_hard_limit default in compute_ideal_maxconn
2024-07-29BUG/MEDIUM: queue: deal with a rare TOCTOU in assign_server_and_queue()
2024-07-29BUG/MEDIUM: jwt: Clear SSL error queue on error when checking the signature
2024-07-29BUG/MINOR: quic: Lack of precision when computing K (cubic only cc)
2024-07-29BUG/MINOR: cli: Atomically inc the global request counter between CLI commands
2024-07-29BUG/MINOR: server: Don't warn fallback IP is used during init-addr resolution
2024-07-29BUG/MINOR: stick-table: fix crash for src_inc_gpc() without stkcounter
2024-07-29BUG/MEDIUM: ssl_sock: fix deadlock in ssl_sock_load_ocsp() on error path
2024-07-29BUG/MEDIUM: debug/cli: fix "show threads" crashing with low thread counts
2024-07-29BUG/MINOR: session: Eval L4/L5 rules defined in the default section
2024-07-29BUG/MEDIUM: bwlim: Be sure to never set the analyze expiration date in past
2024-07-29BUG/MEDIUM: spoe: Be sure to create a SPOE applet if none on the current thread
2024-07-29BUG/MEDIUM: h1: Reject empty Transfer-encoding header
2024-07-29BUG/MINOR: h1: Reject empty coding name as last transfer-encoding value
2024-07-29BUG/MINOR: h1: Fail to parse empty transfer coding names
2024-07-29BUG/MINOR: jwt: fix variable initialisation
2024-07-29BUG/MINOR: jwt: don't try to load files with HMAC algorithm
2024-07-03BUG/MEDIUM: quic: fix possible exit from qc_check_dcid() without unlocking
2024-07-03BUG/MINOR: quic: fix race-condition on trace for CID retrieval
2024-07-03BUG/MINOR: quic: fix race condition in qc_check_dcid()
2024-07-03BUG/MEDIUM: quic: fix race-condition in quic_get_cid_tid()
2024-07-03BUG/MEDIUM: h3: ensure the ":scheme" pseudo header is totally valid
2024-07-03BUG/MEDIUM: h3: ensure the ":method" pseudo header is totally valid
2024-07-03BUG/MINOR: hlua: report proper context upon error in hlua_cli_io_handler_fct()
2024-07-03BUG/MINOR: quic: fix BUG_ON() on Tx pkt alloc failure
2024-07-03BUG/MINOR: mux-quic: fix crash on qcs SD alloc failure
2024-07-03BUG/MINOR: h3: fix crash on STOP_SENDING receive after GOAWAY emission
2024-07-03BUG/MINOR: proxy: fix header_unique_id leak on deinit()
2024-07-03BUG/MINOR: proxy: fix source interface and usesrc leaks on deinit()
2024-07-03BUG/MINOR: proxy: fix dyncookie_key leak on deinit()
2024-07-03BUG/MINOR: proxy: fix check_{command,path} leak on deinit()
2024-07-03BUG/MINOR: proxy: fix log_tag leak on deinit()
2024-07-03BUG/MINOR: proxy: fix server_id_hdr_name leak on deinit()
2024-07-03BUG/MINOR: quic: fix computed length of emitted STREAM frames
2024-06-07BUG/MEDIUM: quic: don't blindly rely on unaligned accesses
2024-06-07BUG/MAJOR: connection: fix server used_conns with H2 + reuse safe
2024-06-07BUG/MEDIUM: http_ana: ignore NTLM for reuse aggressive/always and no H1
2024-06-07BUG/MAJOR: server: do not delete srv referenced by session
2024-06-07BUG/MEDIUM: quic: fix connection freeze on post handshake
2024-06-07BUG/MEDIUM: server: fix dynamic servers initial settings
2024-06-06BUG/MEDIUM: ssl: wrong priority whem limiting ECDSA ciphers in ECDSA+RSA configuration
2024-06-06BUG/MINOR: hlua: fix leak in hlua_ckch_set() error path
2024-06-06BUG/MINOR: hlua: prevent LJMP in hlua_traceback()
