HAProxy known bugs for version v3.0.18 (maintenance branch 3.0) :  57 

This version (3.0.18) is a release belonging to maintenance branch 3.0 whose latest version is 3.0.20. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches.

Quick links

Other versions in the same branch

This branch contains the following releases :

DateVersionComment
2026-04-233.0.20 ⇐ last
2026-03-193.0.19 
2026-03-093.0.18 ⇐ yours
2026-02-193.0.17 
2026-02-123.0.16 
2026-01-293.0.15 
2025-12-223.0.14 
2025-12-173.0.13 
2025-10-033.0.12 
2025-06-023.0.11 
2025-04-223.0.10 
2025-03-203.0.9 
2025-01-293.0.8 
2024-12-123.0.7 
2024-11-073.0.6 
2024-09-193.0.5 
2024-09-033.0.4 
2024-07-113.0.3 
2024-06-143.0.2 
2024-06-103.0.1 
2024-05-293.0.0 

Known bugs affecting this version, and already fixed in the maintenance branch

These fixes have already been queued for a more recent 3.0 version. Some of them might have already been released in a more recent version than yours, and other ones might still be pending in the maintenance branch for a future release. The list may be empty if you're already on the latest version and no new fix was backported.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in this version by category :

TotalCRITICALMAJORMEDIUMMINOR
57 0 3 17 37

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2026-04-23BUG/MEDIUM: mux-h1: Force close mode for bodyless message announcing a C-L
2026-04-23BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as well
2026-04-23BUG/MINOR: compression: properly disable request when setting response
2026-04-23BUG/MINOR: mux-h1: Fix condition to send null-chunk for bodyless message
2026-04-23BUG/MINOR: h2: Don't look at the exclusive bit for PRIORITY frame
2026-04-23BUG/MEDIUM: tasks: Make sure we don't schedule a task already running
2026-04-23BUG/MINOR: mux-h2: count a proto error when rejecting a stream on parsing error
2026-04-23BUG/MEDIUM: mux-h2: ignore conn->owner when deciding if a connection is dead
2026-04-23BUG/MEDIUM: peers: trash of expired entries delayed after fullresync
2026-04-23BUG/MEDIUM: htx: Don't count delta twice when block value is replaced
2026-04-23BUG/MEDIUM: htx: Fix function used to change part of a block value when defrag
2026-04-23BUG/MINOR: log: Fix error message when using unavailable fetch in logfmt
2026-04-23BUG/MINOR: ot: fixed wrong NULL check in flt_ot_parse_cfg_group()
2026-04-23BUG/MINOR: hlua: fix use-after-free of HTTP reason string
2026-04-23BUG/MEDIUM: mux-fcgi: prevent record-length truncation with large bufsize
2026-04-23BUG/MINOR: sample: fix info leak in regsub when exp_replace fails
2026-04-23BUG/MEDIUM: samples: Fix handling of SMP_T_METH samples
2026-04-23BUG/MINOR: spoe: fix pointer arithmetic overflow in spoe_decode_buffer()
2026-04-23BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals
2026-04-23BUG/MINOR: peers: fix OOB heap write in dictionary cache update
2026-04-23BUG/MINOR: hlua: fix stack overflow in httpclient headers conversion
2026-04-23BUG: hlua: fix stack overflow in httpclient headers conversion
2026-04-23BUG/MEDIUM: jwt: fix heap overflow in ECDSA signature DER conversion
2026-04-23BUG/MEDIUM: payload: validate SNI name_len in req.ssl_sni
2026-04-23BUG/MEDIUM: mux-h1: Disable 0-copy forwarding when draining the request
2026-04-23BUG/MINOR: cfgcond: fail cleanly on missing argument for "feature"
2026-04-23BUG/MINOR: cfgcond: always set the error string on openssl_version checks
2026-04-23BUG/MINOR: cfgcond: properly set the error pointer on evaluation error
2026-04-23BUG/MINOR: quic: fix documentation for transport params decoding
2026-04-23BUG/MINOR: tcpcheck: Use tcpcheck context for expressions parsing
2026-04-23BUG/MINOR: tcpcheck: Don't enable http_needed when parsing HTTP samples
2026-04-23BUG/MINOR: tcpcheck: Remove unexpected flag on tcpcheck rules for httchck option
2026-04-23BUG/MEDIUM: mux-h1: Don't set MSG_MORE on bodyless responses forwarded to client
2026-04-23BUG/MEDIUM: map/cli: map/acl commands warn when accessed without admin level
2026-04-23BUG/MEDIUM: ssl/ocsp: ocsp commands warn when accessed without admin level
2026-04-23BUG/MEDIUM: ssl/cli: tls-keys commands warn when accessed without admin level
2026-04-23BUG/MINOR: stconn: Always declare the SC created from healthchecks as a back SC
2026-04-23BUG/MINOR: quic: close conn on packet reception with incompatible frame
2026-04-23BUG/MINOR: http-ana: Only consider client abort for abortonclose
2026-04-23Revert "BUG/MEDIUM: mux-h2: make sure to always report pending errors to the stream"
2026-04-17BUG/MINOR: config: Properly test warnif_misplaced_* return values
2026-04-17BUG/MINOR: qpack: fix 62-bit overflow and 1-byte OOB reads in decoding
2026-04-17BUG/MINOR: sock: adjust accept() error messages for ENFILE and ENOMEM
2026-03-19BUG/MEDIUM: h3: reject unaligned frames except DATA
2026-03-19BUG/MAJOR: h3: check body size with content-length on empty FIN
2026-03-19BUG/MINOR: mux-h2: properly ignore R bit in WINDOW_UPDATE increments
2026-03-19BUG/MINOR: mux-h2: properly ignore R bit in GOAWAY stream ID
2026-03-19BUG/MEDIUM: peers: enforce check on incoming table key type
2026-03-19BUG/MINOR: mjson: make mystrtod() length-aware to prevent out-of-bounds reads
2026-03-19BUG/MINOR: stream: Fix crash in stream dump if the current rule has no keyword
2026-03-19BUG/MINOR: http-ana: Swap L7 buffer with request buffer by hand
2026-03-19BUG/MINOR: h2/h3: Never insert partial headers/trailers in an HTX message
2026-03-19BUG/MINOR: h2/h3: Only test number of trailers inserted in HTX message
2026-03-19BUG/MINOR: sockpair: set FD_CLOEXEC on fd received via SCM_RIGHTS
2026-03-19BUG/MINOR: mworker: fix typo &= instead of & in proc list serialization
2026-03-19BUG/MINOR: memprof: avoid a small memory leak in "show profiling"
2026-03-19BUG/MINOR: tcpcheck: Fix typo in error error message for `http-check expect`
2026-03-19BUG/MINOR: mworker/cli: fix show proc pagination losing entries on resume

Back to the list of branches and versions
Back to the HAProxy page