HAProxy known bugs for version v3.2.23 (maintenance branch 3.2) :  102 

This version (3.2.23) is a release belonging to maintenance branch 3.2 whose latest version is 3.2.26. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches.

Quick links

Other versions in the same branch

This branch contains the following releases :

DateVersionComment
2026-10-143.2.26 ⇐ last
2026-09-283.2.25 
2026-09-243.2.24 
2026-08-273.2.23 ⇐ yours
2026-07-293.2.22 
2026-07-033.2.21 
2026-06-263.2.20 
2026-05-113.2.19 
2026-05-063.2.18 
2026-04-303.2.17 
2026-04-233.2.16 
2026-03-193.2.15 
2026-03-093.2.14 
2026-02-193.2.13 
2026-02-123.2.12 
2026-01-293.2.11 
2025-12-183.2.10 
2025-11-213.2.9 
2025-11-073.2.8 
2025-10-233.2.7 
2025-10-033.2.6 
2025-09-233.2.5 
2025-08-133.2.4 
2025-07-093.2.3 
2025-07-023.2.2 
2025-06-113.2.1 
2025-05-283.2.0 

Known bugs affecting this version, and already fixed in the maintenance branch

These fixes have already been queued for a more recent 3.2 version. Some of them might have already been released in a more recent version than yours, and other ones might still be pending in the maintenance branch for a future release. The list may be empty if you're already on the latest version and no new fix was backported.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in this version by category :