2024-06-06BUG/MINOR: hlua: fix unsafe hlua_pusherror() usage
2024-06-06BUG/MINOR: hlua: don't use lua_pushfstring() when we don't expect LJMP
2024-06-06BUG/MINOR: quic: prevent crash on qc_kill_conn()
2024-06-06BUG/MINOR: hlua: use CertCache.set() from various hlua contexts
2024-06-06BUG/MINOR: tools: fix possible null-deref in env_expand() on out-of-memory
2024-06-06BUG/MINOR: tcpcheck: report correct error in tcp-check rule parser
2024-06-06BUG/MINOR: cfgparse: remove the correct option on httpcheck send-state warning
2024-06-06BUG/MINOR: activity: fix Delta_calls and Delta_bytes count
2024-06-06BUG/MINOR: ssl/ocsp: init callback func ptr as NULL
2024-06-06BUG/MINOR: server: Don't reset resolver options on a new default-server line
2024-06-06BUG/MINOR: http-htx: Support default path during scheme based normalization
2024-06-06BUG/MINOR: quic: adjust restriction for stateless reset emission
2024-06-06BUG/MEDIUM: mux-quic: Create sedesc in same time of the QUIC stream
2024-06-06BUG/MEDIUM: quic_tls: prevent LibreSSL < 4.0 from negotiating CHACHA20_POLY1305
2024-06-06BUG/MAJOR: quic: Crash with TLS_AES_128_CCM_SHA256 (libressl only)
2024-06-06BUG/MINOR: connection: parse PROXY TLV for LOCAL mode
2024-06-06BUG/MINOR: stats: Don't state the 303 redirect response is chunked
2024-06-06BUG/MINOR: htpp-ana/stats: Specify that HTX redirect messages have a C-L header
2024-06-06BUG/MEDIUM: fd: prevent memory waste in fdtab array
2024-06-06BUG/MEDIUM: h1: Reject CONNECT request if the target has a scheme
2024-06-06BUG/MINOR: h1: Check authority for non-CONNECT methods only if a scheme is found
2024-06-06BUG/MEDIUM: stick-tables: properly mark stktable_data as packed
2024-06-06BUG/MEDIUM: htx: mark htx_sl as packed since it may be realigned
2024-06-06BUG/MINOR: qpack: fix error code reported on QPACK decoding failure
2024-06-06BUG/MINOR: mux-quic: fix error code on shutdown for non HTTP/3
2024-06-06BUG/MINOR: log: smp_rgs array issues with inherited global log directives
2024-06-06BUG/MINOR: log: keep the ref in dup_logger()
2024-06-06BUG/MINOR: haproxy: only tid 0 must not sleep if got signal
2024-06-06BUG/MINOR: mworker: reintroduce way to disable seamless reload with -x /dev/null
2024-06-06BUG/MINOR: h1: fix detection of upper bytes in the URI
2024-06-06BUG/MINOR: backend: use cum_sess counters instead of cum_conn
2024-06-06BUG/MINOR: fd: my_closefrom() on Linux could skip contiguous series of sockets
2024-06-06BUG/MINOR: sock: handle a weird condition with connect()
2024-06-06BUG/MINOR: stconn: Fix sc_mux_strm() return value
2024-06-06BUG/MEDIUM: cache: Vary not working properly on anything other than accept-encoding
2024-04-18BUG/MINOR: server: fix slowstart behavior
2024-04-18BUG/MEDIUM: peers: Fix exit condition when max-updates-at-once is reached
2024-04-18BUG/MEDIUM: spoe: Always retry when an applet fails to send a frame
2024-04-18BUG/MEDIUM: applet: Fix applet API to put input data in a buffer
2024-04-18BUG/MEDIUM: evports: do not clear returned events list on signal
2024-04-18BUG/MEDIUM: stconn: Don't forward channel data if input data must be filtered
2024-04-18BUG/MEDIUM: grpc: Fix several unaligned 32/64 bits accesses
