HAProxy known bugs for version v3.2.4 (maintenance branch 3.2) :  158 

This version (3.2.4) is a release belonging to maintenance branch 3.2 whose latest version is 3.2.9. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches.

Quick links

Other versions in the same branch

This branch contains the following releases :

DateVersionComment
2025-11-213.2.9 ⇐ last
2025-11-073.2.8 
2025-10-233.2.7 
2025-10-033.2.6 
2025-09-233.2.5 
2025-08-133.2.4 ⇐ yours
2025-07-093.2.3 
2025-07-023.2.2 
2025-06-113.2.1 
2025-05-283.2.0 

Known bugs affecting this version, and already fixed in the maintenance branch

These fixes have already been queued for a more recent 3.2 version. Some of them might have already been released in a more recent version than yours, and other ones might still be pending in the maintenance branch for a future release. The list may be empty if you're already on the latest version and no new fix was backported.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in this version by category :

TotalCRITICALMAJORMEDIUMMINOR
158 1 7 72 78

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2025-11-20BUG/MEDIUM: proxy: do not align proxy_per_tgroup beyond allocator's capabilities
2025-11-20BUG/MEDIUM: config: Use the mux protocol ALPN by default for listeners if forced
2025-11-20BUG/MEDIUM: queues: Don't forget to unlock the queue before exiting
2025-11-20BUG/MINOR: acme: alert when the map doesn't exist at startup
2025-11-20BUG/MINOR: ssl: remove dead code in ssl_sock_from_buf()
2025-11-20BUG/MINOR: mworker: wrong signals during startup
2025-11-20BUG/MEDIUM: mworker: signals inconsistencies during startup and reload
2025-11-20BUG/MINOR: quic-be: backend SSL session reuse fix (OpenSSL 3.5)
2025-11-20BUG/MEDIUM: h1: prevent a crash on HTTP/2 upgrade
2025-11-20BUG/MINOR: stick-tables: Fix return value for __stksess_kill()
2025-11-20BUG/MEDIUM: stick-tables: Always return the good stksess from stktable_set_entry
2025-11-20BUG/MINOR: check: fix reuse-pool if MUX inherited from server
2025-11-20BUG/MINOR: acme: can't override the default resolver
2025-11-20BUG/MEDIUM: acme: move from mt_list to a rwlock + ebmbtree
2025-11-20BUG/MINOR: acme: more explicit error when BIO_new_file()
2025-11-20BUG/MINOR: quic: close connection on CID alloc failure
2025-11-20BUG/MEDIUM: stick-tables: Make sure updates are seen as local
2025-11-20BUG/MINOR: config: Limit "tune.maxpollevents" parameter to 1000000
2025-11-20BUG/MEDIUM: connection/ssl: also fix the ssl_sock_io_cb() regarding idle list
2025-11-20BUG/MEDIUM: connection: do not reinsert a purgeable conn in idle list
2025-11-20Revert "BUG/MEDIUM: connections: permit to permanently remove an idle conn"
2025-11-07BUG/MINOR: acme: wrong dns-01 challenge in the log
2025-11-07BUG/MEDIUM: server: close a race around ready_srv when deleting a server
2025-11-05BUG/MEDIUM: connections: permit to permanently remove an idle conn
2025-11-05BUG/MEDIUM: mux-h2: make sure not to move a dead connection to idle
2025-11-05BUG/MEDIUM: mux-h1: fix 414 / 431 status code reporting
2025-11-05BUG/MINOR: resolvers: ensure fair round robin iteration
2025-11-05BUG/MINOR: ssl: returns when SSL_CTX_new failed during init
2025-11-05BUG/MINOR: resolvers: Apply dns-accept-family setting on additional records
2025-11-05BUG/MINOR: init: Do not close previously created fd in stdio_quiet
