HAProxy known bugs for maintenance branch 3.0 :  1 

This is maintenance branch 3.0 whose latest version is 3.0.10. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches. In short, if you are running any 3.0 version other than 3.0.10, you're running with known bugs.

Quick links

Versions available in this branch

This branch contains the following releases :

DateVersionComment
2025-04-223.0.10 ⇐ last
2025-03-203.0.9 
2025-01-293.0.8 
2024-12-123.0.7 
2024-11-073.0.6 
2024-09-193.0.5 
2024-09-033.0.4 
2024-07-113.0.3 
2024-06-143.0.2 
2024-06-103.0.1 
2024-05-293.0.0 

Fixes for known bugs pending in this branch since the last release (3.0.10)

These fixes have already been queued for the next 3.0 release but no version was released with them yet. Note that fixes are backported several at a time from the development branch to maintenance branches, and the absence of a fix here doesn't mean none will be issued soon.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in the latest version of this branch by category :

TotalCRITICALMAJORMEDIUMMINOR
1 0 0 1 0

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2025-04-30BUG/MEDIUM: mux-fcgi: Try to fully fill demux buffer on receive if not empty

Known bugs fixed in the development branch after the last commit in this branch

It is important to understand that not all of these commits are necessarily relevant to this version, but clicking on them will show the bug description. All fixes are made first in the development branch and then backported to the maintenance branches. This ensures no fix is lost when upgrading. If a fix was marked for backporting to this branch and is not there yet, it's likely that it is still missing. Do not hesitate to ask on the haproxy mailing list if you feel like a fix has been skipped.

DateSubject
2025-05-13BUG/MINOR: cpu-topo: fix group-by-cluster policy for disordered clusters
2025-05-12BUG/MEDIUM: h2/h3: reject some forbidden chars in :authority before reassembly
2025-05-12BUG/MINOR: server: perform lbprm deinit for dynamic servers
2025-05-12BUG/MINOR: server: dont depend on proxy for server cleanup in srv_drop()
2025-05-12BUG/MINOR: cfgparse: improve the empty arg position report's robustness
2025-05-12BUG/MINOR: tools: improve parse_line()'s robustness against empty args
2025-05-12BUG/MINOR: threads: fix soft-stop without multithreading support
2025-05-09BUG/MINOR: ssl/ckch: always ha_freearray() the previous entry during parsing
2025-05-09BUG/MINOR: ssl/ckch: always free() the previous entry during parsing
2025-05-09BUG/MINOR: ssl: prevent multiple 'crt' on the same ssl-f-use line
2025-05-09BUG/MINOR: ssl: doesn't fill conf->crt with first arg
2025-05-09DEBUG: pools: add a new integrity mode "backup" to copy the released area
2025-05-09DEBUG: pool: permit per-pool UAF configuration
2025-05-09BUG/MEDIUM: mux-quic: fix crash on invalid fctl frame dereference
2025-05-09BUG/MINOR: cfgparse: consider the special case of empty arg caused by \x00
2025-05-09BUG/MEDIUM: quic: free stream_desc on all data acked
2025-05-08BUG/MEDIUM: stick-table: always remove update before adding a new one
2025-05-08BUG/MINOR: cli: fix too many args detection for commands
2025-05-07BUG/MEDIUM: stick-tables: close a tiny race in __stksess_kill()
2025-05-07BUG/MEDIUM: peers: hold the refcnt until updating ts->seen
2025-05-07BUG/MINOR: quic: reject invalid max_udp_payload size
2025-05-07BUG/MINOR: quic: fix TP reject on invalid max-ack-delay
2025-05-07BUG/MINOR: quic: use proper error code on invalid received TP value
2025-05-07BUG/MINOR: quic: reject retry_source_cid TP on server side
2025-05-07BUG/MINOR: quic: use proper error code on invalid server TP
2025-05-07BUG/MINOR: quic: use proper error code on missing CID in TPs
2025-05-07BUG/MINOR: tools: only fill first empty arg when not out of range
2025-05-06BUG/MINOR: ssl: can't use crt-store some certificates in ssl-f-use
2025-05-06BUG/MAJOR: queue: lock around the call to pendconn_process_next_strm()
2025-05-06Revert "BUG/MEDIUM: mux-spop: Handle CLOSING state and wait for AGENT DISCONNECT frame"
2025-05-06BUG/MINOR: proxy: only use proxy_inc_fe_cum_sess_ver_ctr() with frontends
2025-05-06DEBUG: threads: display held locks in threads dumps
2025-05-05DEBUG: threads: merge successive idempotent lock operations in history
2025-05-05DEBUG: threads: don't keep lock label "OTHER" in the per-thread history
2025-05-05BUG/MINOR: tools: make parseline report the required space for the trailing 0
2025-05-05BUG/MINOR: tools: always terminate empty lines
2025-05-05BUG/MINOR: tools: do not create an empty arg from trailing spaces
2025-05-02BUG/MINOR: acme/cli: don't output error on success
2025-05-02BUG/MEDIUM: stktable: fix sc_*() BUG_ON() regression with ctx > 9
2025-05-02BUG/MAJOR: tasks: fix task accounting when killed
2025-05-02BUG/MEDIUM: quic: Let it be known if the tasklet has been released.
2025-05-02BUG/MINOR: acme: reinit the retries only at next request
2025-04-30BUG/MEDIUM: connections: Report connection closing in conn_create_mux()
2025-04-30BUG/MINOR: mux-spop: Use the right bitwise operator in spop_ctl()
2025-04-30BUG/MINOR: mux-h1: Fix trace message in h1_detroy() to not relay on connection
2025-04-30BUG/MINOR: mux-h1: Don't pretend connection was released for TCP>H1>H2 upgrade
2025-04-30BUG/MEDIUM: mux-spop: Handle CLOSING state and wait for AGENT DISCONNECT frame
2025-04-30BUG/MEDIUM: mux-spop: Wait end of handshake to declare a spop connection ready

Back to the list of branches and versions
Back to the HAProxy page