2024-04-18BUG/MEDIUM: peers/trace: fix crash when listing event types
2024-04-18BUG/MINOR: debug: make sure DEBUG_STRICT=0 does work as documented
2024-04-18BUG/MINOR: http-ana: Fix TX_L7_RETRY and TX_D_L7_RETRY values
2024-04-18BUG/MEDIUM: http-ana: Deliver 502 on keep-alive for fressh server connection
2024-04-18BUG/MINOR: log: invalid snprintf() usage in sess_build_logline()
2024-04-18BUG/MINOR: tools/log: invalid encode_{chunk,string} usage
2024-04-18BUG/MINOR: log: fix lf_text_len() truncate inconsistency
2024-04-18BUG/MINOR: listener: always assign distinct IDs to shards
2024-04-18BUG/MINOR: cli: Report an error to user if command or payload is too big
2024-04-05BUG/MINOR: proxy: fix logformat expression leak in use_backend rules
2024-04-03BUG/MINOR: backend: properly handle redispatch 0
2024-04-03BUG/MINOR: server: ignore 'enabled' for dynamic servers
2024-03-29BUG/MEDIUM: cli: Warn if pipelined commands are delimited by a \n
2024-03-29BUG/MINOR: server: fix persistence cookie for dynamic servers
2024-03-29BUG/MINOR: ssl: Detect more 'ocsp-update' incompatibilities
2024-03-29BUG/MINOR: ssl: Wrong ocsp-update "incompatibility" error message
2024-03-29BUG/MINOR: server: 'source' interface ignored from 'default-server' directive
2024-03-29BUG/MEDIUM: mux-fcgi: Properly handle EOM flag on end-of-trailers HTX block
2024-03-29BUG/MINOR: mux-quic: close all QCS before freeing QCC tasklet
2024-03-29BUG/MEDIUM: ssl: Fix crash in ocsp-update log function
2024-03-29BUG/MINOR: session: ensure conn owner is set after insert into session
2024-03-29BUG/MEDIUM: spoe: Return an invalid frame on recv if size is too small
2024-03-29BUG/MINOR: spoe: Be sure to be able to quickly close IDLE applets on soft-stop
2024-03-29BUG/MEDIUM: spoe: Don't rely on stream's expiration to detect processing timeout
2024-03-29BUG/MINOR: listener: Don't schedule frontend without task in listener_release()
2024-03-29BUG/MINOR: listener: Wake proxy's mngmt task up if necessary on session release
2024-03-29BUG/MEDIUM: hlua: streams don't support mixing lua-load with lua-load-per-thread (2nd try)
2024-03-29DEBUG: lua: precisely identify if stream is stuck inside lua or not
2024-03-29BUG/MINOR: hlua: fix missing lock in hlua_filter_delete()
2024-03-29BUG/MINOR: hlua: missing lock in hlua_filter_new()
2024-03-29BUG/MINOR: hlua: segfault when loading the same filter from different contexts
2024-03-29BUG/MINOR: ssl: fix possible ctx memory leak in sample_conv_aes_gcm()
2024-03-29BUG/MINOR: cfgparse: report proper location for log-format-sd errors
2024-03-29BUG/MINOR: ssl/cli: typo in new ssl crl-file CLI description
2024-03-29BUG/MINOR: sink: fix a race condition in the TCP log forwarding code
2024-03-29BUG/MINOR: hlua: don't call ha_alert() in hlua_event_subscribe()
2024-03-29BUG/MAJOR: hlua: improper lock usage with hlua_ctx_resume()
2024-03-29BUG/MEDIUM: hlua: improper lock usage with SET_SAFE_LJMP()
2024-03-29BUG/MINOR: hlua: improper lock usage in hlua_filter_new()
2024-03-29BUG/MINOR: hlua: improper lock usage in hlua_filter_callback()
2024-03-29BUG/MINOR: hlua: fix possible crash in hlua_filter_new() under load
2024-03-29BUG/MINOR: hlua: don't use lua_tostring() from unprotected contexts
