| Date | Subject |
|---|
| 2026-10-23 | BUG/MEDIUM: filters: Don't propagate a close while a filter waits on a channel |
| 2026-10-23 | BUG/MEDIUM: hlua/filters: Never arm the analysis timer for the lua wake-ups |
| 2026-10-23 | BUG/MEDIUM: hlua/filters: Make Channel.may_recv relative to the filter's data |
| 2026-10-23 | BUG/MINOR: hlua/filters: Restrict HTTPMessage.set_eom/unset_eom to visible data |
| 2026-10-23 | BUG/MEDIUM: hlua/filters: make HTTPMessage.eom/may_recv relative to the filter's data |
| 2026-10-23 | BUG/MINOR: hlua/filters: Track the payload phase per channel |
| 2026-10-23 | BUG/MEDIUM: connection: don't leak the fd of an accepted connection |
| 2026-10-23 | BUG/MINOR: h3: do not wait after Tx realloc failure |
| 2026-10-23 | BUG/MINOR: h3: do not retry on trailers too large |
| 2026-10-23 | BUG/MEDIUM: h3: prevent conn failure on trailers decoding without space |
| 2026-10-23 | BUG/MAJOR: h3: always check :path for all scheme values |
| 2026-10-22 | BUG/MEDIUM: server: Don't use the cached ALPN for websocket |
| 2026-10-22 | BUG/MINOR: http-ana: call the http_reset filter callback on L7 retries |
| 2026-10-22 | BUG/MINOR: promex: don't loop forever when a module skips a time series |
| 2026-10-22 | BUG/MINOR: mux_quic: fix overflow on avail_streams |
| 2026-10-22 | BUG/MINOR: mux_quic: fix MAX_STREAMS limit |
| 2026-10-22 | BUG/MINOR: quic: fix "show quic" filtered connection |
| 2026-10-22 | BUG/MEDIUM: mux_quic: fix FIN received with an already known offset |
| 2026-10-21 | BUG/MINOR: mux-quic: prevent send corruption on buf realign |
| 2026-10-21 | BUG/MINOR: jwt: enforce the ECDSA signature length in jwt_verify |
| 2026-10-21 | BUG/MINOR: jwe: only match the exact "ALL" word in jwt.decrypt_{alg,enc}_list |
| 2026-10-21 | BUG/MINOR: jwe: reject non-empty encrypted keys with "dir" and "ECDH-ES" |
| 2026-10-21 | BUG/MINOR: jwe: only accept exact "alg" and "enc" names in JWE tokens |
| 2026-10-21 | BUG/MINOR: jws: fix ECDSA_SIG leak in jws_b64_signature() |
| 2026-10-21 | BUG/MINOR: jwt: don't truncate binary HMAC secrets at the first NULL byte |
| 2026-10-21 | BUG/MEDIUM: mux_quic: ensure FIN is reported after Rx data transfer |
| 2026-10-21 | BUG/MEDIUM: mux_quic: fix crash on QCS double remote close |
| 2026-10-21 | BUG/MEDIUM: task: do not destroy twice the tasks already killed in mworker_cleantasks() |
| 2026-10-20 | BUG/MINOR: cfgparse/peers: warn and prevent undefined behavior when peers is missing bind info |
| 2026-10-20 | BUG/MINOR: h3: fix crash with maxrewrite on response headers |
| 2026-10-20 | BUG/MINOR: h3: enforce maxrewrite on request headers |
| 2026-10-20 | BUG/MINOR: mux_quic: wake streams on soft-stop using listener socket |
| 2026-10-20 | BUG/MEDIUM: h3: fix memory corruption on trailers parsing realign |
| 2026-10-20 | BUG/MINOR: flt-decomp: Report error about filter order in lagacy mode only |
| 2026-10-20 | Revert "BUG/MAJOR: mux-quic: do not crash on connection error after glitch threshold" |
| 2026-10-20 | BUG/MINOR: h3: fix BUG_ON() crash with glitch on htx_set_eom() failure |
| 2026-10-20 | BUG/MINOR: h3: fix risk of BUG_ON() crash with glitch on unknown frame |
| 2026-10-20 | BUG/MEDIUM: h3: fix BUG_ON() crash with glitch after QPACK dec err |
| 2026-10-20 | BUG/MEDIUM: h3: fix BUG_ON() crash with glitch on GOAWAY parsing |
| 2026-10-20 | BUG/MEDIUM: h3: fix BUG_ON() crash with glitch on SETTINGS parsing |
| 2026-10-20 | BUG/MINOR: sample: Fix wrong 'base64urldec' return value check in 'jwt_member_query' |
| 2026-10-19 | BUG/MEDIUM: bwlim: never burst more than the pending data in input |
| 2026-10-19 | BUG/MINOR: filters: free the error message of the filter-config parsers |
| 2026-10-19 | BUG/MEDIUM: h3: split absolute URIs like the HTTP analysers do on output |
| 2026-10-19 | BUG/MAJOR: mux-h2: split absolute URIs like the HTTP analysers do on output |
| 2026-10-19 | BUG/MAJOR: mux-quic: do not crash on connection error after glitch threshold |
| 2026-10-19 | BUG/MEDIUM: resolvers: reject too long labels when encoding a name |
| 2026-10-18 | BUG/MINOR: sym: don't crash on images linked at a fixed base |
| 2026-10-16 | BUG/MINOR: mux-h1: Don't subscribe for receives once read0 or error received |
| 2026-10-16 | BUG/MEDIUM: mux-h1: don't spread-close idle conns with idle-close-on-response |
| 2026-10-16 | BUG/MINOR: mux-h1: don't forward request trailers named like server name header |
| 2026-10-16 | BUG/MINOR: mux-h1: search the websocket key in the right message |
| 2026-10-16 | BUG/MINOR: mux-h1: only rely on the client's method for bodyless responses |
| 2026-10-16 | BUG/MEDIUM: h1: reject absolute http(s) URIs with an empty host |
| 2026-10-16 | BUG/MINOR: mux-h1: convert the argument of h1-case-adjust to lower case |
| 2026-10-16 | BUG/MEDIUM: mux-h1: don't send chunked responses to HTTP/1.0 clients |
| 2026-10-16 | BUG/MINOR: h1: forget a previous pass' results when parsing headers only |
| 2026-10-16 | BUG/MINOR: h1: reject CONNECT authorities with an empty host |
| 2026-10-16 | BUG/MEDIUM: h1: build a missing Host header from the authority of the URI |
| 2026-10-16 | BUG/MEDIUM: mux-h1: don't lose error responses once a content-length was parsed |
| 2026-10-16 | BUG/MINOR: mux-h1: report payload parsing glitches to the session |
| 2026-10-16 | BUG/MEDIUM: mux-h1: don't swap buffers when transferring data with a reserved offset |
| 2026-10-16 | BUG/MINOR: mux-h1: don't report a 408 error on timeout of a closed connection |
| 2026-10-16 | BUG/MINOR: mux-h1: don't keep fast-forwarding disabled for the next streams |
| 2026-10-16 | BUG/MINOR: mux-h1: reset the content-length/chunking state after a 1xx response |
| 2026-10-16 | BUG/MEDIUM: mux-h1: don't stall when draining more than a buffer of data |
| 2026-10-16 | BUG/MEDIUM: mux-h1: don't lose the end of the previous chunk in h1_make_chunk() |
| 2026-10-16 | BUG/MEDIUM: h1: reject CONNECT request targets other than "host:port" |
| 2026-10-16 | BUG/MINOR: mux-h1: don't dereference a NULL opposite sedesc in h1_fastfwd() |
| 2026-10-16 | BUG/MINOR: mux-h1: wake the connection up when a pending error can be sent |
| 2026-10-16 | BUG/MINOR: mux-h1: fix the open streams counter on stream creation failure |
| 2026-10-16 | BUG/MINOR: mux-h1: only reset the session's timing info on the frontend side |
| 2026-10-16 | BUG/MINOR: h1: don't use uninitialized start line pointers when restarting |
| 2026-10-16 | BUG/MEDIUM: mux-h1: don't truncate responses on soft-stop |
| 2026-10-16 | BUG/MEDIUM: mux-h1: don't truncate the response when closing after draining |
| 2026-10-16 | BUG/MEDIUM: h1-htx: don't stall on messages ending exactly at the buffer's end |
| 2026-10-16 | BUG/MEDIUM: h1: don't rewrite the Upgrade header when not cleaning headers |
| 2026-10-16 | BUG/MINOR: h1: keep accepting unsafe violations after a parser reset |
| 2026-10-16 | BUG/MEDIUM: h1: make the Connection/Upgrade headers cleanup idempotent |
| 2026-10-16 | BUG/MEDIUM: mux-h1: Don't close the connection on a payload parsing error |
| 2026-10-16 | BUG/MINOR: filters: fix silent compression disable with legacy "filter compression" first |
| 2026-10-16 | BUG/MEDIUM: cli: Fix parsing of big payloads with dynamically allocated buffer |
| 2026-10-16 | BUG/MINOR: quic: valid NEW_TOKEN connections are counted as half-open |
| 2026-10-16 | BUG/MEDIUM: peers: keep the earliest sync task deadline |
| 2026-10-16 | BUG/MINOR: mux_quic: do not crash on SE_SHR_DRAIN shut |
| 2026-10-16 | BUG/MINOR: check: do not inspect errno if conn FDLESS |
| 2026-10-16 | BUG/MINOR: mux_quic: prevent RS/SS on unistream with hq-interop |
| 2026-10-16 | BUG/MEDIUM: mux_quic: prevent uaf on fctl frame after send error |
| 2026-10-16 | BUG/MINOR: quic: handle EINTR on emission of packets without connection |
| 2026-10-16 | BUG/MINOR: quic: use datagram destination as source for version negotiation |
| 2026-10-16 | BUG/MINOR: quic: use datagram destination as source for stateless reset |
| 2026-10-16 | BUG/MEDIUM: quic: use datagram destination as source for Retry |
| 2026-10-15 | BUG/MINOR: quic: rearm packet on packet received even non ack-eliciting |
| 2026-10-15 | BUG/MEDIUM: stats-file: shm-stats-file be counters not working anymore |
| 2026-10-14 | BUG/MAJOR: h1-htx: report an error on a too long chunk-size line |
| 2026-10-14 | BUG/MAJOR: mux-h2: properly handle short reads on PING frames |
| 2026-10-13 | BUG/MINOR: cfgparse-global: only warn when "localpeer" is set together with -L |
| 2026-10-12 | BUG/MEDIUM: mux-h1: only accept the H2 preface on the first request |
| 2026-10-12 | BUG/MINOR: http-fetch: don't report pseudo-headers in TCP mode |
| 2026-10-12 | BUG/MEDIUM: mux-h1: also release the embryonic stream when the error is empty |
| 2026-10-12 | BUG/MEDIUM: mux-h2: fix a possible crash on rxbuf allocation failure |
| 2026-10-12 | BUG/MEDIUM: mux-h2: report a dead rhttp connection in h2_wake() |
| 2026-10-12 | BUG/MEDIUM: mux-h1: don't pass an upgraded connection to traces in h1s_destroy() |
| 2026-10-12 | BUG/MEDIUM: mux-fcgi: don't return a freed tasklet from fcgi_deferred_shut() |
| 2026-10-12 | BUG/MEDIUM: mux-h2: don't return a freed tasklet from h2_deferred_shut() |
| 2026-10-12 | BUG/MINOR: hlua: assume proxy_find_by_id() may return NULL on previously existing server |