2025-11-05BUG/MEDIUM: ssl: Crash because of dangling ckch_store reference in a ckch instance
2025-10-27BUG/MEDIUM: cli: do not return ACKs one char at a time
2025-10-27BUG/MEDIUM: mt_list: Use atomic operations to prevent compiler optims
2025-10-27BUG/MINOR: stick-tables: properly index string-type keys
2025-10-27BUG/MEDIUM: applet: Improve again spinning loops detection with the new API
2025-10-27BUG/MEDIUM: mt_lists: Avoid el->prev = el->next = el
2025-10-23BUG/MINOR: acme: memory leak from the config parser
2025-10-23BUG/MEDIUM: build: limit excessive and counter-productive gcc-15 vectorization
2025-10-23BUG/MAJOR: quic: use ncbmbuf for CRYPTO handling
2025-10-23BUG/MEDIUM: h3: properly encode response after interim one in same buf
2025-10-20BUG/MAJOR: quic: uninitialized quic_conn_closed struct members
2025-10-20BUG/MINOR: quic: SSL counters not handled
2025-10-20BUG/MEDIUM: cli: also free the trash chunk on the error path
2025-10-20BUG/MEDIUM: mt_list: Make sure not to unlock the element twice
2025-10-20BUG/MEDIUM: threads/config: drop absent threads from thread groups
2025-10-20BUG/MINOR: quic: check applet_putchk() for 'show quic' first line
2025-10-20BUG/MEDIUM: stick-tables: Don't forget to dec count on failure.
2025-10-17BUG/MINOR: quic: too short PADDING frame for too short packets
2025-10-16BUG/MAJOR: lb-chash: fix key calculation when using default hash-key id
2025-10-16BUG/MINOR: pools: don't report "limited to the first X entries" by default
2025-10-16BUG/MEDIUM: pools: fix crash on filtered "show pools" output
2025-10-16BUG/MINOR: ssl: Potential NULL deref in trace macro
2025-10-16BUG/MINOR: ssl: Free key_base from global_ssl structure during deinit
2025-10-16BUG/MINOR: ssl: Free global_ssl structure contents during deinit
2025-10-14BUG/MINOR: sink: retry attempt for sft server may never occur
2025-10-10BUG/MEDIUM: apppet: Improve spinning loop detection with the new API
2025-10-10BUG/MINOR: ssl: leak crtlist_name in ssl-f-use
2025-10-10BUG/MINOR: ssl: leak in ssl-f-use
2025-10-10BUG/MINOR: ssl: always clear the remains of the first hello for the second one
2025-10-10BUG/MEDIUM: ssl: take care of second client hello
2025-10-07BUG/MINOr: hlua: Fix receive from HTTP applet by properly accounting data
2025-10-07BUG/MINOR: acme: avoid overflow when diff > notAfter
2025-10-03BUG/MEDIUM: resolvers: break an infinite loop in resolv_get_ip_from_response()
2025-10-02BUG/MINOR: h3: forbid 'Z' as well in header field names checks
2025-10-02BUG/MINOR: h2: forbid 'Z' as well in header field names checks
2025-10-02BUG/CRITICAL: mjson: fix possible DoS when parsing numbers
2025-10-02BUG/MEDIUM: fwlc: Handle memory allocation failures.
2025-10-01BUG/MEDIUM: stick-tables: Make sure not to free a pending entry
2025-10-01BUG/MEDIUM: ssl: ca-file directory mode must read every certificates of a file
2025-10-01BUG/MINOR: pattern: Fix pattern lookup for map with opt@ prefix
2025-10-01BUG/MINOR: acme: possible overflow in acme_will_expire()
2025-10-01BUG/MINOR: acme: possible overflow on scheduling computation
2025-10-01BUG/MINOR: pattern: Properly flag virtual maps as using samples
2025-10-01BUG/MINOR: compression: Test payload size only if content-length is specified
2025-10-01BUG/MEDIUM: wdt: improve stuck task detection accuracy
2025-09-29BUG/MEDIUM: acme: free() of i2d_X509_REQ() with AWS-LC