2024-03-29BUG/MINOR: hlua: fix unsafe lua_tostring() usage with empty stack
2024-03-29BUG/MINOR: tools: seed the statistical PRNG slightly better
2024-03-29BUG/MINOR: hlua: Fix log level to the right value when set via TXN:set_loglevel
2024-03-29BUG/MINOR: config/quic: Alert about PROXY protocol use on a QUIC listener
2024-03-29BUG/MINOR: ssl/cli: duplicate cleaning code in cli_parse_del_crtlist
2024-03-29BUG/MINOR: ist: only store NUL byte on succeeded alloc
2024-03-29BUG/MINOR: quic: fix output of show quic
2024-03-29BUG/MAJOR: server: fix stream crash due to deleted server
2024-03-29BUG/MINOR: stats: drop srv refcount on early release
2024-03-29BUG/MINOR: ist: allocate nul byte on istdup
2024-03-29BUG/MEDIUM: quic: fix transient send error with listener socket
2024-03-29BUG/MEDIUM: hlua: Don't loop if a lua socket does not consume received data
2024-03-29BUG/MEDIUM: hlua: Be able to garbage collect uninitialized lua sockets
2024-03-29BUG/MEDIUM: applet: Immediately free appctx on early error
2024-03-29BUG/MINOR: qpack: reject invalid dynamic table capacity
2024-03-29BUG/MINOR: qpack: reject invalid increment count decoding
2024-03-29BUG/MINOR: quic: reject HANDSHAKE_DONE as server
2024-03-29BUG/MINOR: quic: reject unknown frame type
2024-03-29BUG/MAJOR: promex: fix crash on deleted server
2024-03-12BUG/MINOR: mux-h2: count rejected DATA frames against the connection's flow control
2024-02-26BUG/MAJOR: ssl/ocsp: crash with ocsp when old process exit or using ocsp CLI
2024-02-14BUG/MINOR: ext-check: cannot use without preserve-env
2024-02-14BUG/MINOR: diag: run the final diags before quitting when using -c
2024-02-14BUG/MINOR: diag: always show the version before dumping a diag warning
2024-02-14BUG/MEDIUM: quic: Wrong K CUBIC calculation.
2024-02-14BUG/MINOR: quic: fix possible integer wrap around in cubic window calculation
2024-02-14BUG/MINOR: quic: Wrong ack ranges handling when reaching the limit.
2024-02-14BUG/MEDIUM: quic: fix crash on invalid qc_stream_buf_free() BUG_ON
2024-02-14BUG/MEDIUM: qpack: allow 6xx..9xx status codes
2024-02-14BUG/MEDIUM: h3: do not crash on invalid response status code
2024-02-14BUG/MEDIUM: quic: remove unsent data from qc_stream_desc buf
2024-02-14BUG/MEDIUM: mux-quic: report early error on stream
2024-02-14BUG/MINOR: h3: fix checking on NULL Tx buffer
2024-02-14BUG/MEDIUM: ssl: Fix crash when calling "update ssl ocsp-response" when an update is ongoing
2024-02-14BUG/MINOR: ssl: Reenable ocsp auto-update after an "add ssl crt-list"
2024-02-14BUG/MINOR: ssl: Destroy ckch instances before the store during deinit
2024-02-14BUG/MEDIUM: ocsp: Separate refcount per instance and per store
2024-02-14BUG/MINOR: ssl: Clear the ckch instance when deleting a crt-list line
2024-02-14BUG/MINOR: ssl: Duplicate ocsp update mode when dup'ing ckch
2024-02-14BUG/MINOR: ssl: Fix error message after ssl_sock_load_ocsp call
2024-02-14BUG/MAJOR: ssl_sock: Always clear retry flags in read/write functions
2024-02-14BUG/MEDIUM: h1: always reject the NUL character in header values
2024-02-14BUG/MINOR: h1-htx: properly initialize the err_pos field
2024-02-14BUG/MEDIUM: h1: Don't support LF only to mark the end of a chunk size