| 2026-10-09 | BUG/MEDIUM: spoe: Let an agent outlive its applets during a backend deletion |
| 2026-10-09 | BUG/MINOR: flt-http-comp: Enable implicit filters independently per direction |
| 2026-10-09 | BUG/MINOR: flt-decomp: Fix the decompression filter keyword list name |
| 2026-10-09 | BUG/MINOR: spoe: Fix the message list splice with an empty list |
| 2026-10-09 | BUG/MEDIUM: log: do not ignore the peer's shutdown in the syslog applet |
| 2026-10-09 | BUG/MEDIUM: cli: fix the last command detection on a full command line |
| 2026-10-09 | BUG/MINOR: cfgparse-listen: complete the list of options for the suggestions |
| 2026-10-09 | BUG/MINOR: proxy: also look for the closest option among cfg_opts3 |
| 2026-10-09 | BUG/MINOR: cfgparse-listen: properly reject extra args in a backend section |
| 2026-10-09 | BUG/MINOR: cfgparse-listen: don't lose the errors reported while creating a proxy |
| 2026-10-09 | BUG/MINOR: cfgparse-listen: always reject extra arguments to "persist" |
| 2026-10-09 | BUG/MINOR: cfgparse-global: reject extra arguments to numa-cpu-mapping and anonkey |
| 2026-10-09 | BUG/MINOR: cfgparse-listen: fix quoting of the condition conflict warning |
| 2026-10-09 | BUG/MINOR: cfgparse-listen: fix the argument checked by "email-alert" |
| 2026-10-09 | BUG/MINOR: cfgparse-listen: release the previous description of the proxy |
| 2026-10-09 | BUG/MINOR: cfgparse-global: add missing calloc() check for the global description |
| 2026-10-09 | BUG/MINOR: cfgparse-global: add missing gotos to error label in max-spread-checks |
| 2026-10-09 | BUG/MAJOR: cfgparse: properly check userlist section when scanning keywords |
| 2026-10-08 | BUG/MEDIUM: h3: fix incorrect DATA size block on DEM FULL |
| 2026-10-08 | BUG/MEDIUM: h3: fix end-of-input report on DATA wrapping |
| 2026-10-07 | BUG/MINOR: ssl: Fix potential NULL-deref in "dump ssl cert" with AWS-LC |
| 2026-10-07 | BUG/MEDIUM: mux_quic: notify stream on RESET_STREAM reception |
| 2026-10-07 | BUG/MINOR: h3: reject RS/SS for QPACK uni streams |
| 2026-10-07 | BUG/MINOR: h3: close connection on GOAWAY frame too long |
| 2026-10-07 | BUG/MINOR: h3: reject frames with truncated header |
| 2026-10-07 | BUG/MINOR: mux_quic: account data in conn fctl on early detach |
| 2026-10-07 | BUG/MEDIUM: mux_quic: account discarded data in connection flow control |
| 2026-10-07 | BUG/MINOR: mux_quic: report conn error on RESET_STREAM fctl violation |
| 2026-10-06 | BUG/MINOR: mux_quic: extend FINAL_SIZE_ERROR detection on stream |
| 2026-10-06 | BUG/MINOR: mux_quic: prevent purgeable QCS lingering |
| 2026-10-06 | BUG/MAJOR: mux-quic: prevent crash on QCS already set for purging |
| 2026-10-06 | BUG/MINOR: ssl: use standard names for X25519 and X448 groups |
| 2026-10-06 | BUG/MINOR: ssl: don't uppercase the native group name |
| 2026-10-06 | BUG/MEDIUM: listener: Consider maxconn before waking listeners |
| 2026-10-06 | BUG/MEDIUM: ssl: crt-list curves ignored with AWS-LC |
| 2026-10-06 | BUG/MEDIUM: ssl: crt-list ciphers ignored with AWS-LC |
| 2026-10-06 | BUG/MINOR: ssl: fix trace crash on BE conn release in io cb |
| 2026-10-06 | BUG/MINOR: ssl: fix trace crash on FE conn release in io cb |
| 2026-10-06 | BUG/MINOR: hq-interop: prevent double EOM on request with standalone FIN |
| 2026-10-06 | DEBUG: support reading set-dumpable from HAPROXY_FORCE_DUMPABLE |
| 2026-10-05 | BUG/MINOR: log: fix erroneous error message in log-steps parser |
| 2026-10-02 | BUG/MEDIUM: server: remove immediately from GUID tree on delete server |
| 2026-10-02 | BUG/MINOR: cli: update wait help usage |
| 2026-10-02 | BUG/MINOR: server: fix "del server" description |
| 2026-10-02 | BUG/MINOR: proxy: add PR_CAP_LB for dynamically added backend |
| 2026-09-30 | BUG/MINOR: sample: return the decoded JWT part when no path is given |
| 2026-09-30 | BUG/MEDIUM: tcpcheck: do not run a regex on an unallocated buffer |
| 2026-09-30 | BUG/MINOR: http-fetch: do not count Set-Cookie attributes as cookies |
| 2026-09-30 | BUG/MINOR: payload: always report a boolean from req.ssl_ec_ext |
| 2026-09-30 | BUG/MINOR: stick-table: do not count the lookup itself in table_trackers() |
| 2026-09-30 | BUG/MINOR: http-ana: return a 502 when checkcache blocks a response |
| 2026-09-30 | BUG/MINOR: sample: make quic_enabled() always succeed |
| 2026-09-30 | BUG/MINOR: sample: zero-pad the fractional part emitted by http_date() |
| 2026-09-30 | BUG/MINOR: sample: apply the ms_/us_ time offsets in the input unit |
| 2026-09-30 | BUG/MINOR: http: do not consume the delimiter of a truncated q-factor |
| 2026-09-30 | BUG/MINOR: startup: don't chroot by default when set-dumpable is set |
| 2026-09-30 | BUG/MINOR: jwe: Avoid buffer overflow in fake cek (RSA1.5) |
| 2026-09-30 | BUG/MINOR: jwe: Buffer overflow when filling fake cek in case of RSA1.5 |
| 2026-09-30 | BUG/MEDIUM: pattern: don't dereference static_pattern's data when not filling it |
| 2026-09-29 | BUG/MEDIUM: stick-table: restrict key sizes to what fits in a buffer |
| 2026-09-29 | BUG/MINOR: mux-h1: Discard pending raw data after a tunnel rejection |
| 2026-09-29 | BUG/MEDIUM: mux-h1: Don't subscribe for sends while output is blocked |
| 2026-09-29 | BUG/MAJOR: mux-h2: Preserve raw data on aborted frontend tunnels |
| 2026-09-29 | BUG/MINOR: chunk: Allow large chunks uses from large const buffers |
| 2026-09-28 | BUG/MEDIUM: server: skip log backend addr checks for internal proxies |
| 2026-09-28 | BUG/MEDIUM: sink: reconnect attempt not working after session lasted more than ~25 days |
| 2026-09-28 | BUG/MAJOR: mux_quic: fix potential crash on RESET_STREAM receive |
| 2026-09-27 | BUG/MINOR: ssl: free curves, sigalgs and client_sigalgs in srv_parse_*() |
| 2026-09-27 | BUG/MINOR: ssl: free curves, sigalgs and client_sigalgs in ssl_sock_free_srv_ctx() |
| 2026-09-27 | BUG/MINOR: ssl: copy curves, sigalgs and client_sigalgs in srv_ssl_settings_cpy() |
| 2026-09-27 | BUG/MINOR: acme: exact domain match in acme_challenge_ready() |
| 2026-09-24 | BUG/MINOR: h2: reject :protocol pseudo-header in H2 responses |
| 2026-09-24 | BUG/MEDIUM: mux_quic: activate timeout on FE init |
| 2026-09-24 | BUG/MAJOR: mux_quic: fix leak on RESET_STREAM reception |
| 2026-09-24 | BUG/MEDIUM: h3: Set FIN when last DATA block is sent via zero-copy |
| 2026-09-23 | BUG/MINOR: http-ana: restore the transaction status after early hints |
| 2026-09-23 | BUG/MINOR: tcpcheck: refresh the start-line after updating the authority |
| 2026-09-23 | BUG/MINOR: mux-h1: only mark C-L and T-E as sent once the header is emitted |
| 2026-09-23 | BUG/MINOR: http-fetch: fix the space check of http_auth_bearer() |
| 2026-09-23 | BUG/MINOR: http-fetch: http_auth_bearer() must not match a missing header |
| 2026-09-23 | BUG/MINOR: http-ana: count response body failures only once in http_fail_cnt |
| 2026-09-23 | BUG/MEDIUM: tcp-rules: ignore "capture len" rules evaluated from a backend |
| 2026-09-23 | BUG/MEDIUM: http-act: ignore "capture len" rules evaluated from a backend |
| 2026-09-23 | BUG/MEDIUM: http-htx: don't build the new authority in a rotating trash chunk |
| 2026-09-23 | BUG/MEDIUM: log: reserve the trailing 0 in CBOR int and bool encoders |
| 2026-09-23 | BUG/MINOR: mux-h2: Don't expect more HTX data on 1xx interim responses |
| 2026-09-23 | BUG/MEDIUM: h1-htx: Don't report EOM for H1 interim responses during parsing |
| 2026-09-21 | BUG/MINOR: http-client: Convert server timeout ticks when setting it |
| 2026-09-21 | BUG/MINOR: ssl: Fix possible null deref on the SSL context in ssl_sock_to_buf() |
| 2026-09-21 | BUG/MINOR: hlua: release private Lua rule data on teardown |
| 2026-09-18 | BUG/MINOR: mux-h2: Reject trailers received on a tunneled stream |
| 2026-09-18 | BUG/MAJOR: htx: Check the header/trailer length limits when one is updated |
| 2026-09-18 | BUG/MINOR: tools: Don't try to anonymize a NULL string |
| 2026-09-18 | BUG/MEDIUM: htx: Fix the position returned by htx_defrag() |
| 2026-09-18 | BUG/MINOR: ssl/ocsp: Report an error when an empty OCSP response is received |
| 2026-09-18 | BUG/MEDIUM: http-client/cli: Notify the http-client when the response is consumed |
| 2026-09-18 | BUG/MEDIUM: acme: Set HTTPCLIENT_O_RES_ACCUM option on the http-client |
| 2026-09-18 | BUG/MEDIUM: ssl/ocsp: Set HTTPCLIENT_O_RES_ACCUM option on the http-client |
| 2026-09-18 | BUG/MEDIUM: http-client: Don't use the httpclient context if it was released |
| 2026-09-18 | BUG/MEDIUM: task: Do not destroy a task that is not ours in task_destroy |
| 2026-09-16 | BUG/MINOR: proxy: pass PR_FL_DEF_EXPLICIT_MODE through cascaded defaults |
| 2026-09-15 | BUG/MEDIUM: tcp-rules: Don't restart tcp-request content evaluation on yield |
| 2026-09-15 | BUG/MEDIUM: htx: Reserve a block descriptor for zero-sized blocks |
| 2026-09-14 | BUG/MEDIUM: ssl: don't set a 0 timeout on an expired TLS session |
| 2026-09-11 | BUG/MINOR: sample: reject a \0 byte in url_dec, json_query and jwt_*_query |
| 2026-09-11 | BUG/MINOR: ssl: Fix leak of ca_list in cafile_entry |
| 2026-09-11 | BUG/MINOR: pattern: do not match a string with an embedded \0 on its prefix |
| 2026-09-11 | BUG/MINOR: cli: Reject payload with no command |
| 2026-09-11 | BUG/MEDIUM: cli: Don't read a command or payload line into a full buffer |
| 2026-09-11 | BUG/MEDIUM: cli: Don't parse next command if input buffer is empty |