TotalCRITICALMAJORMEDIUMMINOR
102 0 6 38 58

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2026-10-14BUG/MAJOR: h1-htx: report an error on a too long chunk-size line
2026-10-14BUG/MAJOR: mux-h2: properly handle short reads on PING frames
2026-10-13BUG/MINOR: cfgparse-global: only warn when "localpeer" is set together with -L
2026-10-13BUG/MEDIUM: ssl: crt-list curves ignored with AWS-LC
2026-10-13BUG/MEDIUM: ssl: crt-list ciphers ignored with AWS-LC
2026-10-12BUG/MEDIUM: mux-h1: only accept the H2 preface on the first request
2026-10-12BUG/MINOR: http-fetch: don't report pseudo-headers in TCP mode
2026-10-12BUG/MEDIUM: mux-h1: also release the embryonic stream when the error is empty
2026-10-12BUG/MEDIUM: mux-h2: fix a possible crash on rxbuf allocation failure
2026-10-12BUG/MEDIUM: mux-h2: report a dead rhttp connection in h2_wake()
2026-10-12BUG/MEDIUM: mux-h1: don't pass an upgraded connection to traces in h1s_destroy()
2026-10-12BUG/MEDIUM: mux-fcgi: don't return a freed tasklet from fcgi_deferred_shut()
2026-10-12BUG/MEDIUM: mux-h2: don't return a freed tasklet from h2_deferred_shut()
2026-10-12BUG/MINOR: spoe: Fix the message list splice with an empty list
2026-10-12BUG/MINOR: cfgparse-listen: complete the list of options for the suggestions
2026-10-12BUG/MINOR: proxy: also look for the closest option among cfg_opts3
2026-10-12BUG/MINOR: cfgparse-listen: properly reject extra args in a backend section
2026-10-12BUG/MINOR: cfgparse-listen: fix the argument checked by "email-alert"
2026-10-12BUG/MINOR: cfgparse-listen: release the previous description of the proxy
2026-10-12BUG/MINOR: cfgparse-global: add missing calloc() check for the global description
2026-10-12BUG/MINOR: cfgparse-global: add missing gotos to error label in max-spread-checks
2026-10-12BUG/MINOR: ssl: Fix potential NULL-deref in "dump ssl cert" with AWS-LC
2026-10-12BUG/MINOR: h3: reject RS/SS for QPACK uni streams
2026-10-12BUG/MINOR: h3: reject frames with truncated header
2026-10-12BUG/MINOR: mux_quic: extend FINAL_SIZE_ERROR detection on stream
2026-10-12BUG/MEDIUM: listener: Consider maxconn before waking listeners
2026-10-12BUG/MINOR: ssl: fix trace crash on FE conn release in io cb
2026-10-12BUG/MINOR: hq-interop: prevent double EOM on request with standalone FIN
2026-10-12BUG/MINOR: log: fix erroneous error message in log-steps parser
2026-10-12BUG/MINOR: server: fix "del server" description
2026-10-12BUG/MINOR: sample: return the decoded JWT part when no path is given
2026-10-12BUG/MEDIUM: tcpcheck: do not run a regex on an unallocated buffer
2026-10-12BUG/MINOR: http-fetch: do not count Set-Cookie attributes as cookies
2026-10-12BUG/MINOR: payload: always report a boolean from req.ssl_ec_ext
2026-10-12BUG/MINOR: stick-table: do not count the lookup itself in table_trackers()
2026-10-12BUG/MINOR: http-ana: return a 502 when checkcache blocks a response
2026-10-12BUG/MINOR: sample: make quic_enabled() always succeed
2026-10-12BUG/MINOR: sample: zero-pad the fractional part emitted by http_date()
2026-10-12BUG/MINOR: sample: apply the ms_/us_ time offsets in the input unit
2026-10-12BUG/MINOR: http: do not consume the delimiter of a truncated q-factor
2026-10-12BUG/MEDIUM: pattern: don't dereference static_pattern's data when not filling it
2026-10-12BUG/MEDIUM: stick-table: restrict key sizes to what fits in a buffer
2026-10-12BUG/MINOR: flt-http-comp: Rely on htx_set_eom() to restore EOM flag
2026-10-12BUG/MEDIUM: flt-http-comp: Block HTX_FL_EOM flag till the end of compression
2026-10-12BUG/MEDIUM: tools: insert an XXH64 layer on the PRNG output
2026-10-12BUG/MEDIUM: cli: fix the last command detection on a full command line
2026-09-28BUG/MEDIUM: sink: reconnect attempt not working after session lasted more than ~25 days
2026-09-28BUG/MAJOR: mux_quic: fix potential crash on RESET_STREAM receive
2026-09-24BUG/MINOR: mux-h2: Reject trailers received on a tunneled stream
2026-09-24BUG/MEDIUM: log: encode the whole non-printable range in the +json output
2026-09-24BUG/MEDIUM: mux_quic: activate timeout on FE init
2026-09-24BUG/MAJOR: mux_quic: fix leak on RESET_STREAM reception
2026-09-24BUG/MINOR: http-ana: restore the transaction status after early hints
2026-09-24BUG/MINOR: tcpcheck: refresh the start-line after updating the authority
2026-09-24BUG/MINOR: mux-h1: only mark C-L and T-E as sent once the header is emitted
2026-09-24BUG/MINOR: http-fetch: fix the space check of http_auth_bearer()
2026-09-24BUG/MINOR: http-fetch: http_auth_bearer() must not match a missing header
2026-09-24BUG/MINOR: http-ana: count response body failures only once in http_fail_cnt
2026-09-24BUG/MEDIUM: tcp-rules: ignore "capture len" rules evaluated from a backend
2026-09-24BUG/MEDIUM: http-act: ignore "capture len" rules evaluated from a backend
2026-09-24BUG/MEDIUM: http-htx: don't build the new authority in a rotating trash chunk
2026-09-24BUG/MEDIUM: log: reserve the trailing 0 in CBOR int and bool encoders
2026-09-24BUG/MINOR: mux-h2: Don't expect more HTX data on 1xx interim responses
2026-09-24BUG/MINOR: http-client: Convert server timeout ticks when setting it
2026-09-21BUG/MINOR: hlua: release private Lua rule data on teardown
2026-09-21BUG/MAJOR: htx: Check the header/trailer length limits when one is updated
2026-09-21BUG/MINOR: tools: Don't try to anonymize a NULL string
2026-09-21BUG/MEDIUM: task: Do not destroy a task that is not ours in task_destroy
2026-09-17BUG/MEDIUM: mux_quic: do not free QCS if STOP_SENDING to sent
2026-09-17BUG/MEDIUM: limits: properly account for global.maxpipes in compute_ideal_maxconn()
2026-09-17BUG/MEDIUM: tcp-rules: Don't restart tcp-request content evaluation on yield
2026-09-17BUG/MEDIUM: htx: Reserve a block descriptor for zero-sized blocks
2026-09-17BUG/MEDIUM: ssl: don't set a 0 timeout on an expired TLS session
2026-09-17BUG/MINOR: sample: reject a \0 byte in url_dec, json_query and jwt_*_query
2026-09-17BUG/MINOR: ssl: Fix leak of ca_list in cafile_entry
2026-09-17BUG/MEDIUM: cli: Don't read a command or payload line into a full buffer
2026-09-17BUG/MEDIUM: http_act: fix normalize-uri normalizer selection with a condition
2026-09-17BUG/MEDIUM: map: do not overwrite the fetch context in pat_match_regm()
2026-09-17BUG/MINOR: ssl: don't pass the address of a size_t as an int* to OpenSSL
2026-09-17BUG/MEDIUM: http-ana: apply tunnel timeout with data filters
2026-09-17BUG/MINOR: h3: only increment frame type counter on new header
2026-09-17BUG/MINOR: h3: handle unknown frame type on request stream as specified
2026-09-17BUG/MINOR: h3: handle empty HEADERS frame as specified
2026-09-17BUG/MEDIUM: h3: do not block FIN on empty DATA frame
2026-09-17BUG/MINOR: stream/debug: harden the stream dump function regarding signals
2026-09-17BUG/MINOR: hlua: Always return nil if there is no data to dup for HTTP messages
2026-09-17BUG/MINOR: mux-h1: Return an error on trailers if last chunk is unfinished
2026-09-17BUG/MEDIUM: hlua: Never release a cosocket applet from the GC
2026-09-17BUG/MINOR: quic: leak of the NEW_TOKEN frame on token generation failure
2026-09-17BUG/MAJOR: h3: reject H3 truncated frames
2026-09-17BUG/MEDIUM: mux-h2: Make sure we remove H2_SF_NOTIFIED on subscribe
2026-09-17BUG/MINOR: quic: delete the wrong CIDs when post-handshake frames fail
2026-09-17BUG/MINOR: qpack: accept a Required Insert Count which cannot be reached
2026-09-17BUG/MINOR: qpack: encoder and decoder stream data is never consumed
2026-09-17BUG/MINOR: resolvers: classify empty truncated responses
2026-09-17BUG/MINOR: quic: late packets of the first key phase are dropped
2026-09-17BUG/MEDIUM: quic: crash on key update phase change after a failed one
2026-09-17BUG/MINOR: payload: bound ClientHello extension lists by the extension length
2026-09-17BUG/MINOR: payload: fix the cipher_len bound check in smp_client_hello_parse()
2026-09-17BUG/MEDIUM: mux-spop: Properly handle parsing of split HELLO/DISCONNECT frames
2026-09-17BUG/MINOR: cache: Seed cache primary hash
2026-09-17BUG/MINOR: cache: Manage collisions on primary key

Back to the list of branches and versions
Back to the HAProxy page