2024-02-14BUG/MINOR: h1: Don't support LF only at the end of chunks
2024-02-14BUG/MEDIUM: stconn: Don't check pending shutdown to wake an applet up
2024-02-14BUG/MEDIUM: stconn: Allow expiration update when READ/WRITE event is pending
2024-02-14BUG/MEDIUM: pool: fix rare risk of deadlock in pool_flush()
2024-02-14BUG/MINOR: jwt: fix jwt_verify crash on 32-bit archs
2024-02-14BUG/MEDIUM: cli: fix once for all the problem of missing trailing LFs
2024-02-14BUG/MINOR: vars/cli: fix missing LF after "get var" output
2024-02-14BUG/MEDIUM: cli: some err/warn msg dumps add LR into CSV output on stat's CLI
2024-02-14BUG/MEDIUM: mux-h2: refine connection vs stream error on headers
2024-02-14MINOR: debug: make BUG_ON() catch build errors even without DEBUG_STRICT
2024-01-17BUG/MEDIUM: quic: keylog callback not called (USE_OPENSSL_COMPAT)
2024-01-17BUG/MINOR: mux-h2: also count streams for refused ones
2024-01-17BUG/MINOR: mux-quic: do not prevent non-STREAM sending on flow control
2024-01-12BUG/MEDIUM: spoe: Never create new spoe applet if there is no server up
2024-01-12BUG/MEDIUM: stconn: Forward shutdown on write timeout only if it is forwardable
2024-01-12BUG/MEDIUM: h3: fix incorrect snd_buf return value
2024-01-12BUG/MINOR: h3: close connection on sending alloc errors
2024-01-12BUG/MINOR: h3: properly handle alloc failure on finalize
2024-01-12BUG/MINOR: h3: close connection on header list too big
2024-01-12BUG/MINOR: quic: Missing call to TLS message callbacks
2024-01-12BUG/MINOR: quic: Wrong keylog callback setting.
2024-01-12BUG/MINOR: mux-quic: always report error to SC on RESET_STREAM emission
2024-01-12BUG/MEDIUM: stats: unhandled switching rules with TCP frontend
2024-01-12BUG/MINOR: resolvers: default resolvers fails when network not configured
2024-01-12BUG/MEDIUM: mux-h2: Report too large HEADERS frame only when rxbuf is empty
2024-01-12BUG/MEDIUM: quic: QUIC CID removed from tree without locking
2024-01-12BUG/MEDIUM: quic: Possible buffer overflow when building TLS records
2024-01-12BUG/MINOR: mworker/cli: fix set severity-output support
2023-12-07BUG/MEDIUM: proxy: always initialize the default settings after init
2023-12-07BUG/MINOR: lua: Wrong OCSP CID after modifying an SSL certficate (LUA)
2023-12-07BUG/MINOR: ssl: Wrong OCSP CID after modifying an SSL certficate
2023-12-07BUG/MINOR: ssl: Double free of OCSP Certificate ID
2023-12-05BUG/MINOR: quic: Packet number spaces too lately initialized
2023-12-05BUG/MINOR: quic: Missing QUIC connection path member initialization
2023-12-05BUG/MINOR: quic: Possible leak of TX packets under heavy load
2023-12-05BUG/MEDIUM: quic: Possible crash during retransmissions and heavy load
2023-12-05BUG/MINOR: cache: Remove incomplete entries from the cache when stream is closed
2023-12-05BUG/MEDIUM: peers: fix partial message decoding
2023-12-05BUG/MINOR: sample: Make the `word` converter compatible with `-m found`
2023-12-05BUG/MINOR: cfgparse-listen: fix warning being reported as an alert
2023-12-05BUG/MINOR: config: Stopped parsing upon unmatched environment variables
2023-12-05BUG/MINOR: quic_tp: fix preferred_address decoding
2023-12-05BUG/MINOR: h3: always reject PUSH_PROMISE