| 2026-09-11 | BUG/MEDIUM: http_act: fix normalize-uri normalizer selection with a condition |
| 2026-09-10 | BUG/MINOR: stream: resolve foreign groups' addresses for "show sess" |
| 2026-09-10 | BUG/MEDIUM cli: dump other thread groups' FDs from their own threads |
| 2026-09-10 | BUG/MEDIUM: listener: Don't drop suspend/resume deferred requests |
| 2026-09-10 | BUG/MINOR: cli: Make sure two instances of _getsocks don't run |
| 2026-09-10 | BUG/MEDIUM: map: do not overwrite the fetch context in pat_match_regm() |
| 2026-09-10 | BUG/MINOR: ssl: don't pass the address of a size_t as an int* to OpenSSL |
| 2026-09-08 | BUG/MEDIUM: http-ana: apply tunnel timeout with data filters |
| 2026-09-08 | BUG/MINOR: h3: only increment frame type counter on new header |
| 2026-09-08 | BUG/MINOR: h3: handle unknown frame type on request stream as specified |
| 2026-09-08 | BUG/MINOR: h3: handle empty HEADERS frame as specified |
| 2026-09-08 | BUG/MEDIUM: h3: do not block FIN on empty DATA frame |
| 2026-09-08 | BUG/MINOR: h3: reject truncated frames with mandatory payload |
| 2026-09-04 | BUG/MINOR: stream/debug: harden the stream dump function regarding signals |
| 2026-09-04 | BUG/MINOR: flt-http-comp: Rely on htx_set_eom() to restore EOM flag |
| 2026-09-04 | BUG/MEDIUM: htx: Don't reset flags when source must be preserved during transfer |
| 2026-09-04 | BUG/MINOR: hlua: Always return nil if there is no data to dup for HTTP messages |
| 2026-09-04 | BUG/MINOR: mux-h1: Return an error on trailers if last chunk is unfinished |
| 2026-09-04 | BUG/MEDIUM: hlua: Never release a cosocket applet from the GC |
| 2026-09-03 | BUG/MINOR: quic: leak of the NEW_TOKEN frame on token generation failure |
| 2026-09-03 | BUG/MAJOR: h3: reject H3 truncated frames |
| 2026-09-03 | BUG/MEDIUM: mux-h2: Make sure we remove H2_SF_NOTIFIED on subscribe |
| 2026-09-03 | BUG/MINOR: debug: restore complain tail jumps with clang |
| 2026-09-03 | BUG/MEDIUM: log: encode the whole non-printable range in the +json output |
| 2026-09-03 | BUG/MINOR: tools: support the documented NULL in cbor_encode_bytes_prefix_bin() |
| 2026-09-02 | BUG/MINOR: quic: delete the wrong CIDs when post-handshake frames fail |
| 2026-09-02 | BUG/MINOR: qpack: accept a Required Insert Count which cannot be reached |
| 2026-09-02 | BUG/MINOR: qpack: encoder and decoder stream data is never consumed |
| 2026-09-01 | BUG/MINOR: resolvers: classify empty truncated responses |
| 2026-09-01 | BUG/MEDIUM: resolvers: Use the right server to init DNS streams |
| 2026-09-01 | BUG/MEDIUM: filters: check the filter name before comparing it |
| 2026-08-31 | BUG/MINOR: quic: late packets of the first key phase are dropped |
| 2026-08-31 | BUG/MEDIUM: quic: crash on key update phase change after a failed one |
| 2026-08-29 | BUG/MINOR: payload: bound ClientHello extension lists by the extension length |
| 2026-08-29 | BUG/MINOR: payload: fix the cipher_len bound check in smp_client_hello_parse() |
| 2026-08-28 | BUG/MINOR: quic: fix zero value of tune.quic.sec.stateless-reset-rate |
| 2026-08-28 | BUG/MEDIUM: server: Fix server-template with default-server |
| 2026-08-28 | BUG/MEDIUM: mux-spop: Properly handle parsing of split HELLO/DISCONNECT frames |
| 2026-08-26 | BUG/MINOR: cache: Seed cache primary hash |
| 2026-08-26 | BUG/MINOR: cache: Manage collisions on primary key |
| 2026-08-26 | BUG/MINOR: haload: fix hld_new_usr()'s error path |
| 2026-08-26 | BUG/MEDIUM: sink: do not create one implicit ring per logger copy |
| 2026-08-26 | BUG/MEDIUM: sink: initialize the settings of the implicit log server |
| 2026-08-26 | BUG/MEDIUM: flt-http-comp: Block HTX_FL_EOM flag till the end of compression |
| 2026-08-26 | BUG/MINOR: flt-http-comp: Don't read next block to detect end of data |
| 2026-08-26 | BUG/MINOR: fcgi-app: allow explicit filter declaration with non-cache/non-compression filters |
| 2026-08-26 | BUG/MEDIUM: cache: ignore cache on redundant origin/referer |
| 2026-08-25 | BUG/MEDIUM: sink: do not hold the sft lock around ring_dispatch_messages() |
| 2026-08-25 | BUG/MEDIUM: connection: fix an infinite loop in the fc_pp_tlv() fetch |
| 2026-08-25 | BUG/MEDIUM: mux-h1: close the connection on a short content-length |
| 2026-08-24 | BUG/MINOR: haload: -ee could burst past its floor when many users fail at once |
| 2026-08-24 | BUG/MINOR: haload: split the rate exactly across threads |
| 2026-08-24 | BUG/MINOR: haload: make -e react to request timeouts too |
| 2026-08-24 | BUG/MINOR: haload: count timed-out requests as errors, not successes |
| 2026-08-19 | BUG/MEDIUM: sink: pre-initialize the implicit log forwarding server |
| 2026-08-19 | BUG/MINOR: dns: schedule idle task after setting its thread |
| 2026-08-19 | BUG/MINOR: resolvers: accept fields at the response boundary |
| 2026-08-18 | BUG/MINOR: ssl/cli: fix frontend-not-found detection in 'show ssl sni -f' |
| 2026-08-18 | BUG/MINOR: haproxy: fix out-of-scope tmpdir usage in do_chroot() |
| 2026-08-18 | BUG/MEDIUM: pollers: really create the poller pipes in builds without threads |
| 2026-08-18 | BUG/MEDIUM: tasks: don't type-pun state and tid in builds without threads |
| 2026-08-18 | BUG/MEDIUM: ssl: isolate TLS session resumption per authentication policy |
| 2026-08-18 | BUG/MINOR: ssl: isolate TLS session resumption per crt-list filter |
| 2026-08-18 | BUG/MEDIUM: ssl: isolate TLS session resumption per X509 server certificate |
| 2026-08-18 | BUG/MINOR: ssl: apply tune.ssl.lifetime to TLS1.3 sessions on BoringSSL/AWS-LC |
| 2026-08-18 | BUG/MEDIUM: ssl: enforce tune.ssl.lifetime across TLS1.3 session renewals |
| 2026-08-17 | BUG/MEDIUM: ssl: Fix unprotected 'ssl_sock_choose_sni_ctx' calls |
| 2026-08-17 | BUG/MINOR: ssl: release the previous client cert reference at depth > 0 |
| 2026-08-17 | BUG/MINOR: ssl: Fix leak of X509_NAME in traces |
| 2026-08-17 | BUG/MINOR: conn: Do not check 'sess_el' list on frontend connections in __trace_enabled |
| 2026-08-14 | BUG/MINOR: mux-h2: harden h2_dump_h2s_info() against potentially null h2s->sd |
| 2026-08-14 | BUG/MINOR: uri-auth: never risk to dereference a NULL on error path |
| 2026-08-14 | BUG/MINOR: log: fix double-free error when error in parse_loger occurs |
| 2026-08-14 | BUG/MEDIUM: tasks: don't type-pun state and tid in builds without threads |
| 2026-08-14 | BUG/MEDIUM: pollers: create the poller pipes in builds without threads |
| 2026-08-14 | BUG/MINOR: qpack: missing shift count check in qpack_get_varint() (UB) |
| 2026-08-14 | BUG/MINOR: spoe: check snprintf() return value in spoe_set_var/spoe_unset_var |
| 2026-08-13 | BUG/MINOR: payload: fix handshake length off-by-4 in ssl_hello_sni/alpn |
| 2026-08-13 | CLEANUP: debug: make __BUG_ON() use abort_with_line() |
| 2026-08-13 | MINOR: debug: rely on the __dbg_cnt_ counter for _BUG_ON_ONCE() |
| 2026-08-13 | MINOR: debug: make a pair of __BUG_ON() for modern and obsolete linkers |
| 2026-08-13 | CLEANUP: debug: remove the unneeded do { } while (0) on __BUG_ON() |
| 2026-08-13 | MINOR: debug: avoid the break in __BUG_ON() |
| 2026-08-13 | MINOR: debug: unify __BUG_ON() and __BUG_ON_ONCE() |
| 2026-08-13 | MINOR: debug: pass the type to the __BUG_ON*() macros |
| 2026-08-13 | DEBUG: deduplicate __ABORT_NOW() between DEBUG_USE_ABORT and ha_crash_now() |
| 2026-08-13 | DEBUG: cli: add a "debug dev abort" debugging command |
| 2026-08-13 | MINOR: debug: check the match count in __BUG_ON_ONCE() and not in complain() |
| 2026-08-13 | DEBUG: cli: unstatify cli_process_cmdline() |
| 2026-08-13 | BUG/MEDIUM: bwlim: fix a stick-table entry leak in shared mode |
| 2026-08-13 | BUG/MEDIUM: http: fix authority parsing for absolute-form URI with empty path |
| 2026-08-12 | BUG/MINOR: server: fix off-by-one error when parsing and copying source port range |
| 2026-08-12 | BUG/MINOR: hq_interop: fix potential NULL dereference in _hq_trace_http() |
| 2026-08-12 | BUG/MINOR: h3: fix potential NULL pointer dereference in _h3_trace_header() |
| 2026-08-12 | BUG/MINOR: server: fix memory leak on "default-server" parsing failures |
| 2026-08-12 | BUG/MINOR: quic: avoid a division by zero in the BBR pacing interval |
| 2026-08-12 | BUG/MINOR: ssl: reject an embedded NUL in the full-DN ssl_*_dn() fetches |
| 2026-08-12 | BUG/MINOR: ssl: reject an embedded NUL in the ssl_*_dn(entry) fetches |
| 2026-08-12 | BUG/MINOR: wurfl: fix memory leak of information list and patch strings at deinit |
| 2026-08-12 | BUG/MEDIUM: cache: do not release an entry under the cache read lock |
| 2026-08-12 | BUG/MINOR: cache: do not retain imcomplete or stripped secondary entry |
| 2026-08-12 | BUG/MEDIUM: cache: retain the primary or secondary entry only when detaching its row |
| 2026-08-10 | BUG/MEDIUM: hlua_fcn: ensure systematic bref cleanup for patref list iterator |
| 2026-08-10 | BUG/MEDIUM: lua: resume Channel:send() from the unsent part of the string |
| 2026-08-07 | BUG/MINOR: quic: drop multiple Retry on same connection |
| 2026-08-07 | BUG/MEDIUM: quic: prevent out-of-bound read on wrapping CRYPTO content |
| 2026-08-07 | BUG/MINOR: mux-h2: strip the userinfo when deriving :authority for a server |
| 2026-08-07 | BUG/MINOR: debug: only dump the trace once in __BUG_ON_ONCE() |
| 2026-08-07 | BUG/MINOR: lb-chash: bound the walk when the saved cursor changed tree |
| 2026-08-07 | BUG/MEDIUM: session: don't release a reversed connection twice on error |
