2026-03-19BUG/MEDIUM: h3: reject unaligned frames except DATA 2026-03-19BUG/MAJOR: h3: check body size with content-length on empty FIN 2026-03-19BUG/MINOR: mux-h2: properly ignore R bit in WINDOW_UPDATE increments 2026-03-19BUG/MINOR: mux-h2: properly ignore R bit in GOAWAY stream ID 2026-03-19BUG/MEDIUM: peers: enforce check on incoming table key type 2026-03-19BUG/MINOR: mworker: don't try to access an initializing process 2026-03-19BUG/MINOR: spoe: Fix condition to abort processing on client abort 2026-03-19BUG/MINOR: mjson: make mystrtod() length-aware to prevent out-of-bounds reads 2026-03-19BUG/MINOR: stream: Fix crash in stream dump if the current rule has no keyword 2026-03-19BUG/MINOR: proxy: do not forget to validate quic-initial rules 2026-03-19BUG/MINOR: http-ana: Swap L7 buffer with request buffer by hand 2026-03-19BUG/MINOR: h2/h3: Never insert partial headers/trailers in an HTX message 2026-03-19BUG/MINOR: h2/h3: Only test number of trailers inserted in HTX message 2026-03-19BUG/MEDIUM: spoe: Properly abort processing on client abort 2026-03-19BUG/MINOR: spoe: Properly switch SPOE filter to WAITING_ACK state 2026-03-19BUG/MINOR: sockpair: set FD_CLOEXEC on fd received via SCM_RIGHTS 2026-03-19BUG/MINOR: mworker: avoid passing NULL version in proc list serialization 2026-03-19BUG/MINOR: mworker: set a timeout on the worker socketpair read at startup 2026-03-19BUG/MINOR: mworker: fix typo &= instead of & in proc list serialization 2026-03-19BUG/MINOR: mworker: only match worker processes when looking for unspawned proc 2026-03-19BUG/MINOR: memprof: avoid a small memory leak in "show profiling" 2026-03-19BUG/MINOR: mworker: always stop the receiving listener 2026-03-19BUG/MINOR: tcpcheck: Fix typo in error error message for `http-check expect` 2026-03-19BUG/MINOR: mworker: don't set the PROC_O_LEAVING flag on master process 2026-03-19BUG/MINOR: mworker/cli: fix show proc pagination losing entries on resume 2026-03-09BUG/MINOR: backend: Don't get proto to use for webscoket if there is no server 2026-03-09BUG/MINOR: ssl-sample: Fix sample_conv_sha2() by checking EVP_Digest* failures 2026-03-05BUG/MEDIUM: mux-fcgi: Use a safe loop to resume each stream eligible for sending 2026-03-05BUG/MAJOR: resolvers: Properly lowered the names found in DNS response 2026-03-05BUG/MAJOR: fcgi: Fix param decoding by properly checking its size 2026-03-05BUG/MINOR: h1-htx: Be sure that H1 response version starts by "HTTP/" 2026-03-05BUG/MEDIUM: qpack: correctly deal with too large decoded numbers 2026-03-05BUG/MINOR: qpack: fix 1-byte OOB read in qpack_decode_fs_pfx() 2026-03-05BUG/MAJOR: qpack: unchecked length passed to huffman decoder 2026-03-05BUG/MEDIUM: hpack: correctly deal with too large decoded numbers 2026-03-05BUG/MINOR: promex: fix server iteration when last server is deleted 2026-02-26BUG/MEDIUM: mux-h2: make sure to always report pending errors to the stream 2026-02-18BUG/MINOR: http-ana: Stop to wait for body on client error/abort 2026-02-18BUG/MINOR: flt-trace: Properly compute length of the first DATA block 2026-02-18BUG/MEDIUM: applet: Fix test on shut flags for legacy applets (v2) 2026-02-18BUG/MEDIUM: mux-h1: Stop sending vi fast-forward for unexpected states 2026-02-18BUG/MEDIUM: mux-h2/quic: Stop sending via fast-forward if stream is closed 2026-02-18BUG/MEDIUM: h3: reject frontend CONNECT as currently not implemented 2026-02-18BUG/MAJOR: Revert "MEDIUM: mux-quic: add BUG_ON if sending on locally closed QCS" 2026-02-18BUG/MINOR: deviceatlas: set cache_size on hot-reloaded atlas instance 2026-02-18BUG/MINOR: deviceatlas: fix deinit to only finalize when initialized 2026-02-18BUG/MINOR: deviceatlas: fix resource leak on hot-reload compile failure 2026-02-18BUG/MINOR: deviceatlas: fix double-checked locking race in checkinst 2026-02-18BUG/MINOR: deviceatlas: fix cookie vlen using wrong length after extraction 2026-02-18BUG/MINOR: deviceatlas: fix off-by-one in da_haproxy_conv() 2026-02-18BUG/MEDIUM: deviceatlas: fix resource leaks on init error paths 2026-02-18BUG/MINOR: deviceatlas: add NULL checks on strdup() results in config parsers 2026-02-18BUG/MINOR: deviceatlas: add missing return on error in config parsers 2026-02-12BUG/MAJOR: quic: reject invalid token 2026-02-11BUG/MINOR: startup: handle a possible strdup() failure 2026-02-11BUG/MINOR: startup: fix allocation error message of progname string 2026-02-11BUG/MINOR: config: Fix setting of alt_proto 2026-02-11BUG/MEDIUM: lb-chash: always properly initialize lb_nodes with dynamic servers 2026-02-11BUG/MEDIUM: threads: Atomically set TH_FL_SLEEPING and clr FL_NOTIFIED 2026-01-30BUG/MEDIUM: