HAProxy known bugs for maintenance branch 3.0 :  0 

This is maintenance branch 3.0 whose latest version is 3.0.29. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches. In short, if you are running any 3.0 version other than 3.0.29, you're running with known bugs.

Quick links

Versions available in this branch

This branch contains the following releases :

DateVersionComment
2026-09-283.0.29 ⇐ last
2026-09-243.0.28 
2026-08-273.0.27 
2026-07-293.0.26 
2026-07-033.0.25 
2026-06-263.0.24 
2026-05-113.0.23 
2026-05-063.0.22 
2026-04-303.0.21 
2026-04-233.0.20 
2026-03-193.0.19 
2026-03-093.0.18 
2026-02-193.0.17 
2026-02-123.0.16 
2026-01-293.0.15 
2025-12-223.0.14 
2025-12-173.0.13 
2025-10-033.0.12 
2025-06-023.0.11 
2025-04-223.0.10 
2025-03-203.0.9 
2025-01-293.0.8 
2024-12-123.0.7 
2024-11-073.0.6 
2024-09-193.0.5 
2024-09-033.0.4 
2024-07-113.0.3 
2024-06-143.0.2 
2024-06-103.0.1 
2024-05-293.0.0 

Fixes for known bugs pending in this branch since the last release (3.0.29)

These fixes have already been queued for the next 3.0 release but no version was released with them yet. Note that fixes are backported several at a time from the development branch to maintenance branches, and the absence of a fix here doesn't mean none will be issued soon.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in the latest version of this branch by category :

TotalCRITICALMAJORMEDIUMMINOR
0 0 0 0 0

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)

Known bugs fixed in the development branch after the last commit in this branch

It is important to understand that not all of these commits are necessarily relevant to this version, but clicking on them will show the bug description. All fixes are made first in the development branch and then backported to the maintenance branches. This ensures no fix is lost when upgrading. If a fix was marked for backporting to this branch and is not there yet, it's likely that it is still missing. Do not hesitate to ask on the haproxy mailing list if you feel like a fix has been skipped.

DateSubject
2026-10-07BUG/MINOR: ssl: Fix potential NULL-deref in "dump ssl cert" with AWS-LC
2026-10-07BUG/MEDIUM: mux_quic: notify stream on RESET_STREAM reception
2026-10-07BUG/MINOR: h3: reject RS/SS for QPACK uni streams
2026-10-07BUG/MINOR: h3: close connection on GOAWAY frame too long
2026-10-07BUG/MINOR: h3: reject frames with truncated header
2026-10-07BUG/MINOR: mux_quic: account data in conn fctl on early detach
2026-10-07BUG/MEDIUM: mux_quic: account discarded data in connection flow control
2026-10-07BUG/MINOR: mux_quic: report conn error on RESET_STREAM fctl violation
2026-10-06BUG/MINOR: mux_quic: extend FINAL_SIZE_ERROR detection on stream
2026-10-06BUG/MINOR: mux_quic: prevent purgeable QCS lingering
2026-10-06BUG/MAJOR: mux-quic: prevent crash on QCS already set for purging
2026-10-06BUG/MINOR: ssl: use standard names for X25519 and X448 groups
2026-10-06BUG/MINOR: ssl: don't uppercase the native group name
2026-10-06BUG/MEDIUM: listener: Consider maxconn before waking listeners
2026-10-06BUG/MEDIUM: ssl: crt-list curves ignored with AWS-LC
2026-10-06BUG/MEDIUM: ssl: crt-list ciphers ignored with AWS-LC
2026-10-06BUG/MINOR: ssl: fix trace crash on BE conn release in io cb
2026-10-06BUG/MINOR: ssl: fix trace crash on FE conn release in io cb
2026-10-06BUG/MINOR: hq-interop: prevent double EOM on request with standalone FIN
2026-10-06DEBUG: support reading set-dumpable from HAPROXY_FORCE_DUMPABLE
2026-10-05BUG/MINOR: log: fix erroneous error message in log-steps parser
2026-10-02BUG/MEDIUM: server: remove immediately from GUID tree on delete server
2026-10-02BUG/MINOR: cli: update wait help usage
2026-10-02BUG/MINOR: server: fix "del server" description
2026-10-02BUG/MINOR: proxy: add PR_CAP_LB for dynamically added backend
2026-09-30BUG/MINOR: sample: return the decoded JWT part when no path is given
2026-09-30BUG/MEDIUM: tcpcheck: do not run a regex on an unallocated buffer
2026-09-30BUG/MINOR: http-fetch: do not count Set-Cookie attributes as cookies
2026-09-30BUG/MINOR: payload: always report a boolean from req.ssl_ec_ext
2026-09-30BUG/MINOR: stick-table: do not count the lookup itself in table_trackers()
2026-09-30BUG/MINOR: http-ana: return a 502 when checkcache blocks a response
2026-09-30BUG/MINOR: sample: make quic_enabled() always succeed
2026-09-30BUG/MINOR: sample: zero-pad the fractional part emitted by http_date()
2026-09-30BUG/MINOR: sample: apply the ms_/us_ time offsets in the input unit
2026-09-30BUG/MINOR: http: do not consume the delimiter of a truncated q-factor
2026-09-30BUG/MINOR: startup: don't chroot by default when set-dumpable is set
2026-09-30BUG/MINOR: jwe: Avoid buffer overflow in fake cek (RSA1.5)
2026-09-30BUG/MINOR: jwe: Buffer overflow when filling fake cek in case of RSA1.5
2026-09-30BUG/MEDIUM: pattern: don't dereference static_pattern's data when not filling it
2026-09-29BUG/MEDIUM: stick-table: restrict key sizes to what fits in a buffer
2026-09-29BUG/MINOR: mux-h1: Discard pending raw data after a tunnel rejection
2026-09-29BUG/MEDIUM: mux-h1: Don't subscribe for sends while output is blocked
2026-09-29BUG/MAJOR: mux-h2: Preserve raw data on aborted frontend tunnels
2026-09-29BUG/MINOR: chunk: Allow large chunks uses from large const buffers
2026-09-28BUG/MEDIUM: server: skip log backend addr checks for internal proxies
2026-09-28BUG/MEDIUM: sink: reconnect attempt not working after session lasted more than ~25 days

Back to the list of branches and versions
Back to the HAProxy page