| 2026-08-07 | BUG/MINOR: connection: reserve the whole CRC32C TLV before saving its pointer |
| 2026-08-07 | BUG/MEDIUM: fd: release the port range entry in host byte order |
| 2026-08-07 | BUG/MINOR: acme: restrict the permissions of the generated account key |
| 2026-08-07 | BUG/MINOR: ssl: reject server certificate names containing a NUL byte |
| 2026-08-07 | BUG/MEDIUM: acme: don't delete a NULL token from the map |
| 2026-08-07 | BUG/MEDIUM: ssl: require a full-length AEAD tag when decrypting with AES-GCM |
| 2026-08-07 | BUG/MINOR: jwt: don't take an extra reference on the certificate public key |
| 2026-08-07 | BUG/MEDIUM: jwe: validate the secret length against the algorithm of the token |
| 2026-08-07 | BUG/MEDIUM: log: always reserve room for trailing 0 when using CBOR encoding helpers |
| 2026-08-07 | BUG/MINOR: mux-fcgi: sanitize the STDERR records before logging them |
| 2026-08-07 | BUG/MEDIUM: http-ana: check the cookie rewrite result before moving the offsets |
| 2026-08-07 | BUG/MEDIUM: sock: bound the recvmsg() length when receiving old sockets |
| 2026-08-07 | BUG/MEDIUM: stick-tables: use the same bucket for string keys with a NUL |
| 2026-08-07 | BUG/MEDIUM: http-ana: don't crash on "keep-query" in a response redirect |
| 2026-08-07 | BUG/MINOR: mux-fcgi: don't call fcgi_strm_destroy() on a NULL stream |
| 2026-08-07 | BUG/MEDIUM: spoe: clear the applet pointer when the applet fails to start |
| 2026-08-07 | BUG/MEDIUM: mux-fcgi: check the room left before appending the index |
| 2026-08-06 | BUG/MINOR: hlua: use a local buffer to format the socket addresses |
| 2026-08-06 | BUG/MINOR: stats-file: reject tgid 0 when preloading shm objects |
| 2026-08-06 | BUG/MEDIUM: hpack: encode long methods and schemes using the long form |
| 2026-08-06 | BUG/MINOR: proxy: release watcher in "show default-server" on CLI abort |
| 2026-08-06 | BUG/MINOR: proxy: release watcher in various commands on CLI abort |
| 2026-08-05 | BUG/MINOR: proxy: fix "show backend" |
| 2026-08-03 | BUG/MINOR: proxy: fix default-server leak on post-parsing cleanup |
| 2026-08-03 | BUG/MINOR: ech: fix label at end of compound statement |
| 2026-08-03 | BUG/MINOR: server: check strdup return on server-template ID generation |
| 2026-08-03 | BUG/MINOR: server: check strdup return value on server ID |
| 2026-07-31 | BUG/MINOR: haload: fix stale global variables affecting URL allocations |
| 2026-07-30 | BUG/MEDIUM: filter: Disable auto-close on channel during TCP payload filtering |
| 2026-07-30 | BUG/MEDIUM: counters: preserve shared.tg pointer on 'clear counters all' |
| 2026-07-30 | BUG/MINOR: ech: reject an ECH store with no usable private key |
| 2026-07-30 | BUG/MINOR: ech: propagate error from load_echkeys() |
| 2026-07-30 | BUG/MINOR: haload: fix rate limit bypass during stream errors |
| 2026-07-29 | BUG/MINOR: cli: do not reject the "/" form of "show fd" |
| 2026-07-29 | BUG/MINOR: cli: use the current argument to parse the FD spec in "show fd" |
| 2026-07-29 | BUG/MINOR: server: fix check reuse-pool in srv_settings_cpy() |
| 2026-07-29 | BUG/MINOR: server: duplicate server alt_proto in srv_settings_cpy() |
| 2026-07-29 | BUG/MINOR: server: fix QUIC on server-template |
| 2026-07-28 | BUG/MAJOR: ssl/ocsp: lock the OCSP response around reads in the stapling callback |
| 2026-07-28 | BUG/MEDIUM: sample: reject the deprecated protobuf group wire types |
| 2026-07-28 | BUG/MEDIUM: peers: check the available room before encoding dict values |
| 2026-07-28 | BUG/MINOR: slz: avoid undefined shifts when building the word byte by byte |
| 2026-07-28 | BUG/MINOR: slz: fix the adler32 accumulators signedness on 32-bit |
| 2026-07-28 | BUG/MINOR: slz: do not append a block to an already finished stream |
| 2026-07-28 | BUG/MEDIUM: slz: bound the bits wasted by the 9-bit literals |
| 2026-07-28 | BUG/MINOR: slz: use the exact switch cost for the last literals of a block |
| 2026-07-28 | BUG/MINOR: slz: do not read past the end of the input around the match loop |
| 2026-07-28 | BUG/MINOR: http-rules: fix release of a failed "set-cookie-fmt" redirect rule |
| 2026-07-28 | BUG/MINOR: htx: Transfer HTX_FL_EOM flag on success in htx_append_msg() |
| 2026-07-28 | BUG/MINOR: htx: Perform raw copy for messages of same size in htx_copy_msg() |
| 2026-07-28 | BUG/MEDIUM: tools: make string encoding possible to fail instead of truncating |
| 2026-07-27 | BUG/MINOR: http-htx: check the strdup() of the "lf-string" http reply argument |
| 2026-07-27 | BUG/MINOR: http-act: reject a negative capture id in the capture actions |
| 2026-07-27 | BUG/MINOR: http-act: work on a copy of the sample in del-headers-bin |
| 2026-07-27 | BUG/MINOR: http-act: restore the response buffer state in the early-hint action |
| 2026-07-27 | BUG/MINOR: http-act: fix a double free of the map reference on a parsing error |
| 2026-07-27 | BUG/MINOR: http-act: fix a double free of the regex on a rule parsing error |
| 2026-07-27 | BUG/MINOR: http-ana: fix a one-byte over-read in the client-side cookie parser |
| 2026-07-27 | BUG/MINOR: h3: don't use a block pointer to roll back a partial HTX conversion |
| 2026-07-27 | BUG/MINOR: h2: don't use a block pointer to roll back a partial HTX conversion |
| 2026-07-27 | BUG/MINOR: h1: report the right error position on authority/host mismatch |
| 2026-07-27 | BUG/MINOR: http-htx: check the trash allocation in http_scheme_based_normalize() |
| 2026-07-27 | BUG/MINOR: http: fix an out-of-bounds read in http_get_host_port() on empty host |
| 2026-07-27 | BUG/MINOR: http-fetch: fix a NULL channel dereference in smp_fetch_body() |
| 2026-07-27 | BUG/MEDIUM: http-fetch: reject a negative capture id in capture.{req,res}.hdr |
| 2026-07-27 | BUG/MEDIUM: http-fetch: don't parse a non-HTTP check buffer as an HTX message |
| 2026-07-27 | BUG/MINOR: http-htx: fix the length moved when removing a header value |
| 2026-07-24 | BUG/MINOR: haload: fix CPU topology detection by omitting forced "nbthread" |
| 2026-07-24 | BUG/MEDIUM: mux-h1: Always adjust case for all outgoing headers as expected |
| 2026-07-24 | DEBUG: fd: catch access attempts to closed FDs |
| 2026-07-24 | BUG/MEDIUM: ssl: Put CO_ER_SSL_KEYUPDATE at the right place |
| 2026-07-24 | BUG/MEDIUM: ssl: Handle non-application data record while splicing |
| 2026-07-23 | BUG/MEDIUM: ssl: Spell HAVE_VANILLA_OPENSSL correctly |
| 2026-07-23 | BUG/MINOR: haload: fix display glitches by flushing stdout in summary |
| 2026-07-23 | BUG/MINOR: haload: set default thread count to 1 |
| 2026-07-23 | BUG/MINOR: haload: fix use-after-free upon updating task expiration |
| 2026-07-23 | BUG/MEDIUM: proxy: protect "show errors" against backend deletion |
| 2026-07-22 | BUG/MINOR: resolvers: do not index resolvers names in the proxies |
| 2026-07-22 | BUG/MEDIUM: server: Properly check for streams before deletion |
| 2026-07-21 | BUG/MEDIUM: proxy: protect show backend against be deletion |
| 2026-07-21 | BUG/MEDIUM: proxy: protect "show servers ..." against backend deletion |
| 2026-07-21 | BUG/MEDIUM: proxy: protect "show servers ..." against server deletion |
| 2026-07-21 | BUG/MINOR: sample: Fix bytes() when length it greater than remaining data |
| 2026-07-21 | BUG/MEDIUM: sample: Adjust sample size capacity after pointer shift for ltrim() |
| 2026-07-21 | BUG/MEDIUM: sample: Adjust sample size capacity after pointer shift for bytes() |
| 2026-07-21 | BUG/MEDIUM: net-helper: Adjust sample size capacity after pointer shift |
| 2026-07-21 | BUG/MINOR: mux-h1: Don't delay send if message with c-l was fully sent |
| 2026-07-16 | CLEANUP: event_hdl: Use BUG_ON_STATIC() |
| 2026-07-16 | DEBUG: add BUG_ON_STATIC(): a compile-time BUG_ON() |
| 2026-07-16 | BUG/MINOR: ssl: fix proxy lookup for show ssl sni |
| 2026-07-16 | BUG/MEDIUM: protobuf: fix nested path bypass in field lookup |
| 2026-07-16 | BUG/MEDIUM: protobuf: adjust sample size capacity after pointer shift |
| 2026-07-15 | BUG/MEDIUM: ssl-gencert: Don't forget to free memory when done |
| 2026-07-15 | BUG/MEDIUM: stats: Ensure that Origin is valid on POSTs |
| 2026-07-10 | BUG/MEDIUM: cache: reattach the row when a secondary entry is incomplete |
| 2026-07-10 | BUG/MINOR: shctx: fix shctx_row_data_get() when offset exceeds a block |
| 2026-07-10 | BUG/MEDIUM: stats: subject "stats admin" accesses to "stats scope" filtering |
| 2026-07-10 | BUG/MEDIUM: applet: Reenable reads in applet context if requesting a connection |
| 2026-07-10 | BUG/MINOR: hlua: Apply socket timeout on server side only |
| 2026-07-08 | BUG/MINOR: http-conv: Make url-dec failed if no space for trailing null byte |
| 2026-07-08 | BUG/MINOR: stream: Fix custom max-retries initialization when setting backend |
| 2026-07-08 | BUG/MINOR: stream: Fix custom timeouts initialization when setting backend |
| 2026-07-08 | BUG/MEDIUM: chunk: Review chunks usage to not retrieve a large buffer by error |
| 2026-07-08 | BUG/MINOR: sample: Fix a possible underflow on be2hex for large chunk size |
| 2026-07-08 | BUG/MEDIUM: tcpcheck: Add proxy used for healthcheck sections in proxies list |
| 2026-07-08 | BUG/MINOR: hbuf: treat unexpected escape sequences as literals |
| 2026-07-08 | BUG/MINOR: haload: fix spurious task wakeup in hld_strm_task() |
| 2026-07-06 | BUG/MEDIUM: fd: Fix a deadlock when closing other tgroups fds |