2023-12-05BUG/MINOR: h3: fix TRAILERS encoding
2023-12-05BUG/MEDIUM: master/cli: Properly pin the master CLI on thread 1 / group 1
2023-12-05BUG/MINOR: compression: possible NULL dereferences in comp_prepare_compress_request()
2023-12-05BUG/MINOR: quic: fix CONNECTION_CLOSE_APP encoding
2023-12-05BUG/MINOR: server: do not leak default-server in defaults sections
2023-12-05BUG/MINOR: quic: Possible RX packet memory leak under heavy load
2023-12-05BUG/MEDIUM: quic: Possible crash for connections to be killed
2023-12-05BUG/MINOR: sock: mark abns sockets as non-suspendable and always unbind them
2023-12-05BUG/MINOR: startup: set GTUNE_SOCKET_TRANSFER correctly
2023-12-05BUG/MINOR: proxy/stktable: missing frees on proxy cleanup
2023-12-05BUG/MINOR: stream/cli: report correct stream age in "show sess"
2023-12-05BUG/MEDIUM: mux-fcgi: fail earlier on malloc in takeover()
2023-12-05BUG/MEDIUM: mux-h1: fail earlier on malloc in takeover()
2023-12-05BUG/MEDIUM: mux-h2: fail earlier on malloc in takeover()
2023-11-21BUG/MAJOR: quic: complete thread migration before tcp-rules
2023-11-17BUG/MINOR: stconn: Report read activity on non-indep streams for partial sends
2023-11-17BUG/MINOR: stconn/applet: Report send activity only if there was output data
2023-11-17BUG/MINOR: stconn: Use HTX-aware channel's functions to get info on buffer
2023-11-17BUG/MINOR: stconn: Fix streamer detection for HTX streams
2023-11-17BUG/MEDIUM: stconn: Update fsb date on partial sends
2023-11-14BUG/MEDIUM: stream: Don't call mux .ctl() callback if not implemented
2023-11-14BUG/MEDIUM: mworker: set the master variable earlier
2023-11-14BUG/MEDIUM: applet: Report a send activity everytime data were sent
2023-11-14BUG/MEDIUM: stconn: Report a send activity everytime data were sent
2023-11-14BUG/MEDIUM: stream: Properly handle abortonclose when set on backend only
2023-11-14BUG/MINOR: stconn: Handle abortonclose if backend connection was already set up
2023-11-14BUG/MEDIUM: connection: report connection errors even when no mux is installed
2023-11-14BUG/MINOR: sink: don't learn srv port from srv addr
2023-11-14BUG/MEDIUM: applet: Remove appctx from buffer wait list on release
2023-11-14BUG/MINOR: quic: fix retry token check inconsistency
2023-11-09BUG/MEDIUM: stconn: Don't update stream expiration date if already expired
2023-11-09BUG/MEDIUM: quic: Avoid some crashes upon TX packet allocation failures
2023-11-09BUG/MEDIUM: quic: Possible crashes when sending too short Initial packets
2023-11-09BUG/MEDIUM: quic: Avoid trying to send ACK frames from an empty ack ranges tree
2023-11-09BUG/MINOR: quic: idle timer task requeued in the past
2023-11-09BUG/MEDIUM: pool: fix releasable pool calculation when overloaded
2023-11-09BUG/MEDIUM: freq-ctr: Don't report overshoot for long inactivity period
2023-11-09BUG/MINOR: mux-h1: Properly handle http-request and http-keep-alive timeouts
2023-11-09BUG/MINOR: stick-table/cli: Check for invalid ipv4 key
2023-11-09BUG/MEDIUM: quic: fix sslconns on quic_conn alloc failure
2023-11-09BUG/MEDIUM: quic: fix actconn on quic_conn alloc failure
2023-11-09BUG/MINOR: stconn: Sanitize report for read activity