applet: Fix test on shut flags for legacy applets 2026-01-30BUG/MAJOR: applet: Don't call I/O handler if the applet was shut 2026-01-29BUG/MEDIUM: debug: only dump Lua state when panicking 2026-01-29BUG/MINOR: config: check capture pool creations for failures 2026-01-29BUG/MEDIUM: mux-h2: synchronize all conditions to create a new backend stream 2026-01-28BUG/MINOR: mworker/cli: fix show proc pagination using reload counter 2026-01-28BUG/MINOR: mworker/cli: 'show proc' is limited by buffer size 2026-01-27BUG/MINOR: ssl: fix error message of tune.ssl.certificate-compression 2026-01-23BUG/MEDIUM: mux-h1: Skip UNUSED htx block when formating the start line 2026-01-23BUG/MINOR: promex: Detach promex from the server on error dump its metrics dump 2026-01-23BUG/MINOR: hlua: consume error object if ignored after a failing lua_pcall() 2026-01-23BUG/MEDIUM: hlua: fix invalid lua_pcall() usage in hlua_traceback() 2026-01-23BUG/MINOR: proxy: fix deinit crash on defaults with duplicate name 2026-01-23BUG/MEDIUM: mux-quic: prevent BUG_ON() on aborted uni stream close 2026-01-23BUG/MEDIUM: ssl: fix generate-certificates option when SNI greater than 64bytes 2026-01-23BUG/MEDIUM: ssl: fix error path on generate-certificates 2026-01-23BUG/MEDIUM: promex: server iteration may rely on stale server 2026-01-23BUG/MINOR: cfgparse: fix "default" prefix parsing 2026-01-23BUG/MINOR: proxy: free persist_rules 2026-01-23BUG/MINOR: http_act: fix deinit performed on uninitialized lf_expr in release_http_map() 2026-01-23BUG/MEDIUM: quic: fix ACK ECN frame parsing 2026-01-09BUG/MINOR: cli/stick-tables: argument to "show table" is optional 2026-01-09BUG/MINOR: cfgparse: wrong section name upon error 2026-01-09BUG/MEDIUM: mworker: can't use signals after a failed reload 2026-01-09BUG/MINOR: backend: inspect request not response buffer to check for TFO 2026-01-09BUG/MINOR: backend: fix the conn_retries check for TFO 2026-01-09BUG/MINOR: sock-inet: ignore conntrack for transparent sockets on Linux 2026-01-09BUG/MEDIUM: ssl: Don't resume session for check connections 2026-01-09BUG/MEDIUM: ssl: Don't reuse TLS session if the connection's SNI differs 2026-01-09BUG/MINOR: mux-h2: send the preface along with the first request if needed 2026-01-07BUG/MEDIUM: stconn: Don't report abort from SC if read0 was already received 2026-01-07BUG/MEDIUM: http-ana: Properly detect client abort when forwarding response (v2) 2025-12-22Revert "BUG/MEDIUM: cli: State the cli have no more data to deliver if it yields" 2025-12-16BUG/MEDIUM: quic: Don't try to use hystart if not implemented 2025-12-16BUG/MEDIUM: quic: handle collision on CID generation 2025-12-16BUG/MINOR: cfgparse-listen: update err_code for fatal error on proxy directive 2025-12-15BUG/MINOR: quic: SSL counters not handled 2025-12-15BUG/MINOR: resolvers: ensure fair round robin iteration 2025-12-15BUG/MEDIUM: resolvers: break an infinite loop in resolv_get_ip_from_response() 2025-12-15BUG/MEDIUM: mux-h2: Reset MUX blocking flags when a send error is caught 2025-12-15BUG/MINOR: quic: do not set first the default QUIC curves 2025-12-12BUG/MEDIUM: http-ana: Don't close server connection on read0 in TUNNEL mode 2025-12-12BUG/MINOR: ssl: Don't allow to set NULL sni 2025-12-12BUG/MEDIUM: connection: fix "bc_settings_streams_limit" typo 2025-12-12BUG/MINOR: jwt: Missing "case" in switch statement 2025-12-12BUG/MEDIUM: cli: State the cli have no more data to deliver if it yields 2025-12-12BUG/MEDIUM: applet: Fix conditions to detect spinning loop with the new API 2025-12-12BUG/MINOR: http-ana: Reset analyse_exp date after 'wait-for-body' action 2025-12-12BUG/MEDIUM: h1-htx: Don't set HTX_FL_EOM flag on 1xx informational messages 2025-12-12BUG/MEDIUM: mux-quic: adjust wakeup behavior 2025-12-12BUG/MINOR: mux-quic: ensure close-spread-time is properly applied 2025-12-12BUG/MEDIUM: mux-quic: ensure Early-data header is set 2025-12-12BUG/MEDIUM: resolvers: Wake resolver task up whne unlinking a stream requester 2025-12-12BUG/MEDIUM: resolvers: Accept to create resolution without hostname 2025-12-12BUG/MEDIUM: resolvers: Make resolution owns its hostname_dn value 2025-12-12BUG/MEDIUM: resolvers: Test for empty tree when getting a record from DNS answer 2025-12-12BUG/MINOR: resolvers: Restore round-robin selection on records in DNS answers 2025-12-12BUG/MEDIUM: resolvers: Properly cache do-resolv resolution 2025-12-11BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards 2025-12-05BUG/MEDIUM: config: Use the mux protocol ALPN by default for listeners if forced 2025-12-05BUG/MINOR: ssl: remove dead code in ssl_sock_from_buf() 2025-12-05BUG/MINOR: mworker: wrong