| 2026-07-06 | BUG/MINOR: quic: ignore STREAM after MUX closure on BE side |
| 2026-07-06 | BUG/MEDIUM: mux_quic: complete stream shutdown for read channel |
| 2026-07-06 | BUG/MEDIUM: mux_quic: do not free QCS if STOP_SENDING to sent |
| 2026-07-03 | BUG/MINOR: trace/quic_frame: use buf, not trace_buf in chunk_frm_appendf() |
| 2026-07-03 | BUG/MINOR: mux_quic: prevent multiple STOP_SENDING emission per stream |
| 2026-07-03 | BUG/MEDIUM: h3: fix parser desync on error with multiple frames |
| 2026-07-02 | BUG/MINOR: http-htx: Don't by-pass HTX API when merging cookie values |
| 2026-07-02 | BUG/MINOR: mux-quic: Fix handling EOM after in qcs_http_rcv_buf() |
| 2026-07-02 | BUG/MAJOR: htx: Don't swap buffers for empty HTX message with an error |
| 2026-07-02 | BUG/MINOR: tools: fix invalid character detection in strl2ic() |
| 2026-07-02 | BUG/MINOR: init: fix default global settings being overwritten by -G |
| 2026-07-01 | BUG/MEDIUM: servers: Use a refcount for port_range and free it properly |
| 2026-07-01 | BUG/MINOR: sample: set SMP_F_CONST on srv_name fetch |
| 2026-06-30 | BUG/MEDIUM: server: initialise agent.health in srv_settings_init() |
| 2026-06-29 | BUG/MINOR: h3: adjust HTTP headers traces |
| 2026-06-29 | BUG/MINOR: hq-interop: support transcoding of absolute URI |
| 2026-06-29 | BUG/MINOR: hq-interop: fix transcoding of wrapping response buffer |
| 2026-06-26 | BUG/MEDIUM: mux_quic: fix memory leak of rx app_buf on stream free |
| 2026-06-26 | BUG/MEDIUM: h3: fix trace crash on frontend response headers |
| 2026-06-24 | BUG/MEDIUM: mux-quic: Drain the given amount of data in qcs_http_reset_buf() |
| 2026-06-24 | BUG/MEDIUM: mux-spop: Truly drain outgoing data when the stream is closed |
| 2026-06-24 | BUG/MEDIUM: mux-h2: Truly drain outgoing HTX data when the stream is closed |
| 2026-06-24 | BUG/MEDIUM: mux-fcgi: Truly drain outgoing HTX data when the stream is closed |
| 2026-06-24 | BUG/MINOR: poller: fix wait time calculation that is always 1 extra ms |
| 2026-06-24 | DEBUG: cli: relax tid check in "debug dev task" for recent sched changes |
| 2026-06-24 | BUG/MEDIUM: h3: increment unknown request payload length |
| 2026-06-22 | BUG/MINOR: hq-interop: support response buffer wrapping |
| 2026-06-22 | BUG/MINOR: hq-interop: support full demux buf on large response |
| 2026-06-22 | BUG/MEDIUM: hlua: Properly report EOS when http applet exits |
| 2026-06-19 | BUG/MINOR: hq-interop: prevent reset if missing content-length |
| 2026-06-18 | BUG/MINOR: hq-interop: reject too big content |
| 2026-06-16 | BUG/MEDIUM: mux-fcgi: fix uint16_t overflow in drl += drp |
| 2026-06-16 | BUG/MEDIUM: http-act: Make a copy of the sample expr in (set/add)-headers-bin |
| 2026-06-16 | BUG/MEDIUM: mux_quic: fix freeze transfer after QCS rxbuf realign |
| 2026-06-16 | BUG/MINOR: hpack-tbl: add missing NULL check after hpack_dht_defrag() |
| 2026-06-15 | BUG/MEDIUM: ssl: Don't free the early data buffer too early |
| 2026-06-15 | BUG/MINOR: quic: fix rxbuf settings on backend side |
| 2026-06-15 | BUG/MINOR: mux-h1: Properly resolve file path for 'h1-case-adjust-file' |
| 2026-06-15 | BUG/MEDIUM: http-ana: Don't ignore L7 retry errors |
| 2026-06-15 | BUG/MINOR: http-ana: Remove a debugging memset on redirect |
| 2026-06-15 | DEBUG: stconn: Add a BUG_ON on shut flags when the endpoint is shut |
| 2026-06-12 | BUG/MINOR: server: fix add server with consistent hash balancing |
| 2026-06-12 | BUG/MEDIUM: h3: Properly handle PUSH_PROMISE on backend connections |
| 2026-06-11 | BUG/MINOR: cpu-topo: use ha_diag_notice() to report thread creations |
| 2026-06-11 | BUG/MEDIUM: ktls: defer enabling TLS ULP on a socket until connected |
| 2026-06-10 | BUG/MEDIUM: acme: stuck ACME task when authz is already "valid" |
| 2026-06-09 | BUG/MINOR: quic: fix Initial length value in sent packets |
| 2026-06-08 | BUG/MEDIUM: checks: Dequeue checks on purge |
| 2026-06-08 | BUG/MINOR: acl: report "ACL" not "map" in ACL ID lookup failures |
| 2026-06-08 | BUG/MEDIUM: xprt_qmux: implement ->get_ssl_sock_ctx() to get the SSL laye |
| 2026-06-08 | BUG/MEDIUM: threads: Fiw build when using no thread |
| 2026-06-07 | BUG/MEDIUM: regex: initialize the match array earlier during boot |
| 2026-06-05 | BUG/MINOR: tcpcheck: Override external check if healthcheck section is set |
| 2026-06-05 | BUG/MINOR: mux_quic: do not interrupt recv on error/incomplete data |
| 2026-06-05 | BUG/MEDIUM: mux_quic: prevent risk of infinite loop on recv |
| 2026-06-04 | BUG/MEDIUM: server/checks: Support healtcheck keyword on default-server lines |
| 2026-06-04 | BUG/MEDIUM: check: Ignore small-buffer option when starting an external check |
| 2026-06-04 | BUG/MEDIUM: check: Skip tcpcheck post-config for external checks |
| 2026-06-03 | BUG/MEDIUM: chunk: do not rely on small trash by default for expressions |
| 2026-06-03 | BUG/MINOR: jwe: don't write randoms past MAX_DECRYPTED_CEK_LEN in RSA_PKCS1_PADDING |
| 2026-06-03 | BUG/MEDIUM: stream: Don't use small buffer on queuing with a request data filter |
| 2026-06-03 | BUG/MEDIUM: vars: Properly eval set-var-fmt action for emtpy log-format string |
| 2026-06-03 | BUG/MEDIUM: channel: Fix condition to know if a channel may send |
| 2026-06-02 | BUG/MINOR: haterm: also apply the tcp-bind-opts to clear TCP "bind" lines |
| 2026-06-02 | BUG/MINOR: haterm: do not try to bind QUIC when not supported |
| 2026-06-02 | BUG/MINOR: startup: unbreak chroot with CAP_SYS_CHROOT |
| 2026-06-02 | BUG/MINOR: http-act: Properly handle final evaluation in pause action |
| 2026-06-01 | BUG/MINOR: tasks: Increase the right niced_task counter |
| 2026-06-01 | BUG/MEDIUM: leastconn: Unlock the write lock on allocation failure |
| 2026-06-01 | BUG/MINOR: mux-spop: Fix possible off-by-one OOB read in spop_get_varint() |
| 2026-06-01 | BUG/MINOR: applet: Commit changes into input buffer after sending HTX data |
| 2026-06-01 | BUG/MEDIUM: ssl: Make sure the alpn length is small enough |
| 2026-06-01 | BUG/MEDIUM: htx: Fix headers rollback on partial copy in htx_xfer() |
| 2026-06-01 | BUG/MEDIUM: mux-h1: Dup connection/upgrade value to parse it when making headers |
| 2026-06-01 | BUG/MINOR: cache: Fix copy of value when parsing maxage |
| 2026-06-01 | BUG/MEDIUM: h3: fix MAX_PUSH_ID handling |
| 2026-06-01 | BUG/MEDIUM: qmux: Close connection on invalid frame |
| 2026-05-29 | BUG/MEDIUM: resolvers: Wait a bit before calling the xprt prepare_srv |
| 2026-05-29 | BUG/MINOR: cache: fix cache tree iteration |
| 2026-05-29 | BUG/MINOR: quic: Fix another buffer overflow with sockaddr_in46 |
| 2026-05-28 | BUG/MEDIUM: threads: ignore max-threads-per-group when thread-groups is set |
| 2026-05-28 | BUG/MINOR: threads: set at least grp_max when mtpg is too small |
| 2026-05-28 | BUG/MEDIUM: lua: register hlua_init() as a pre-check to fix crash without Lua config |
| 2026-05-28 | BUG/MINOR: quic: update drs->lost before calling on_ack_recv |
| 2026-05-28 | BUG/MEDIUM: quic: reset consecutive_losses on exit from recovery period (cubic) |
| 2026-05-28 | BUG/MEDIUM: quic: reset cwnd in slow_start on persistent congestion (cubic) |
| 2026-05-28 | BUG/MINOR: quic: fix ack range node pool_free call passing wrong pointer type |
| 2026-05-28 | BUG/MINOR: mux_quic: prevent BE reuse with an errored conn |
| 2026-05-28 | BUG/MINOR: mux_quic: fix BE conn removal on app shutdown |
| 2026-05-28 | BUG/MINOR: mux_quic: open an idle QCS on reset on BE side |
| 2026-05-28 | BUG/MINOR: mux-h2: Count padding for connection flow control on error path |
| 2026-05-28 | BUG/MEDIUM: lua: defer Lua VM initialisation to the first Lua config keyword |
| 2026-05-28 | BUG/MINOR: quic: Fix memory leak in quic_deallocate_dghdlrs() |
| 2026-05-28 | BUG/MEDIUM: quic: handle ECONNREFUSED on RX side |
| 2026-05-27 | BUG/MINOR: qpack: fix huff_dec() error handling in qpack_decode_fs() |
| 2026-05-27 | BUG/MINOR: qpack: fix sign bit mask in qpack_decode_fs_pfx() |
| 2026-05-27 | BUG/MINOR: qpack: fix potential null-pointer dereference in qpack_dht_insert() |
| 2026-05-27 | BUG/MINOR: qpack: Fix index calculation in debug functions |
| 2026-05-27 | Revert "BUG/MEDIUM: dns: fix long loops in additional records parse on name failure" |
| 2026-05-27 | BUG/MINOR: qmux: reject too large initial record |
| 2026-05-27 | BUG/MEDIUM: qmux: do not crash on receiving an invalid first frame |
| 2026-05-27 | BUG/MEDIUM: qmux: do not crash on too large record |
| 2026-05-27 | BUG/MEDIUM: cpu-topo: Enforce thread-hard-limit on policy |
| 2026-05-27 | BUG/MINOR: mux-h1: H2 preface rejection doesn't update stick-table glitches |
| 2026-05-27 | BUG/MINOR: ssl-gencert: validate SNI characters to prevent SAN certificate injection |
| 2026-05-27 | BUG/MINOR: tcpcheck: Check LDAP response to not read more data than available |
| 2026-05-26 | BUG/MINOR: mux-spop: Use relative offset to compute contig data in demux buf |
| 2026-05-26 | BUG/MINOR: mux-fcgi: Use relative offset to compute contig data in demux buf |
| 2026-05-26 | BUG/MEDIUM: h1-htx: Sanitize parsing to properly handle upgrade requests |
| 2026-05-26 | BUG/MEDIUM: mux-fcgi: reject stream ID 0 for application records |
| 2026-05-26 | BUG/MEDIUM: jwe: substitute random CEK on RSA1_5 decryption failure per RFC 7516 #11.5 |
| 2026-05-26 | BUG/MINOR: jwe: enforce GCM tag length to 128 bits |