2023-11-09BUG/MEDIUM: Don't apply a max value on room_needed in sc_need_room()
2023-11-09BUG/MEDIUM: stconn: Don't report rcv/snd expiration date if SC cannot epxire
2023-11-09BUG/MEDIUM: pattern: don't trim pools under lock in pat_ref_purge_range()
2023-11-09BUG/MINOR: cfgparse/stktable: fix error message on stktable_init() failure
2023-11-09BUG/MINOR: stktable: missing free in parse_stick_table()
2023-11-09BUG/MINOR: tcpcheck: Report hexstring instead of binary one on check failure
2023-11-09BUG/MEDIUM: ssl: segfault when cipher is NULL
2023-11-09BUG/MINOR: mux-quic: fix early close if unset client timeout
2023-11-09BUG/MINOR: ssl: suboptimal certificate selection with TLSv1.3 and dual ECDSA/RSA
2023-11-09BUG/MINOR: ssl: use a thread-safe sslconns increment
2023-11-09BUG/MINOR: quic: do not consider idle timeout on CLOSING state
2023-11-09BUG/MEDIUM: server: "proto" not working for dynamic servers
2023-11-09DEBUG: mux-h2/flags: fix list of h2c flags used by the flags decoder
2023-11-08BUG/MINOR: ssl: load correctly @system-ca when ca-base is define
2023-10-26BUG/MINOR: mux-h2: update tracked counters with req cnt/req err
2023-10-26BUG/MINOR: mux-h2: commit the current stream ID even on reject
2023-10-26BUG/MEDIUM: peers: Fix synchro for huge number of tables
2023-10-26BUG/MEDIUM: peers: Be sure to always refresh recconnect timer in sync task
2023-10-26BUG/MINOR: trace: fix trace parser error reporting
2023-10-26BUG/MINOR: mux-h2: fix http-request and http-keep-alive timeouts again
2023-10-26BUG/MEDIUM: mux-h2: Don't report an error on shutr if a shutw is pending
2023-10-26BUG/MINOR: mux-h2: make up other blocked streams upon removal from list
2023-10-26BUG/MINOR: mux-h1: Send a 400-bad-request on shutdown before the first request
2023-10-26BUG/MEDIUM: quic-conn: free unsent frames on retransmit to prevent crash
2023-10-26BUG/MINOR: mux-quic: fix free on qcs-new fail alloc
2023-10-26BUG/MINOR: h3: strengthen host/authority header parsing
2023-10-26BUG/MINOR: mux-quic: support initial 0 max-stream-data
2023-10-26BUG/MEDIUM: mux-quic: fix RESET_STREAM on send-only stream
2023-10-26BUG/MINOR: quic: reject packet with no frame
2023-10-26BUG/MINOR: quic: Avoid crashing with unsupported cryptographic algos
2023-10-26BUG/MEDIUM: stconn: Fix comparison sign in sc_need_room()
2023-10-26BUG/MINOR: hq-interop: simplify parser requirement
2023-10-26BUG/MEDIUM: h1: Ignore C-L value in the H1 parser if T-E is also set
2023-10-26BUG/MINOR: mux-h1: Ignore C-L when sending H1 messages if T-E is also set
2023-10-26BUG/MINOR: mux-h1: Handle read0 in rcv_pipe() only when data receipt was tried
2023-10-26BUG/MEDIUM: hlua: Initialize appctx used by a lua socket on connect only
2023-10-26BUG/MEDIUM: http-ana: Try to handle response before handling server abort
2023-10-17BUG/MEDIUM: quic_conn: let the scheduler kill the task when needed
2023-10-06BUG/MEDIUM: actions: always apply a longest match on prefix lookup
2023-10-04BUG/MINOR: mux-quic: remove full demux flag on ncbuf release
2023-10-04BUG/MEDIUM: server/cli: don't delete a dynamic server that has streams
2023-10-04BUG/MINOR: server: add missing free for server->rdr_pfx
2023-10-04BUG/MAJOR: mux-h2: Report a protocol error for any DATA frame before headers