signals during startup 2025-12-05BUG/MEDIUM: mworker: signals inconsistencies during startup and reload 2025-12-05BUG/MEDIUM: h1: prevent a crash on HTTP/2 upgrade 2025-12-05BUG/MINOR: stick-tables: Fix return value for __stksess_kill() 2025-12-05BUG/MEDIUM: stick-tables: Always return the good stksess from stktable_set_entry 2025-12-05BUG/MINOR: quic: close connection on CID alloc failure 2025-12-05BUG/MINOR: config: Limit "tune.maxpollevents" parameter to 1000000 2025-12-05BUG/MEDIUM: connection/ssl: also fix the ssl_sock_io_cb() regarding idle list 2025-12-05BUG/MEDIUM: connection: do not reinsert a purgeable conn in idle list 2025-12-05Revert "BUG/MEDIUM: connections: permit to permanently remove an idle conn" 2025-11-05BUG/MEDIUM: connections: permit to permanently remove an idle conn 2025-11-05BUG/MEDIUM: mux-h2: make sure not to move a dead connection to idle 2025-11-05BUG/MEDIUM: mux-h1: fix 414 / 431 status code reporting 2025-11-05BUG/MINOR: ssl: returns when SSL_CTX_new failed during init 2025-11-05BUG/MINOR: init: Do not close previously created fd in stdio_quiet 2025-11-05BUG/MEDIUM: ssl: Crash because of dangling ckch_store reference in a ckch instance 2025-10-27BUG/MEDIUM: cli: do not return ACKs one char at a time 2025-10-27BUG/MEDIUM: mt_list: Use atomic operations to prevent compiler optims 2025-10-27BUG/MINOR: stick-tables: properly index string-type keys 2025-10-27BUG/MEDIUM: applet: Improve again spinning loops detection with the new API 2025-10-27BUG/MEDIUM: mt_lists: Avoid el->prev = el->next = el 2025-10-27BUG/MEDIUM: build: limit excessive and counter-productive gcc-15 vectorization 2025-10-27BUG/MAJOR: quic: use ncbmbuf for CRYPTO handling 2025-10-27BUG/MEDIUM: h3: properly encode response after interim one in same buf 2025-10-27BUG/MAJOR: quic: uninitialized quic_conn_closed struct members 2025-10-27BUG/MEDIUM: mt_list: Make sure not to unlock the element twice 2025-10-27BUG/MEDIUM: threads/config: drop absent threads from thread groups 2025-10-27BUG/MINOR: quic: check applet_putchk() for 'show quic' first line 2025-10-27BUG/MEDIUM: stick-tables: Don't forget to dec count on failure. 2025-10-17BUG/MINOR: quic: too short PADDING frame for too short packets 2025-10-16BUG/MAJOR: lb-chash: fix key calculation when using default hash-key id 2025-10-16BUG/MINOR: ssl: Free key_base from global_ssl structure during deinit 2025-10-16BUG/MINOR: ssl: Free global_ssl structure contents during deinit 2025-10-14BUG/MINOR: sink: retry attempt for sft server may never occur 2025-10-10BUG/MEDIUM: apppet: Improve spinning loop detection with the new API 2025-10-10BUG/MINOR: ssl: always clear the remains of the first hello for the second one 2025-10-10BUG/MEDIUM: ssl: take care of second client hello 2025-10-10BUG/MINOr: hlua: Fix receive from HTTP applet by properly accounting data 2025-10-02BUG/MINOR: h3: forbid 'Z' as well in header field names checks 2025-10-02BUG/MINOR: h2: forbid 'Z' as well in header field names checks 2025-10-02BUG/CRITICAL: mjson: fix possible DoS when parsing numbers 2025-10-01BUG/MEDIUM: ssl: ca-file directory mode must read every certificates of a file 2025-10-01BUG/MINOR: pattern: Fix pattern lookup for map with opt@ prefix 2025-10-01BUG/MINOR: pattern: Properly flag virtual maps as using samples 2025-10-01BUG/MEDIUM: stick-tables: Don't let table_process_entry() handle refcnt 2025-10-01BUG/MINOR: server: Update healthcheck when server settings are changed via CLI 2025-10-01BUG/MEDIUM: server: Use sni as pool connection name for SSL server only 2025-10-01BUG/MEDIUM: ring: invert the length check to avoid an int overflow 2025-10-01BUG/MINOR: resolvers: always normalize FQDN from response 2025-10-01BUG/MINOR: ocsp: Crash when updating CA during ocsp updates 2025-10-01BUG/MAJOR: stream: Force channel analysis on successful synchronous send 2025-10-01BUG/MAJOR: stream: Remove READ/WRITE events on channels after analysers eval 2025-10-01BUG/MINOR: activity: fix reporting of task latency 2025-10-01BUG/MEDIUM: ssl: create the mux immediately on early data 2025-10-01BUG/MEDIUM: h1: Allow reception if we have early data 2025-10-01BUG/MEDIUM: checks: fix ALPN inheritance from server 2025-10-01BUG/MINOR: cpu_topo: work around a small bug in musl's CPU_ISSET() 2025-10-01BUG/MINOR: log: fix potential memory leak upon error in add_to_logformat_list() 2025-10-01BUG/MINOR: connection: streamline conn detach from lists 2025-10-01BUG/MEDIUM: conn: fix UAF on connection after reversal on edge 2025-10-01BUG/MINOR: haproxy: be sure not to quit too early on soft stop 2025-10-01BUG/MINOR: quic: fix padding issue on INITIAL retransmit 2025-10-01BUG/MINOR: quic: fix room check if padding requested 2025-10-01BUG/MINOR: quic: ignore AGAIN ncbuf err when parsing CRYPTO frames 2025-10-01BUG/MINOR: tools: Add OOM check for malloc() in indent_msg() 2025-10-01BUG/MINOR: compression: Add OOM check for calloc() in parse_compression_options() 2025-10-01BUG/MINOR: cfgparse: Add OOM check for calloc() in cfg_parse_listen() 2025-10-01BUG/MINOR: acl: Add OOM check for calloc() in smp_fetch_acl_parse() 2025-10-01BUG/MINOR: log: Add OOM checks for calloc() and malloc() in logformat parser and dup_logger() 2025-10-01BUG/MINOR: halog: Add OOM checks for calloc() in filter_count_srv_status() and filter_count_url() 2025-10-01BUG/MEDIUM: server: Duplicate healthcheck's alpn inherited from default server 2025-10-01BUG/MAJOR: mux-quic: fix crash on reload during emission 2025-10-01BUG/MEDIUM: quic: CRYPTO frame freeing without eb_delete() 2025-10-01BUG/MINOR: server: decrement session idle_conns on del server 2025-10-01BUG/MINOR: connection: remove extra session_unown_conn() on reverse 2025-10-01BUG/MINOR: connection: rearrange union list members 2025-10-01BUG/MEDIUM: mworker: fix startup and reload on macOS 2025-10-01BUG/MINOR: acl: set arg_list->kw to aclkw->kw string literal if aclkw is found 2025-10-01BUG/MINOR: mux-quic: trace with non initialized qcc 2025-10-01BUG/MINOR: quic: reorder fragmented RX CRYPTO frames by their offsets 2025-10-01BUG/MEDIUM: Remove sync sends from streams to applets 2025-10-01BUG/MEDIUM: stconn: Fix conditions to know an applet can get data from stream 2025-08-26BUG/MEDIUM: spoe: Improve error detection in SPOE applet on client abort 2025-08-26BUG/MEDIUM: mux-spop: Reject connection attempts from a non-spop frontend 2025-08-26BUG/MINOR: quic: don't coalesce probing and ACK packet of same type 2025-08-26BUG/MAJOR: quic: fix INITIAL padding with probing packet only 2025-08-26BUG/MINOR: quic: do not emit probe data if CONNECTION_CLOSE requested 2025-08-26BUG/MEDIUM: quic: reset padding when building GSO datagrams 2025-08-26BUG/MEDIUM: mworker: more verbose error upon loading failure 2025-08-26BUG/MINOR: spoe: Properly detect and skip empty NOTIFY frames 2025-08-26BUG/MINOR: mux-h1: fix wrong lock label 2025-08-26BUG/MEDIUM: http-client: Test HTX_FL_EOM flag before commiting the HTX buffer 2025-08-26BUG/MINOR: init: Initialize random seed earlier in the init process 2025-08-26BUG/MEDIUM: ssl: fix build with AWS-LC 2025-08-26BUG/MEDIUM: ssl: Fix 0rtt to the server 2025-08-26BUG/MINOR: stick-table: cap sticky counter idx with tune.nb_stk_ctr instead of MAX_SESS_STKCTR 2025-08-26BUG/MINOR mux-quic: apply correctly timeout on output pending data 2025-08-26BUG/MINOR: hq-interop: fix FIN transmission 2025-08-26BUG/MINOR: logs: fix log-steps extra log origins selection 2025-08-26BUG/MEDIUM: threads: Disable the workaround to load libgcc_s on macOS 2025-08-26BUG/MINOR: halog: exit with error when some output filters are set simultaneosly 2025-08-26BUG/MINOR: applet: Don't trigger BUG_ON if the tid is not on appctx init 2025-08-26BUG/MINOR: quic: Wrong source address use on FreeBSD 2025-08-26BUG/MEDIUM: h3: handle interim response properly on FE side 2025-08-26BUG/MINOR: h3: ensure that invalid status code are not encoded (FE side) 2025-08-26BUG/MINOR: h3: properly realloc buffer after interim response encoding 2025-08-26BUG/MEDIUM: h3: do not overwrite interim with final response 2025-08-26BUG/MEDIUM: http-client: Notify applet has more data to deliver until the EOM 2025-08-26BUG/MEDIUM: http-client: Drain the request if an early response is received 2025-08-26BUG/MINOR: http-client: Reject any 101-switching-protocols response 2025-08-26BUG/MINOR: http-client: Ignore 1XX interim responses in non-HTX mode 2025-08-26BUG/MEDIUM: http-client: Ask for more room when request data cannot be xferred 2025-08-26BUG/MEDIUM: http-client: Properly inc input data when HTX blocks are xferred 2025-08-26BUG/MEDIUM: http-client: Don't wake http-client applet if nothing was xferred 2025-08-26BUG/MINOR: listener: really assign distinct IDs to shards 2025-08-26BUG/MINOR: hlua: take default-path into account with lua-load-per-thread 2025-08-26BUG/MEDIUM: logs: fix sess_build_logline_orig() recursion with options 2025-08-26BUG/MEDIUM: dns: Reset reconnect tempo when connection is finally established 2025-08-26BUG/MEDIUM: hlua: Report to SC when output data are blocked on a lua socket 2025-08-26BUG/MEDIUM: hlua: Report to SC when data were consumed on a lua socket 2025-08-26BUG/MINOR: hlua: Skip headers when a receive is performed on an HTTP applet 2025-08-26BUG/MINOR: httpclient: wrongly named httpproxy flag 2025-08-26BUG/MINOR: jwt: Copy input and parameters in dedicated buffers in jwt_verify converter 2025-08-26BUG/MEDIUM: mux-h2: Properly handle connection error during preface sending 2025-08-26BUG/MEDIUM: hlua: Forbid any L6/L7 sample fetche functions from lua services 2025-08-26BUG/MINOR: tools: use my_unsetenv instead of unsetenv 2025-08-26BUG/MINOR: quic: wrong QUIC_FT_CONNECTION_CLOSE(0x1c) frame encoding 2025-08-26BUG/MINOR: log: Be able to use %ID alias at anytime of the stream's evaluation 2025-08-26BUG/MINOR: stream: Avoid recursive evaluation for unique-id based on itself 2025-08-26BUG/MINOR: mux-quic/h3: properly handle too low peer fctl initial stream 2025-08-05BUG/MEDIUM: hlua_fcn: ensure systematic watcher cleanup for server list iterator 2025-07-22BUG/MEDIUM: ssl/clienthello: ECDSA with ssl-max-ver TLSv1.2 and no ECDSA ciphers 2025-06-17BUG/MEDIUM: check: Set SOCKERR by default when a connection error is reported 2025-06-17BUG/MEDIUM: cli: Don't consume data if outbuf is full or not available 2025-06-17BUG/MINOR: http-ana: Properly handle keep-query redirect option if no QS 2025-06-17BUG/MINOR: config/server: reject QUIC addresses 2025-06-17BUG/MINIR: h1: Fix doc of 'accept-unsafe-...-request' about URI parsing 2025-06-17BUG/MEDIUM: fd: Use the provided tgid in fd_insert() to get tgroup_info 2025-06-17BUG/MINOR: quic: Missing SSL session object freeing 2025-06-17BUG/MINOR: mux-spop: Fix null-pointer deref on SPOP stream allocation failure 2025-06-17BUG/MEDIUM: check: Requeue healthchecks on I/O events to handle check timeout 2025-06-02BUG/MEDIUM: h1/h2/h3: reject forbidden chars in the Host header field 2025-06-02BUG/MEDIUM: h2/h3: reject some forbidden chars in :authority before reassembly 2025-05-28BUG/MEDIUM: httpclient: Throw an error if an lua httpclient instance is reused 2025-05-27BUG/MEDIUM: hlua: Fix getline() for TCP applets to work with applet's buffers 2025-05-27BUG/MEDIUM: hlua: Properly detect shudowns for TCP applets based on the new API 2025-05-27BUG/MINOR: h3: Set HTX flags corresponding to the scheme found in the request 2025-05-27BUG/MAJOR: cache: Crash because of wrong cache entry deleted 2025-05-27BUG/MEDIUM: server: fix potential null-deref after previous fix 2025-05-27BUG/MEDIUM: server: fix crash after duplicate GUID insertion 2025-05-20BUG/MEDIUM: stconn: Disable 0-copy forwarding for filters altering the payload 2025-05-20BUG/MEDIUM: wdt: always ignore the first watchdog wakeup 2025-05-20BUG/MINOR: h3: don't insert more than one Host header 2025-05-20BUG/MEDIUM: mux-spop: Properly detect truncated frames on demux to report error 2025-05-20BUG/MINOR: quic: ensure cwnd limits are always enforced 2025-05-20BUG/MINOR: mux-quic: do not decode if conn in error 2025-05-15BUG/MEDIUM: peers: also limit the number of incoming updates 2025-05-15BUG/MINOR: sink: detect and warn when using "send-proxy" options with ring servers 2025-05-15DEBUG: mux-spop: Review some trace messages to adjust the message or the level 2025-05-15BUG/MEDIUM: mux-spop; Don't report a read error if there are pending data 2025-05-15BUG/MEDIUM: spop-conn: Report short read for partial frames payload 2025-05-15BUG/MEDIUM: mux-spop: Properly handle CLOSING state 2025-05-15BUG/MEDIUM: mux-spop: Remove frame parsing states from the SPOP connection state 2025-05-15BUG/MINOR: mux-spop: Don't open new streams for SPOP connection on error 2025-05-15BUG/MINOR: mux-spop: Make the demux stream ID a signed integer 2025-05-15BUG/MINOR: mux-spop: Don't report error for stream if ACK was already received 2025-05-15BUG/MINOR: mux-spop: Use the right bitwise operator in spop_ctl() 2025-05-15BUG/MEDIUM: mux-spop: Wait end of handshake to declare a spop connection ready 2025-05-15BUG/MEDIUM: mux-spop: Respect the negociated max-frame-size value to send frames 2025-05-15BUG/MINOR: spoe: Don't report error on applet release if filter is in DONE state 2025-05-15BUG/MINOR: hlua: Fix Channel:data() and Channel:line() to respect documentation 2025-05-15BUG/MINOR: threads: fix soft-stop without multithreading support 2025-05-15BUG/MINOR: ssl/ckch: always free() the previous entry during parsing 2025-05-15BUG/MEDIUM: quic: free stream_desc on all data acked 2025-05-15BUG/MINOR: cli: fix too many args detection for commands 2025-05-15BUG/MEDIUM: peers: hold the refcnt until updating ts->seen 2025-05-15BUG/MINOR: quic: reject invalid max_udp_payload size 2025-05-15BUG/MINOR: quic: fix TP reject on invalid max-ack-delay 2025-05-15BUG/MINOR: quic: use proper error code on invalid received TP value 2025-05-15BUG/MINOR: quic: reject retry_source_cid TP on server side 2025-05-15BUG/MINOR: quic: use proper error