| 2026-05-26 | BUG/MINOR: quic: reject packet too short for HP decryption |
| 2026-05-26 | BUG/MINOR: qmux: do not crash on frame parsing issue |
| 2026-05-26 | BUG/MINOR: hlua: prevent Lua from passing CR/LF/NUL in HTTP headers |
| 2026-05-26 | BUG/MINOR: h3: add missing break on rcv_buf() |
| 2026-05-26 | BUG/MEDIUM: auth: fix unconfigured password NULL deref |
| 2026-05-26 | BUG/MINOR: h3: reject server MAX_PUSH_ID frame |
| 2026-05-26 | BUG/MINOR: h3: adjust error on PUSH_PROMISE frame reception |
| 2026-05-26 | BUG/MINOR: h3: reject client CANCEL_PUSH frame |
| 2026-05-26 | BUG/MINOR: h3: reject server push stream |
| 2026-05-26 | BUG/MEDIUM: h3: reject client push stream |
| 2026-05-26 | BUG/MEDIUM: tools: insert an XXH64 layer on the PRNG output |
| 2026-05-26 | BUG/MINOR: addons/51d: NUL-terminate headers before passing them to Trie API |
| 2026-05-26 | BUG/MINOR: resolvers: switch to a better PRNG for query IDs |
| 2026-05-26 | BUG/MINOR: ssl-hello: make use of the null-terminated servername |
| 2026-05-26 | BUG/MINOR: payload: fix the handshake length bounds check smp_client_hello_parse() |
| 2026-05-26 | BUG/MINOR: base64: return empty string for empty input in base64dec() |
| 2026-05-26 | BUG/MINOR: http-ext: always check remaining data when reading rfc7239 nodeport |
| 2026-05-26 | BUG/MEDIUM: acme: protect against risk of null-deref on connection failure |
| 2026-05-26 | BUG/MINOR: http-fetch: check against the whole token in get_http_auth() |
| 2026-05-26 | BUG/MINOR: sample: request an extra output byte for the url_dec converter |
| 2026-05-26 | BUG/MINOR: resolvers: relax size checks in authority record parsing |
| 2026-05-26 | BUG/MINOR: cache: also recognize directives in the form "token=" |
| 2026-05-26 | BUG/MEDIUM: cache: always verify the primary hash in get_secondary_entry() |
| 2026-05-26 | BUG/MEDIUM: h1: limit status codes to 3 digits by default |
| 2026-05-26 | BUG/MEDIUM: h1: drop headers whose names contain invalid chars |
| 2026-05-25 | BUG/MINOR: haterm: fix the random suffix multiplication |
| 2026-05-25 | BUG/MINOR: sample: limit the be2hex converter's chunk size |
| 2026-05-25 | BUG/MINOR: init: use more than ha_random64() for the cluster secret |
| 2026-05-25 | BUG/MINOR: dict: fix refcount race on insert collision |
| 2026-05-25 | BUG/MINOR: log: look for the end of priority before the end of the buffer |
| 2026-05-25 | BUG/MINOR: mux-h2: validate HEADERS frame length before reading stream dep |
| 2026-05-25 | BUG/MINOR: resolvers: fix risk of appending garbage past the domain name |
| 2026-05-25 | BUG/MINOR: resolvers: fix room for trailing zero in resolv_dn_label_to_str() |
| 2026-05-25 | BUG/MINOR: log: free logformat expr on compile failure in cfg_parse_log_profile |
| 2026-05-25 | BUG/MEDIUM: cache: fix a refcount leak for missed secondary entries |
| 2026-05-25 | BUG/MEDIUM: tcpcheck/spoe: bound the SPOP error code to valid values |
| 2026-05-25 | BUG/MEDIUM: regex: allocate a large enough pcre2 match for all matches |
| 2026-05-25 | BUG/MEDIUM: log-forward: make sure the month is unsigned |
| 2026-05-23 | BUG/MEDIUM: acme: NUL terminate response buffer before PEM parsing |
| 2026-05-22 | BUG/MEDIUM: cli: Fix parsing of pattern finishing a command payload |
| 2026-05-22 | BUG/MEDIUM: hlua: Fix integer underflow when receiving line from lua cosocket |
| 2026-05-22 | BUG/MINOR: tcpchecks: Limit parsing of agent-check reply to the buffer |
| 2026-05-22 | BUG/MEDIUM: dict: hold lock while decrementing refcount in dict_entry_unref |
| 2026-05-22 | BUG/MINOR: quic: fix ODCID lookup from derived value |
| 2026-05-22 | BUG/MEDIUM: ssl-gencert: Unlock LRU cache if failing to generate certificate |
| 2026-05-22 | BUG/MEDIUM: resolvers: Fix test on dn label size in resolv_dn_label_to_str() |
| 2026-05-22 | BUG/MEDIUM: applet: Properly handle receives of size 0 |
| 2026-05-21 | BUG/MINOR: ocsp: Manage date too far away in the future |
| 2026-05-21 | BUG/MEDIUM: net_helper: fix a remaining possibly infinite loop in converters |
| 2026-05-20 | BUG/MEDIUM: htx: Alloc a chunk of right size in htx_replace_blk_value() |
| 2026-05-20 | BUG/MEDIUM: applet: Fix transfer of HTX data to the applet |
| 2026-05-20 | BUG/MINOR: htx: Fix value of HTX_XFER_HDRS_ONLY flag |
| 2026-05-20 | BUG/MINOR: mux_quic: do not exceed stream.max-concurrent on backend side |
| 2026-05-20 | BUG/MEDIUM: servers: Don't forget to set srv_hash when needed |
| 2026-05-20 | BUG/MINOR: prevent conn leak in case of xprt_qmux init failure |
| 2026-05-20 | BUG/MEDIUM: servers: Store the connection hash with the parameter cache |
| 2026-05-19 | BUG/MINOR: backend: fix balance hash calculation when using hash-type none |
| 2026-05-19 | BUG/MINOR: server: accept server IDs above 2^31 and clarify error message |
| 2026-05-19 | BUG/MINOR: httpclient-cli: fix uninit variable in error label |
| 2026-05-19 | BUG/MINOR: h1: Don't mask websocket protocol if multiple protocols used |
| 2026-05-19 | BUG/MEDIUM: h1: Skip all h2c values from Upgrade headers during parsing |
| 2026-05-19 | BUG/MINOR: httpclient-cli: Destroy http-client context if failing to start it |
| 2026-05-19 | BUG/MINOR: server: Properly handle init-state value during haproxy startup |
| 2026-05-19 | BUG/MINOR: jws: Add missing return value check (EVP_PKEY_get_bn_param) |
| 2026-05-19 | BUG/MINOR: jws: fix OpenSSL 3.0 version check from > to >= |
| 2026-05-19 | BUG/MEDIUM: limits: properly account for global.maxpipes in compute_ideal_maxconn() |
| 2026-05-18 | BUG/MINOR: jwt: fix possible memory leak in convert_ecdsa_sig() error path |
| 2026-05-18 | BUG/MINOR: check: properly report errno in chk_report_conn_err() |
| 2026-05-18 | BUG/MINOR: sock: store the connection error status |
| 2026-05-16 | BUG/MINOR: session/trace: use distinct flags for SESS_EV_END and _ERR |
| 2026-05-15 | BUG/MINOR: resolvers: fix missing task_idle destruction in resolvers_destroy() |
| 2026-05-15 | BUG/MINOR: resolvers: fix leaked fields on cfg_parse_resolvers() error paths |
| 2026-05-15 | BUG/MINOR: resolvers: fix leaked dgram and dns_ring struct in parse_resolve_conf() |
| 2026-05-15 | BUG/MINOR: resolvers: report the expression error in the do-resolve() action parser |
| 2026-05-15 | BUG/MINOR: proxy: use proxy_drop() in parse_new_proxy() error path |
| 2026-05-15 | BUG/MINOR: dns: fix dangling dgram pointer on dns_dgram_init() failure path |
| 2026-05-15 | BUG/MINOR: resolvers: fix dangling list pointer in resolvers_new() error paths |
| 2026-05-15 | BUG/MEDIUM: server/cli: unlock server lock on failure in cli_parse_set_server |
| 2026-05-15 | BUG/MINOR: servers: use proper source of pool_conn_name in srv_settings_cpy() |
| 2026-05-15 | BUG/MINOR: server: better handling of OOM in srv_set_fqdn() |
| 2026-05-15 | BUG/MEDIUM: dns: fix memory leak of sockaddr in dns_session_init() error path |
| 2026-05-15 | BUG/MEDIUM: resolvers: fix name compression pointer validation in resolv_read_name() |
| 2026-05-15 | BUG/MEDIUM: dns: fix long loops in additional records parse on name failure |
| 2026-05-15 | BUG/MINOR: config/dns: properly fail on duplicate nameserver name detection |
| 2026-05-15 | BUG/MINOR: backend: correct parameter value validation in get_server_ph_post() |
| 2026-05-13 | BUG/MINOR: xprt_qstrm: fix conflicting prototype |
| 2026-05-13 | BUG/MEDIUM: http-client: Only consume input buffer when hc one is empty |
| 2026-05-13 | BUG/MEDIUM: dict: hold read lock while incrementing refcount in dict_insert |
| 2026-05-11 | BUG/MEDIUM: tasks: Keep the TASK_RUNNING flag until queued |
| 2026-05-11 | BUG/MINOR: uri-auth: fix possible null-deref in latest fix for leaks |
| 2026-05-11 | BUG/MINOR: mqtt: fix PUBLISH flags validation that want all bits to be set |
| 2026-05-11 | BUG/MINOR: mqtt: connack parser uses wrong bit for SUBSCRIPTION_IDENTIFIERS_AVAILABLE |
| 2026-05-11 | BUG/MINOR: mqtt: connect parser uses wrong bit field for TOPIC_ALIAS_MAXIMUM |
| 2026-05-11 | BUG/MINOR: mqtt: connack parser returns MQTT_NEED_MORE_DATA on unknown property |
| 2026-05-11 | BUG/MINOR: cfgcond: make KQUEUE check for GTUNE_USE_KQUEUE not GTUNE_USE_EPOLL |
| 2026-05-11 | BUG/MINOR: cache: fix memory leak in parse_cache_rule error path |
| 2026-05-11 | BUG/MINOR: uri-auth: avoid leaks on initialization error |
| 2026-05-11 | BUG/MINOR: auth: free user groups on error paths in userlist_postinit() |
| 2026-05-11 | BUG/MINOR: tools: fix memory leak in env_expand() error path |
| 2026-05-11 | BUG/MINOR: http-act: set-status() must check the response message, not the request |
| 2026-05-11 | BUG/MINOR: http-fetch: make http_first_req() check for HTTP first |
| 2026-05-11 | BUG/MINOR: http-fetch: fix smp_fetch_hdr_ip()'s handling of brackets for IPv6 |
| 2026-05-11 | BUG/MINOR: mux-h1: only check h1s if not NULL |
| 2026-05-11 | BUG/MINOR: cfgparse-listen: do not emit extraneous line in rule order warnings |
| 2026-05-09 | BUG/MEDIUM: servers: Only requeue servers if they are up |
| 2026-05-07 | BUG/MEDIUM: stick-table: properly check permissions on CLI's set/clear cmd |
| 2026-05-07 | BUG/MEDIUM: jwe: Fix jwt.decrypt_alg_list to work correctly |
| 2026-05-07 | BUG/MEDIUM: mux-h2: fix the detection of the ext connect support |
| 2026-05-07 | Revert "BUG/MINOR: mux-h2: condition the processing of 8441 extension to global setting" |