2023-10-04BUG/MINOR: freq_ctr: fix possible negative rate with the scaled API
2023-10-04BUG/MEDIUM: master/cli: Pin the master CLI on the first thread of the group 1
2023-10-04BUG/MINOR: promex: fix backend_agg_check_status
2023-10-04BUG/MEDIUM: mux-fcgi: Don't swap trash and dbuf when handling STDERR records
2023-10-04BUG/MINOR: hlua/init: coroutine may not resume itself
2023-10-04BUG/MEDIUM: hlua: don't pass stale nargs argument to lua_resume()
2023-09-29Revert "BUG/MEDIUM: quic: missing check of dcid for init pkt including a token"
2023-09-29BUG/MEDIUM: hlua: streams don't support mixing lua-load with lua-load-per-thread
2023-09-21BUG/MINOR: quic: ssl_quic_initial_ctx() uses error count not error code
2023-09-21BUG/MINOR: quic: allow-0rtt warning must only be emitted with quic bind
2023-09-21BUG/MINOR: quic+openssl_compat: Non initialized TLS encryption levels
2023-09-14BUG/MINOR: quic: Wrong cluster secret initialization
2023-09-13BUG/MINOR: quic: Leak of frames to send.
2023-09-12BUILD: bug: make BUG_ON() void to avoid a rare warning
2023-09-07BUG/MINOR: hlua/action: incorrect message on E_YIELD error
2023-09-07BUG/MINOR: ring/cli: Don't expect input data when showing events
2023-09-07BUG/MINOR: applet: Always expect data when CLI is waiting for a new command
2023-09-07BUG/MEDIUM: stconn/stream: Forward shutdown on write timeout
2023-09-07BUG/MEDIUM: applet: Report an error if applet request more room on aborted SC
2023-09-07BUG/MEDIUM: stconn: Report read activity when a stream is attached to front SC
2023-09-07BUG/MEDIUM: applet: Fix API for function to push new data in channels buffer
2023-09-07BUG/MINOR: quic: Wrong RTT computation (srtt and rrt_var)
2023-09-07BUG/MINOR: quic: Wrong RTT adjusments
2023-09-07BUG/MINOR: stream: further protect stream_dump() against incomplete sessions
2023-09-07BUG/MEDIUM: h1-htx: Ensure chunked parsing with full output buffer
2023-09-07BUG/MAJOR: quic: Really ignore malformed ACK frames.
2023-09-06BUG/MINOR: quic: Possible skipped RTT sampling
2023-09-06BUG/MEDIUM: stconn: Don't block sends if there is a pending shutdown
2023-09-06BUG/MEDIUM: stconn: Wake applets on sending path if there is a pending shutdown
2023-09-06BUG/MINOR: stconn: Don't report blocked sends during connection establishment
2023-09-06BUG/MEDIUM: stconn: Update stream expiration date on blocked sends
2023-09-06DEBUG: applet: Properly report opposite SC expiration dates in traces
2023-09-06BUG/MINOR: checks: do not queue/wake a bounced check
2023-09-06BUG/MINOR: stream: protect stream_dump() against incomplete streams
2023-09-06BUG/MINOR: ssl/cli: can't find ".crt" files when replacing a certificate
2023-09-06BUG/MINOR: ssl_sock: fix possible memory leak on OOM
2023-09-06BUG/MINOR: hlua_fcn: potentially unsafe stktable_data_ptr usage
2023-09-06BUG/MINOR: stktable: allow sc-add-gpc from tcp-request connection
2023-09-06BUG/MINOR: stktable: allow sc-set-gpt(0) from tcp-request connection
2023-09-06BUG/MINOR: hlua: fix invalid use of lua_pop on error paths
2023-09-06BUG/MEDIUM: quic: fix tasklet_wakeup loop on connection closing

Back to the list of branches and versions
Back to the HAProxy page