2025-09-29BUG/MEDIUM: acme: cfg_postsection_acme() don't init correctly acme sections
2025-09-29BUG/MINOR: acme: don't unlink from acme_ctx_destroy()
2025-09-23BUG/MINOR: pools: Fix the dump of pools info to deal with buffers limitations
2025-09-23BUG/MEDIUM: stick-tables: Don't let table_process_entry() handle refcnt
2025-09-23BUG/MINOR: acme/cli: wrong description for "acme challenge_ready"
2025-09-23BUG/MEDIUM: resolvers: Wake resolver task up whne unlinking a stream requester
2025-09-23BUG/MEDIUM: resolvers: Accept to create resolution without hostname
2025-09-23BUG/MEDIUM: resolvers: Make resolution owns its hostname_dn value
2025-09-23BUG/MEDIUM: resolvers: Test for empty tree when getting a record from DNS answer
2025-09-23BUG/MINOR: resolvers: Restore round-robin selection on records in DNS answers
2025-09-23BUG/MEDIUM: resolvers: Properly cache do-resolv resolution
2025-09-23DEBUG: peers: export functions that use locks
2025-09-23DEBUG: stream: count the number of passes in the connect loop
2025-09-23BUG/MINOR: tcpcheck: Don't use sni as pool-conn-name for non-SSL connections
2025-09-23BUG/MINOR: server: Update healthcheck when server settings are changed via CLI
2025-09-23BUG/MEDIUM: server: Use sni as pool connection name for SSL server only
2025-09-19BUG/MEDIUM: pattern: fix possible infinite loops on deletion (try 2)
2025-09-19DEBUG: stick-tables: export stktable_add_pend_updates() for better reporting
2025-09-19BUG/MEDIUM: ring: invert the length check to avoid an int overflow
2025-09-19BUG/MINOR: resolvers: always normalize FQDN from response
2025-09-19BUG/MINOR: ocsp: Crash when updating CA during ocsp updates
2025-09-19BUG/MEDIUM: http_ana: fix potential NULL deref in http_process_req_common()
2025-09-19BUG/MINOR: ocsp: prototype inconsistency
2025-09-19BUG/MINOR: ssl: Fix potential NULL deref in trace callback
2025-09-19BUG/MINOR: ssl: Potential NULL deref in trace macro
2025-09-19BUG/MEDIUM: jws: return size_t in JWS functions
2025-09-19BUG/MINOR: acme: null pointer dereference upon allocation failure
2025-09-19BUG/MAJOR: stream: Force channel analysis on successful synchronous send
2025-09-19BUG/MAJOR: stream: Remove READ/WRITE events on channels after analysers eval
2025-09-19BUG/MINOR: stick-table: make sure never to miss a process_table_expire update
2025-09-19BUG/MEDIUM: stick-tables: don't loop on non-expirable entries
2025-09-19BUG/MINOR: activity: fix reporting of task latency
2025-09-19BUG/MEDIUM: ssl: create the mux immediately on early data
2025-09-19BUG/MEDIUM: h1: Allow reception if we have early data
2025-09-19BUG/MEDIUM: checks: fix ALPN inheritance from server
2025-09-19BUG/MEDIUM: mux-h2: Reinforce conditions to report an error to app-layer stream
2025-09-19BUG/MEDIUM: mux-h2: Report RST/error to app-layer stream during 0-copy fwding
2025-09-19BUG/MINOR: mux-h2: Remove H2_CF_DEM_DFULL flags when the demux buffer is reset
2025-09-19BUG/MEDIUM: mux-h2: Restart reading when mbuf ring is no longer full
2025-09-19BUG/MEDIUM: mux-h2; Don't block reveives in H2_CS_ERROR and H2_CS_ERROR2 states
2025-09-19BUG/MEDIUM: mux-h2: Reset MUX blocking flags when a send error is caught
2025-09-19BUG/MINOR: cpu_topo: work around a small bug in musl's CPU_ISSET()
2025-09-19BUG/MINOR: log: fix potential memory leak upon error in add_to_logformat_list()