code on invalid server TP 2025-05-15BUG/MINOR: quic: use proper error code on missing CID in TPs 2025-05-15BUG/MINOR: proxy: only use proxy_inc_fe_cum_sess_ver_ctr() with frontends 2025-05-15BUG/MEDIUM: connections: Report connection closing in conn_create_mux() 2025-05-15BUG/MINOR: mux-h1: Fix trace message in h1_detroy() to not relay on connection 2025-05-15BUG/MINOR: mux-h1: Don't pretend connection was released for TCP>H1>H2 upgrade 2025-05-15BUG/MINOR: dns: prevent ds accumulation within dss 2025-05-15BUG/MINOR: dns: add tempo between 2 connection attempts for dns servers 2025-05-15BUG/MAJOR: listeners: transfer connection accounting when switching listeners 2025-05-15BUG/MINOR: cli: Issue an error when too many args are passed for a command 2025-04-22BUG/MINOR: quic: do not crash on CRYPTO ncbuf alloc failure 2025-04-17BUG/MINOR: rhttp: ensure GOAWAY can be emitted after reversal 2025-04-17BUG/MINOR: rhttp: fix reconnect if timeout connect unset 2025-04-17BUG/MINOR: mux-h2: prevent past scheduling with idle connections 2025-04-17BUG/MINOR: debug: detect and prevent re-entrance in ha_thread_dump_fill() 2025-04-17BUG/MINOR: wdt/debug: avoid signal re-entrance between debugger and watchdog 2025-04-17BUG/MINOR debug: fix !USE_THREAD_DUMP in ha_thread_dump_fill() 2025-04-17BUG/MINOR: threads: set threads_idle and threads_harmless even with no threads 2025-04-17BUG/MEDIUM: hlua: fix hlua_applet_{http,tcp}_fct() yield regression (lost data) 2025-04-17BUG/MINOR: h3: reject request URI with invalid characters 2025-04-17BUG/MINOR: h3: reject invalid :path in request 2025-04-17BUG/MINOR: h3: filter upgrade connection header 2025-04-17BUG/MEDIUM: h3: trim whitespaces in header value prior to QPACK encoding 2025-04-17BUG/MEDIUM: h3: trim whitespaces when parsing headers value 2025-04-15BUG/MEDIUM: http-ana: Report 502 from req analyzer only during rsp forwarding 2025-04-15BUG/MINOR: http-ana: Properly detect client abort when forwarding the response 2025-04-15BUG/MINOR: debug: remove the trailing \n from BUG_ON() statements 2025-04-15BUG/MINOR: hlua: fix invalid errmsg use in hlua_init() 2025-04-15BUG/MINOR: backend: do not use the source port when hashing clientip 2025-04-15BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refs 2025-04-15BUG/MINOR: log: fix CBOR encoding with LOG_VARTEXT_START() + lf_encode_chunk() 2025-04-15BUG/MINOR: hlua_fcn: fix potential UAF with Queue:pop_wait() 2025-04-15BUG/MEDIUM: stream: Fix a possible freeze during a forced shut on a stream 2025-04-15BUG/MEDIUM: backend: fix reuse with set-dst/set-dst-port 2025-04-15BUG/MINOR: backend: do not overwrite srv dst address on reuse 2025-04-15BUG/MINOR: rhttp: fix incorrect dst/dst_port values 2025-04-15BUG/MINOR: config: silence .notice/.warning/.alert in discovery mode 2025-04-15BUG/MINOR: log: fix gcc warn about truncating NUL terminator while init char arrays 2025-04-15BUG/MINOR: mux-quic: remove extra BUG_ON() in _qcc_send_stream() 2025-04-15BUG/MEDIUM: mux-quic: fix crash on RS/SS emission if already close local 2025-04-03BUG/MEDIUM: peers: prevent learning expiration too far in futur from unsync node 2025-04-03BUG/MINOR: peers: fix expire learned from a peer not converted from ms to ticks 2025-03-20BUG/MEDIUM: stream: don't use localtime in dumps from a signal handler 2025-03-20BUG/MINOR: mux-h2: Reset streams with NO_ERROR code if full response was already sent 2025-03-20BUG/MEDIUM: hlua/cli: fix cli applet UAF in hlua_applet_wakeup() 2025-03-20BUG/MINOR: limits: compute_ideal_maxconn: don't cap remain if fd_hard_limit=0 2025-03-13BUG/MINOR: stats: fix capabilities and hide settings for some generic metrics 2025-03-13BUG/MEDIUM: thread: use pthread_self() not ha_pthread[tid] in set_affinity 2025-03-13BUG/MINOR: cfgparse-tcp: relax namespace bind check 2025-03-13BUG/MINOR: stream: fix age calculation in "show sess" output 2025-03-13BUG/MINOR: server: dont return immediately from parse_server() when skipping checks 2025-03-13BUG/MINOR: cfgparse/peers: properly handle ignored local peer case 2025-03-13BUG/MINOR: cfgparse/peers: fix inconsistent check for missing peer server 2025-03-13BUG/MEIDUM: startup: return to initial cwd only after check_config_validity() 2025-03-13BUG/MINOR: log: set proper smp size for balance log-hash 2025-03-13BUG/MINOR: server: check for either proxy-protocol v1 or v2 to send hedaer 2025-02-28BUG/MEDIUM: mux-fcgi: Try to fully fill demux buffer on receive if not empty 2025-02-28BUG/MINOR: h3: do not report transfer as aborted on preemptive response 2025-02-28BUG/MINOR: server: fix the "server-template" prefix memory leak 2025-02-28BUG/MEDIUM: server: properly