| 2026-05-07 | Revert "BUG/MEDIUM: cli: fix master CLI connection slot leak on client disconnect" |
| 2026-05-07 | BUG/MEDIUM: mux-h2: Properly consume padding for DATA frames |
| 2026-05-07 | BUG/MINOR: mux_quic: refresh timeout only if I/O performed |
| 2026-05-07 | BUG/MINOR: mux_quic: fix max stream ID reuse estimation |
| 2026-05-06 | BUG/MINOR: ssl: Use the sequence number with kTLS and TLS 1.2 |
| 2026-05-06 | BUG/MEDIUM: mux_quic: adjust qcc_is_dead() to account detached streams |
| 2026-05-05 | DEBUG: haterm: Add hstream flags in the trace messages |
| 2026-05-05 | BUG/MINOR: haterm: Report a 400-bad-request error on receive error |
| 2026-05-05 | BUG/MINOR: haterm: Fix condition to use direct data forwarding |
| 2026-05-05 | BUG/MEDIUM: haterm: Properly handle client timeout |
| 2026-05-05 | BUG/MEDIUM: haterm: Properly handle end of request and end of response |
| 2026-05-05 | BUG/MINOR: haterm: Don't set HTX_FL_EOM flag on 100-Continue responses |
| 2026-05-05 | BUG/MEDIUM: haterm: Subscribe for receives until request was fully drained |
| 2026-05-05 | BUG/MINOR: haterm: Fix a possible integer overflow on the request body length |
| 2026-05-05 | BUG/MINOR: haterm: Immediately report error when draining the request |
| 2026-05-05 | BUG/MEDIUM: h1_htx: Remove reverved block on error during contig chunks parsing |
| 2026-05-05 | BUG/MINOR: http-fetch: Fix http_auth_bearer() when custom header is used |
| 2026-05-05 | BUG/MINOR: http_fetch: Check return values of unchecked buffer operations |
| 2026-05-05 | BUG/MINOR: acme: contact mail should be optional, don't pass ToS bool |
| 2026-05-05 | BUG/MINOR: h2: only accept :protocol with extended CONNECT |
| 2026-05-05 | BUG/MINOR: mux-h2: condition the processing of 8441 extension to global setting |
| 2026-05-05 | BUG/MINOR: h2: add decoding for :protocol in traces |
| 2026-05-04 | BUG/MINOR: mworker/cli: check ci_insert() return value in pcli_parse_request() |
| 2026-05-04 | BUG/MEDIUM: mworker/cli: fix user and operator permission via @@ in master CLI |
| 2026-05-04 | BUG/MAJOR: http-ana: fix private session retrieval on NTLM |
| 2026-05-04 | BUG/MEDIUM: ssl/sample: check output buffer size in aes_cbc_enc converter |
| 2026-05-04 | BUG/MAJOR: net_helper: also fix tcp_options_list for OOB write loop |
| 2026-05-04 | BUG/MINOR: resolvers: Free opts on parse error in resolv_parse_do_resolve() |
| 2026-05-04 | BUG/MINOR: resolvers: Fix lookup for a hostname in the state-file tree |
| 2026-05-04 | BUG/MINOR: resolvers: Free new requester on error when linking a resolution |
| 2026-05-04 | BUG/MINOR: tcpcheck: Properly report error for http health-checks |
| 2026-05-04 | BUG/MINOR: dns: always validate the source address in responses |
| 2026-05-04 | BUG/MAJOR: mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in h2c_dec_hdrs() |
| 2026-05-04 | BUG/MEDIUM: mux-h2: fix the body_len to check when parsing request trailers |
| 2026-05-04 | BUG/MINOR: quic: fix trace crash on datagram receive |
| 2026-05-04 | BUG/MEDIUM: acme: fix stalled renewal when opportunistic DNS check fails |
| 2026-05-04 | BUG/MINOR: quic: fix buffer overflow with sockaddr_in46 |
| 2026-04-30 | CI: github: add DEBUG_STRICT=2 to ASAN jobs |
| 2026-04-30 | BUG/MINOR: pattern: release the reference on failure to load from file |
| 2026-04-30 | BUG/MINOR: map: do not leak a map descriptor on load error |
| 2026-04-30 | BUG/MINOR: acl: fix a possible arg corruption in smp_fetch_acl_parse() |
| 2026-04-30 | BUG/MEDIUM: cli: fix master CLI connection slot leak on client disconnect |
| 2026-04-30 | BUG/MINOR: quic: handle cases where we don't have an address |
| 2026-04-30 | BUG/MINOR: hpack: validate idx > 0 in hpack_valid_idx() |
| 2026-04-30 | BUG/MINOR: vars: only print first invalid char in fill_desc() |
| 2026-04-30 | BUG/MINOR: vars: don't store the variable twice with set-var-fmt |
| 2026-04-30 | BUG/MINOR: vars: make parse_store() return error on var_set() failure |
| 2026-04-30 | BUG/MINOR: sink: do not free existing sinks on allocation error |
| 2026-04-29 | BUG/MINOR: acme: skip auth/challenge steps when newOrder returns a certificate |
| 2026-04-29 | BUG/MEDIUM: acme: fix segfault on newOrder with empty authorizations |
| 2026-04-29 | BUG/MINOR: http-htx: Don't normalize emtpy path for OPTIONS requests |
| 2026-04-29 | BUG/MEDIUM: mux-fcgi: Properly handle full buffer for FCGI_PARAM record |
| 2026-04-29 | BUG/MINOR: net_helper: fix incomplete decoding in sample_conv_eth_vlan |
| 2026-04-29 | BUG/MINOR: net_helper: fix out-of-bounds read in sample_conv_tcp_options_list |
| 2026-04-29 | BUG/MINOR: net_helper: fix out-of-bounds read in tcp_fullhdr_find_opt |
| 2026-04-29 | BUG/MINOR: payload: prevent integer overflow in distcc token parsing |
| 2026-04-29 | BUG/MINOR: payload: validate minimum keyshare_len in smp_fetch_ssl_keyshare_groups |
| 2026-04-29 | BUG/MINOR: fix various typos and spelling mistakes in user-visible messages |
| 2026-04-29 | BUG/MEDIUM: tasks: Do not loop in task_schedule() if a task is running |
| 2026-04-29 | BUG/MAJOR: mux-h1: Deal with true 64-bits integer to emit chunks size |
| 2026-04-29 | BUG/MEDIUM: h1: Enforce the authority validation during H1 request parsing |
| 2026-04-29 | BUG/MAJOR: http: forbid comma character in authority value |
| 2026-04-29 | BUG/MEDIUM: http-htx: Loop on full host value during scheme based normalization |
| 2026-04-29 | BUG/MEDIUM: http-htx: Don't use data from HTX message to update authority |
| 2026-04-29 | BUG/MAJOR: http-htx: Store new host in a chunk for scheme-based normalization |
| 2026-04-28 | BUG/MINOR: mux_quic: free frames emitted with QMux |
| 2026-04-27 | BUG/MINOR: http_ana: use scf to report term_evts in http_wait_for_request() |
| 2026-04-27 | BUG/MEDIUM: mux_h1: fix stack buffer overflow in h1_append_chunk_size() |
| 2026-04-27 | BUG/MINOR: peers: fix wrong flag reported twice for dump_flags |
| 2026-04-27 | BUG/MINOR: peers: fix logical "and" when checking for local in PEER_APP_ST_STARTING |
| 2026-04-27 | BUG/MINOR: sample: fix NULL strm dereference in sample_conv_when |
| 2026-04-27 | BUG/MINOR: sample: fix memory leak in smp_resolve_args error paths |
| 2026-04-27 | BUG/MINOR: sample: fix memory leak in check_when_cond() when ACL is not found |
| 2026-04-27 | BUG/MINOR: tools: free previously allocated strings on strdup failure in backup_env() |
| 2026-04-27 | BUG/MINOR: tools: fix memory leak in indent_msg() on out of memory |
| 2026-04-27 | BUG/MINOR: tools: my_memspn/my_memcspn wrong cast causing incorrect byte reading |
| 2026-04-27 | BUG/MINOR: tree-wide: fix a few user-visible spelling mistakes from dev7 |
| 2026-04-27 | BUG/MINOR: ssl: fix double-free on failed realloc in ssl_sock.c |
| 2026-04-25 | BUG/MINOR: ssl: fix memory leak on realloc failure in acme.ips |
| 2026-04-25 | BUG/MINOR: ssl: fix memory leaks on realloc failure in ssl_sock.c |
| 2026-04-25 | BUG/MINOR: ssl: fix memory leaks on realloc failure in ssl_ckch.c |
| 2026-04-24 | BUG/MEDIUM: stats: fix crash on 'dump stats-file' |
| 2026-04-24 | BUG/MINOR: tcpcheck: Allow connection reuse without prior traffic |
| 2026-04-24 | BUG/MINOR: mux_quic: do not release conn on qcc_recv() for QMux |
| 2026-04-24 | BUG/MINOR: xprt_qstrm: prevent crash if conn release on MUX wake |
| 2026-04-24 | BUG/MINOR: xprt_qstrm: ensure all local TPs are allocated |
| 2026-04-24 | BUG/MINOR: mux_quic: prevent crash on qc_frm_free() with QMux |
| 2026-04-23 | BUG/MEDIUM: mux-h1: Force close mode for bodyless message announcing a C-L |
| 2026-04-23 | BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as well |
| 2026-04-23 | BUG/MINOR: server: fix a possible leak of an error message in dynamic servers |
| 2026-04-23 | Revert "BUG/MINOR: stream: add the newly added SF_TXN_* flags to strm_show_flags()" |
| 2026-04-23 | BUG/MINOR: debug: properly mark the entire libs archive read-only |
| 2026-04-23 | BUG/MINOR: stream: add the newly added SF_TXN_* flags to strm_show_flags() |
| 2026-04-23 | BUG/MINOR: servers: fix last_sess date calculation |
| 2026-04-23 | BUG/MINOR: compression: properly disable request when setting response |
| 2026-04-23 | BUG/MINOR: stream: Add SF_TXN_HTTP/SF_TXN_PCLI flags in strm_show_flags() |
| 2026-04-23 | BUG/MEDIUM: tcpcheck: Release temporary small chunk when retrying on http-check |
| 2026-04-23 | BUG/MINOR: tcpcheck: Fix a leak on deinit by releasing ruleset's conf.file |
| 2026-04-23 | BUG/MINOR: tcpcheck: Don't release ruleset when parsing 'spop-check' ruleset |
| 2026-04-23 | BUG/MINOR: http-act: fix a typo in a "del-heeaders-bin" error message |
| 2026-04-23 | BUG/MINOR: mux-h1: Fix test to skip trailers from chunked messages |
| 2026-04-23 | BUG/MINOR: mux-h1: Fix condition to send null-chunk for bodyless message |
| 2026-04-23 | BUG/MINOR: log: also wait for the response when logging response headers |
| 2026-04-23 | BUG/MINOR: H2: Don't forget to free shared_rx_bufs on failure |
| 2026-04-23 | BUG/MINOR: h2: Don't look at the exclusive bit for PRIORITY frame |
| 2026-04-23 | BUG/MINOR: h2: make tune.h2.log-errors actually work |
| 2026-04-22 | BUG/MAJOR: net_helper: ip.fp infinite loop on malformed tcp options |
| 2026-04-22 | BUG/MEDIUM: tasks: Make sure we don't schedule a task already running |
| 2026-04-22 | BUG/MINOR: mux-h2: count a proto error when rejecting a stream on parsing error |