2025-09-19BUG/MINOR: connection: streamline conn detach from lists
2025-09-19BUG/MEDIUM: conn: fix UAF on connection after reversal on edge
2025-09-19BUG/MINOR: check: fix dst address when reusing a connection
2025-09-19BUG/MINOR: check: ensure check-reuse is compatible with SSL
2025-09-19BUG/MEDIUM: peers: don't fail twice to grab the update lock
2025-09-19BUG/MINOR: stick-tables: never leave used entries without expiration
2025-09-19BUG/MEDIUM: stick-tables: don't leave the expire loop with elements deleted
2025-09-19BUG/MINOR: haproxy: be sure not to quit too early on soft stop
2025-09-19BUG/MINOR: quic: fix padding issue on INITIAL retransmit
2025-09-19BUG/MINOR: quic: fix room check if padding requested
2025-09-19BUG/MINOR: quic: ignore AGAIN ncbuf err when parsing CRYPTO frames
2025-09-19BUG/MINOR: tools: Add OOM check for malloc() in indent_msg()
2025-09-19BUG/MINOR: compression: Add OOM check for calloc() in parse_compression_options()
2025-09-19BUG/MINOR: cfgparse: Add OOM check for calloc() in cfg_parse_listen()
2025-09-19BUG/MINOR: acl: Add OOM check for calloc() in smp_fetch_acl_parse()
2025-09-19BUG/MINOR: log: Add OOM checks for calloc() and malloc() in logformat parser and dup_logger()
2025-09-19BUG/MINOR: halog: Add OOM checks for calloc() in filter_count_srv_status() and filter_count_url()
2025-09-19BUG/MEDIUM: server: Duplicate healthcheck's alpn inherited from default server
2025-09-19BUG/MAJOR: mux-quic: fix crash on reload during emission
2025-09-19BUG/MEDIUM: quic: CRYPTO frame freeing without eb_delete()
2025-09-19BUG/MINOR: server: decrement session idle_conns on del server
2025-09-19BUG/MINOR: connection: remove extra session_unown_conn() on reverse
2025-09-19BUG/MINOR: connection: rearrange union list members
2025-09-19BUG/MEDIUM: mworker: fix startup and reload on macOS
2025-09-19BUG/MINOR: acl: set arg_list->kw to aclkw->kw string literal if aclkw is found
2025-09-19BUG/MINOR: mux-quic: trace with non initialized qcc
2025-09-19BUG/MINOR: quic: reorder fragmented RX CRYPTO frames by their offsets
2025-08-26BUG/MEDIUM: spoe: Improve error detection in SPOE applet on client abort
2025-08-26BUG/MEDIUM: http_ana: handle yield for "stats http-request" evaluation
2025-08-26BUG/MEDIUM: mux-spop: Reject connection attempts from a non-spop frontend
2025-08-26BUG/MINOR: quic: don't coalesce probing and ACK packet of same type
2025-08-26BUG/MAJOR: quic: fix INITIAL padding with probing packet only
2025-08-26BUG/MINOR: quic: do not emit probe data if CONNECTION_CLOSE requested
2025-08-26BUG/MEDIUM: quic: reset padding when building GSO datagrams
2025-08-26BUG/MEDIUM: ssl: apply ssl-f-use on every "ssl" bind
2025-08-26BUG/MEDIUM: mux-h2: fix crash on idle-ping due to unwanted ABORT_NOW
2025-08-26BUG/MEDIUM: mworker: more verbose error upon loading failure
2025-08-26BUG/MEDIUM: cli: Report inbuf is no longer full when a line is consumed
2025-08-26BUG/MINOR: spoe: Properly detect and skip empty NOTIFY frames
2025-08-26BUG/MINOR: mux-h1: fix wrong lock label
2025-08-26BUG/MEDIUM: quic: listener connection stuck during handshakes (OpenSSL 3.5)
2025-08-26BUG/MEDIUM: Remove sync sends from streams to applets
2025-08-26BUG/MEDIUM: stconn: Fix conditions to know an applet can get data from stream

Back to the list of branches and versions
Back to the HAProxy page