initialize PROXY v2 TLVs 2025-02-28BUG/MINOR: h2: always trim leading and trailing LWS in header values 2025-02-28BUG/MEDIUM: stream: use non-blocking freq_ctr calls from the stream dumper 2025-02-28BUG/MEDIUM: stream: never allocate connection addresses from signal handler 2025-02-28BUG/MINOR: mux-h1: always make sure h1s->sd exists in h1_dump_h1s_info() 2025-02-28BUG/MINOR: stream: do not call co_data() from __strm_dump_to_buffer() 2025-02-28BUG/MINOR: sink: add tempo between 2 connection attempts for sft servers 2025-02-28BUG/MINOR: log: fix outgoing abns address family 2025-02-21BUG/MEDIUM: uxst: fix outgoing abns address family in connect() 2025-02-21BUG/MINOR: cfgparse: fix NULL ptr dereference in cfg_parse_peers 2025-02-20BUG/MEDIUM: spoe/mux-spop: Introduce an NOOP action to deal with empty ACK 2025-02-20BUG/MEDIUM: applet: Don't handle EOI/EOS/ERROR is applet is waiting for room 2025-02-19BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer 2025-02-19BUG/MINOR: flt-trace: Support only one name option 2025-02-19BUG/MINOR: auth: Fix a leak on error path when parsing user's groups 2025-02-19BUG/MINOR: config/userlist: Support one 'users' option for 'group' directive 2025-02-19BUG/MINOR: cli: Fix a possible infinite loop in _getsocks() 2025-02-19BUG/MINOR: cli: Fix memory leak on error for _getsocks command 2025-02-19BUG/MINOR: cli: Don't set SE flags from the cli applet 2025-02-19BUG/MEDIUM: flt-spoe: Properly handle end of stream from the SPOE applet 2025-02-19BUG/MEDIUM: applet: Don't pretend to have more data to handle EOI/EOS/ERROR 2025-02-19BUG/MEDIUM: flt-spoe: Set/test applet flags instead of SE flags from I/O handler 2025-02-19BUG/MINOR: http-check: Don't pretend a C-L heeader is set before adding it 2025-02-19BUG/MINOR: tcp-rules: Don't forward close during tcp-response content rules eval 2025-02-19BUG/MEDIUM: mux-fcgi: Properly handle read0 on partial records 2025-02-19BUG/MEDIUM: htx: wrong count computation in htx_xfer_blks() 2025-02-19DEBUG: epoll: store and compare the FD's generation count with reported event 2025-02-19DEBUG: fd: add a counter of takeovers of an FD since it was last opened 2025-02-19BUG/MEDIUM: chunk: make sure to flush the trash pool before resizing 2025-02-19BUG/MINOR: stktable: invalid use of stkctr_set_entry() with mixed table types 2025-02-19BUG/MINOR: mux-h2: Properly handle full or truncated HTX messages on shut 2025-02-19BUG/MINOR: mux-quic: prevent crash after MUX init failure 2025-02-19BUG/MINOR: quic: prevent crash on conn access after MUX init failure 2025-02-19BUG/MINOR: fcgi: Don't set the status to 302 if it is already set 2025-02-19BUG/MEDIUM: filters: Handle filters registered on data with no payload callback 2025-02-19BUG/MINOR: cli: Wait for the last ACK when FDs are xferred from the old worker 2025-02-19BUG/MEDIUM: cli: Be sure to drop all input data in END state 2025-02-19BUG/MINOR: ssl/cli: "show ssl crt-list" lacks sigals 2025-02-19BUG/MINOR: ssl/cli: "show ssl crt-list" lacks client-sigals 2025-02-19BUG/MEDIUM: fd: mark FD transferred to another process as FD_CLONED 2025-02-19BUG/MINOR: mworker: post_section_parser for the last section in discovery 2025-02-19BUG/MINOR: mworker: section ignored in discovery after a post_section_parser 2025-02-19BUG/MINOR: quic: fix CRYPTO payload size calcul for encoding 2025-02-19BUG/MINOR: quic: reserve length field for long header encoding 2025-02-19BUG/MEDIUM: debug: close a possible race between thread dump and panic() 2025-02-11BUG/MEDIUM: ssl: chosing correct certificate using RSA-PSS with TLSv1.3 2025-01-28BUG/MINOR: stream: Properly handle "on-marked-up shutdown-backup-sessions" 2025-01-28BUG/MINOR: ssl: put ssl_sock_load_ca under SSL_NO_GENERATE_CERTIFICATES 2025-01-28BUG/MINOR: quic: do not increase congestion window if app limited 2025-01-23BUG/MEDIUM: mux-h1: Properly close H1C if an error is reported before sending data 2025-01-23MINOR: quic: Add a BUG_ON() on quic_tx_packet refcount 2025-01-23BUG/MINOR: quic: ensure a detached coalesced packet can't access its neighbours 2025-01-23BUG/MINOR: init: set HAPROXY_STARTUP_VERSION from the variable, not the macro 2025-01-23BUG/MAJOR: log/sink: possible sink collision in sink_new_from_srv() 2025-01-23BUG/MAJOR: quic: reject too large CRYPTO frames 2025-01-23BUG/MEDIUM: promex: Use right context pointers to dump backends extra-counters 2025-01-23BUG/MEDIUM: stktable: fix missing lock on some table converters 2025-01-23BUG/MINOR: quic: reject NEW_TOKEN frames from clients 2025-01-23BUG/MINOR: stktable: fix big-endian compatiblity in smp_to_stkey() 2025-01-08BUG/MEDIUM: h1-htx: Properly handle bodyless