| 2026-04-22 | BUG/MINOR: mux-h2: count a protocol error when failing to parse a trailer |
| 2026-04-22 | BUG/MINOR: reg-tests: make shell syntax errors fatal |
| 2026-04-21 | BUG/MAJOR: sched: protect task->expire on 32-bit platforms |
| 2026-04-21 | BUG/MINOR: sample: adjust dependencies for channel output bytes counters |
| 2026-04-21 | BUG/MINOR: log: consider format expression dependencies to decide when to log |
| 2026-04-20 | BUG/MEDIUM: checks: Don't forget to set the "alt_proto" field |
| 2026-04-20 | BUG/MINOR: xprt_qstrm: reduce max record length check |
| 2026-04-20 | BUG/MINOR: mux_quic: convert QCC rx.rlen to 64bits |
| 2026-04-20 | BUG/MINOR: xprt_qstrm: read record length in 64bits |
| 2026-04-17 | BUG/MINOR: mux_quic: limit avail_streams() to 2^62 |
| 2026-04-17 | BUG/MINOR: task: fix uninitialised read in run_tasks_from_lists() |
| 2026-04-16 | BUG/MEDIUM: mux-h2: ignore conn->owner when deciding if a connection is dead |
| 2026-04-15 | BUG/MINOR: threads: properly set the number of tgroups when non using policy |
| 2026-04-15 | BUG/MINOR: acme: fix fallback state after failed initial DNS check |
| 2026-04-15 | BUG/MEDIUM: peers: trash of expired entries delayed after fullresync |
| 2026-04-14 | BUG/MEDIUM: htx: Don't count delta twice when block value is replaced |
| 2026-04-14 | BUG/MEDIUM: htx: Properly handle block modification during defragmentation |
| 2026-04-13 | BUG/MINOR: haterm: don't apply the default pipe size margin twice |
| 2026-04-13 | BUG/MINOR: acme: don't pass NULL into format string |
| 2026-04-13 | BUG/MINOR: acme: read the wildcard flag from the authorization response |
| 2026-04-13 | BUG/MINOR: haterm: preserve the pipe size margin for splicing |
| 2026-04-13 | BUG/MEDIUM: cli: Properly handle too big payload on a command line |
| 2026-04-13 | BUG/MINOR: log: Fix error message when using unavailable fetch in logfmt |
| 2026-04-13 | BUG/MINOR: quic: do not use hardcoded values in QMux TP frame builder |
| 2026-04-13 | BUG/MINOR: ot: fixed wrong NULL check in flt_ot_parse_cfg_group() |
| 2026-04-13 | BUG/MINOR: ot: removed dead code in flt_ot_parse_cfg_str() |
| 2026-04-13 | BUG/MINOR: xprt_qstrm: do not parse record length on read again |
| 2026-04-13 | BUG/MINOR: mux_quic: prevent QMux crash on qcc_io_send() error path |
| 2026-04-10 | BUG/MEDIUM: haterm: Properly initialize the splicing support for haterm |
| 2026-04-10 | Revert "BUG/MEDIUM: haterm: Move all init functions of haterm in haterm_init.c" |
| 2026-04-10 | BUG/MINOR: do not crash on QMux reception of BLOCKED frames |
| 2026-04-10 | BUG/MINOR: quic: increment pos pointer on QMux transport params parsing |
| 2026-04-10 | BUG/MINOR: mux-quic: fix potential NULL deref on qcc_release() |
| 2026-04-10 | BUG/MINOR: hlua: fix use-after-free of HTTP reason string |
| 2026-04-10 | BUG/MEDIUM: mux-fcgi: prevent record-length truncation with large bufsize |
| 2026-04-10 | BUG/MINOR: sample: fix info leak in regsub when exp_replace fails |
| 2026-04-09 | BUG/MEDIUM: samples: Fix handling of SMP_T_METH samples |
| 2026-04-09 | BUG/MINOR: haterm: Return the good start-line for 100-continue interim message |
| 2026-04-09 | BUG/MINOR: http-act: validate decoded lengths in *-headers-bin |
| 2026-04-09 | BUG/MINOR: spoe: fix pointer arithmetic overflow in spoe_decode_buffer() |
| 2026-04-09 | BUG/MINOR: resolvers: fix memory leak on AAAA additional records |
| 2026-04-08 | BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals |
| 2026-04-08 | Revert "BUG: hlua: fix stack overflow in httpclient headers conversion" |
| 2026-04-08 | BUG/MEDIUM: connection: Wake the stconn on error when failing to create mux |
| 2026-04-07 | BUG/MINOR: peers: fix OOB heap write in dictionary cache update |
| 2026-04-07 | BUG/MEDIUM: chunk: fix infinite loop in get_larger_trash_chunk() |
| 2026-04-07 | BUG/MEDIUM: chunk: fix typo allocating small trash with bufsize_large |
| 2026-04-07 | BUG/MINOR: hlua: fix format-string vulnerability in Patref error path |
| 2026-04-07 | BUG/MINOR: hlua: fix stack overflow in httpclient headers conversion |
| 2026-04-07 | BUG: hlua: fix stack overflow in httpclient headers conversion |
| 2026-04-07 | BUG/MEDIUM: jwe: fix memory leak in jwt_decrypt_secret with var argument |
| 2026-04-07 | BUG/MEDIUM: jwt: fix heap overflow in ECDSA signature DER conversion |
| 2026-04-07 | BUG/MEDIUM: jwe: fix NULL deref crash with empty CEK and non-dir alg |
| 2026-04-07 | BUG/MEDIUM: payload: validate SNI name_len in req.ssl_sni |
| 2026-04-05 | BUG/MEDIUM: tcpcheck: Properly retrieve tcpcheck type to install the best mux |
| 2026-04-04 | BUG/MINOR: counters: fix unexpected 127 char GUID truncation for shm-stats-file objects |
| 2026-04-03 | BUG/MEDIUM: tcpcheck/server: Fix parsing of healthcheck param for dynamic servers |
| 2026-04-03 | BUG/MINOR: http-act: fix a typo in the "pause" action error message |
| 2026-04-03 | BUG/MEDIUM: mux-h1: Disable 0-copy forwarding when draining the request |
| 2026-04-03 | BUG/MEDIUM: haterm: Move all init functions of haterm in haterm_init.c |
| 2026-04-03 | BUG/MINOR: ssl: fix memory leak in ssl_fc_crtname by using SSL_CTX ex_data index |
| 2026-04-03 | BUG/MINOR: cfgcond: fail cleanly on missing argument for "feature" |
| 2026-04-03 | BUG/MINOR: cfgcond: always set the error string on awslc_api checks |
| 2026-04-03 | BUG/MINOR: cfgcond: always set the error string on openssl_version checks |
| 2026-04-03 | BUG/MINOR: cfgcond: properly set the error pointer on evaluation error |
| 2026-04-02 | BUG/MINOR: mux_quic: fix uninit for QMux emission |
| 2026-04-02 | DEBUG: connection/flags: add QSTRM flags for the decoder |
| 2026-04-02 | BUG/MINOR: quic: fix documentation for transport params decoding |
| 2026-04-01 | BUG/MINOR: tcpcheck: Use tcpcheck context for expressions parsing |
| 2026-04-01 | BUG/MINOR: tcpcheck: Don't enable http_needed when parsing HTTP samples |
| 2026-04-01 | BUG/MINOR: tcpcheck: Remove unexpected flag on tcpcheck rules for httchck option |
| 2026-04-01 | BUG/MINOR: http_act: Make set/add-headers-bin compatible with ACL conditions |
| 2026-04-01 | BUG/MINOR: http_act: Properly handle decoding errors in *-headers-bin actions |
| 2026-03-31 | BUG/MEDIUM: mux-h1: Don't set MSG_MORE on bodyless responses forwarded to client |
| 2026-03-31 | BUG/MEDIUM: map/cli: CLI commands lack admin permission checks |
| 2026-03-31 | BUG/MEDIUM: ssl/ocsp: ocsp commands are missing permission checks |
| 2026-03-31 | BUG/MEDIUM: ssl/cli: tls-keys commands are missing permission checks |
| 2026-03-31 | BUG/MEDIUM: map/cli: map/acl commands warn when accessed without admin level |
| 2026-03-31 | BUG/MEDIUM: ssl/ocsp: ocsp commands warn when accessed without admin level |
| 2026-03-31 | BUG/MEDIUM: ssl/cli: tls-keys commands warn when accessed without admin level |
| 2026-03-30 | BUG/MINOR: net_helper: fix length controls on ip.fp tcp options parsing |
| 2026-03-30 | BUG/MINOR: stconn: Always declare the SC created from healthchecks as a back SC |
| 2026-03-30 | BUG/MINOR: quic: close conn on packet reception with incompatible frame |
| 2026-03-27 | BUG/MEDIUM: htx: Fix htx_xfer() to consume more data than expected |
| 2026-03-27 | BUG/MINOR: acme: fix task allocation leaked upon error |
| 2026-03-27 | BUG/MEDIUM: acme: skip doing challenge if it is already valid |
| 2026-03-27 | BUG/MINOR: http-ana: Only consider client abort for abortonclose |
| 2026-03-27 | BUG/MINOR: config: Properly test warnif_misplaced_* return values |
| 2026-03-27 | BUG/MINOR: config: Warn only if warnif_cond_conflicts report a conflict |
| 2026-03-26 | BUG/MEDIUM: check: Don't reuse the server xprt if we should not |
| 2026-03-25 | BUG/MINOR: acme: permission checks on the CLI |
| 2026-03-25 | BUG/MINOR: ech: permission checks on the CLI |
| 2026-03-23 | BUG/MINOR: acme/cli: fix argument check and error in 'acme challenge_ready' |
| 2026-03-23 | BUG/MINOR: acme: replace atol with len-bounded __strl2uic() for retry-after |
| 2026-03-23 | BUG/MINOR: acme: free() DER buffer on a2base64url error path |
| 2026-03-23 | BUG/MINOR: acme: NULL check on my_strndup() |
| 2026-03-23 | Revert "BUG/MEDIUM: mux-h2: make sure to always report pending errors to the stream" |
| 2026-03-23 | BUG/MINOR: http_htx: fix null deref in http-errors config check |
| 2026-03-23 | BUG/MINOR: acme/cli: wrong argument check in 'acme renew' |
| 2026-03-23 | BUG/MINOR: acme: wrong error when checking for duplicate section |
| 2026-03-23 | BUG/MINOR: acme: leak of ext_san upon insertion error |
| 2026-03-23 | BUG/MEDIUM: acme: fix multiple resource leaks in acme_x509_req() |
| 2026-03-20 | BUG/MINOR: qpack: fix 62-bit overflow and 1-byte OOB reads in decoding |
| 2026-03-20 | BUG/MINOR: sock: adjust accept() error messages for ENFILE and ENOMEM |
| 2026-03-19 | BUG/MINOR: mworker: fix sort order of mworker_proc in 'show proc' |
| 2026-03-19 | BUG/MINOR: mworker/cli: fix show proc pagination losing entries on resume |
| 2026-03-19 | BUG/MEDIUM: h3: reject unaligned frames except DATA |
| 2026-03-19 | BUG/MAJOR: h3: check body size with content-length on empty FIN |
| 2026-03-19 | BUG/MINOR: mux-h2: properly ignore R bit in WINDOW_UPDATE increments |
| 2026-03-19 | BUG/MINOR: mux-h2: properly ignore R bit in GOAWAY stream ID |
| 2026-03-19 | BUG/MEDIUM: peers: enforce check on incoming table key type |