messages 2025-01-06BUG/MEDIUM: promex/resolvers: Don't dump metrics if no nameserver is defined 2025-01-06BUG/MINOR: mux-quic: handle closure of uni-stream 2025-01-06BUG/MINOR: mux-quic: fix wakeup on qcc_set_error() 2025-01-06BUG/MINOR: log: Allow to use if/unless conditionnals for do-log action 2025-01-06BUG/MEDIUM: mux-quic: do not attach on already closed stream 2025-01-06BUG/MAJOR: mux-quic: properly fix BUG_ON on empty STREAM emission 2025-01-06Revert "BUG/MAJOR: mux-quic: fix BUG_ON on empty STREAM emission" 2025-01-06BUG/MEDIUM: mux-h2: Count copied data when looping on RX bufs in h2_rcv_buf() 2025-01-06BUG/MAJOR: mux-quic: fix BUG_ON on empty STREAM emission 2025-01-06BUG/MINOR: stats: fix segfault caused by uninitialized value in "show schema json" 2025-01-06BUG/MEDIUM: queue: Make process_srv_queue return the number of streams 2025-01-06BUG/MINOR: h2/rhttp: fix HTTP2 conn counters on reverse 2025-01-06BUG/MEDIUM: mux-quic: prevent BUG_ON() by refreshing frms on MAX_DATA 2025-01-06BUG/MEDIUM: mux-quic: do not mix qcc_io_send() return codes with pacing 2025-01-06BUG/MEDIUM: queues: Do not use pendconn_grab_from_px(). 2025-01-06BUG/MEDIUM: queues: Make sure we call process_srv_queue() when leaving 2025-01-06BUG/MEDIUM: stconn: Only consider I/O timers to update stream's expiration date 2025-01-06BUG/MINOR: quic: missing Startup accelerating probing bw states 2025-01-06BUG/MINOR: cli: cli_snd_buf: preserve \r\n for payload lines 2025-01-06BUG/MINOR: quic: too permissive exit condition for high loss detection in Startup (BBR) 2025-01-06BUG/MINOR: quic: fix the wrong tracked recovery start time value 2025-01-06BUG/MINOR: quic: reduce packet losses at least during ProbeBW_CRUISE (BBR) 2025-01-06BUG/MINOR: quic: underflow issue for bbr_inflight_hi_from_lost_packet() 2025-01-06BUG/MINOR: quic: remove max_bw filter from delivery rate sampling 2025-01-06BUG/MINOR: quic: wrong bbr_target_inflight() implementation 2025-01-06BUG/MINOR: quic: fix BBB max bandwidth oscillation issue. 2025-01-06BUG/MINOR: quic: wrong logical statement in in_recovery_period() (BBR) 2024-12-11BUG/MINOR: hlua_fcn: restore server pairs iterator pointer consistency 2024-12-11BUG/MINOR: server-state: Fix expiration date of srvrq_check tasks 2024-12-11BUG/MINOR: http-fetch: Ignore empty argument string for query() 2024-12-11BUG/MEDIUM: stats/server: use watcher to track server during stats dump 2024-12-11BUG/MINOR: stats: decrement srv refcount on stats-file release 2024-12-10BUG/MINOR: resolvers: handle a possible strdup() failure 2024-12-10BUG/MINOR: ssl_crtlist: handle a possible strdup() failure 2024-12-10BUG/MINOR: namespace: handle a possible strdup() failure 2024-12-10BUG/MEDIUM: mworker: report status, if daemonized master fails 2024-12-10BUG/MEDIUM: startup: report status if daemonized process fails 2024-12-10BUG/MEDIUM: startup: don't daemonize if started with -c 2024-12-10BUG/MINOR: startup: fix error path for master, if can't open pidfile 2024-12-10BUG/MINOR: mworker: fix -D -W -sf/-st modes 2024-12-10BUG/MINOR: mworker: don't save program PIDs in oldpids 2024-12-10BUG/MINOR: mux-h2: fix expression when detecting excess of CONTINUATION frames 2024-12-10BUG/MINOR: debug: COUNT_IF() should return true/false 2024-12-10BUG/MINOR: config: Fix parsing of accept-invalid-http-{request,response} 2024-12-05BUG/MEDIUM: mux-h2: make sure not to touch dummy streams when sending WU 2024-12-05BUG/MINOR: quic: remove startup alert if GSO unsupported 2024-12-05BUG/MINOR: quic: remove startup alert if conn socket-owner unsupported 2024-12-05BUG/MEDIUM: mux-quic: remove pacing status when everything is sent 2024-12-05BUG/MINOR: init: do not call fork_poller() for non-forked processes 2024-12-05BUG/MEDIUM: init: make sure only daemonized processes change their session 2024-12-05BUG/MINOR: quic: fix bbr_inflight() calls with wrong gain value 2024-12-05BUG/MINOR: startup: fix pidfile creation 2024-12-05BUG/MINOR: startup: close pidfd and free global.pidfile in handle_pidfile() 2024-12-05BUG/MINOR: signal: register default handler for SIGINT in signal_init() 2024-12-05BUG/MINOR: h1-htx: Use default reason if not set when formatting the response 2024-12-05BUG/MEDIUM: http-ana: Reset request flag about data sent to perform a L7 retry 2024-12-05BUG/MEDIUM: quic: prevent stream freeze on pacing 2024-12-05BUG/MEDIUM: event_hdl: fix uninitialized value in async mode when no data is provided 2024-12-05BUG/MINOR: improve BBR throughput on very fast links 2024-12-05BUG/MINOR: log: fix lf_text() behavior with empty string 2024-11-27BUG/MEDIUM: sock: Remove FD_POLL_HUP during connect() if FD_POLL_ERR is not set