HAProxy known bugs for maintenance branch 2.7 :  0 

This is maintenance branch 2.7 whose latest version is 2.7.12. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches. In short, if you are running any 2.7 version other than 2.7.12, you're running with known bugs.

Quick links

Versions available in this branch

This branch contains the following releases :

DateVersionComment
2024-04-052.7.12 ⇐ last
2023-12-072.7.11 
2023-08-092.7.10 
2023-06-072.7.9 
2023-05-022.7.8 
2023-04-272.7.7 
2023-03-282.7.6 
2023-03-172.7.5 
2023-03-102.7.4 
2023-02-142.7.3 
2023-01-202.7.2 
2022-12-192.7.1 
2022-12-012.7.0 

Fixes for known bugs pending in this branch since the last release (2.7.12)

These fixes have already been queued for the next 2.7 release but no version was released with them yet. Note that fixes are backported several at a time from the development branch to maintenance branches, and the absence of a fix here doesn't mean none will be issued soon.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in the latest version of this branch by category :

TotalCRITICALMAJORMEDIUMMINOR
0 0 0 0 0

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)

Known bugs fixed in the development branch after the last commit in this branch

It is important to understand that not all of these commits are necessarily relevant to this version, but clicking on them will show the bug description. All fixes are made first in the development branch and then backported to the maintenance branches. This ensures no fix is lost when upgrading. If a fix was marked for backporting to this branch and is not there yet, it's likely that it is still missing. Do not hesitate to ask on the haproxy mailing list if you feel like a fix has been skipped.

DateSubject
2026-08-12BUG/MINOR: server: fix off-by-one error when parsing and copying source port range
2026-08-12BUG/MINOR: hq_interop: fix potential NULL dereference in _hq_trace_http()
2026-08-12BUG/MINOR: h3: fix potential NULL pointer dereference in _h3_trace_header()
2026-08-12BUG/MINOR: server: fix memory leak on "default-server" parsing failures
2026-08-12BUG/MINOR: quic: avoid a division by zero in the BBR pacing interval
2026-08-12BUG/MINOR: ssl: reject an embedded NUL in the full-DN ssl_*_dn() fetches
2026-08-12BUG/MINOR: ssl: reject an embedded NUL in the ssl_*_dn(entry) fetches
2026-08-12BUG/MINOR: wurfl: fix memory leak of information list and patch strings at deinit
2026-08-12BUG/MEDIUM: cache: do not release an entry under the cache read lock
2026-08-12BUG/MINOR: cache: do not retain imcomplete or stripped secondary entry
2026-08-12BUG/MEDIUM: cache: retain the primary or secondary entry only when detaching its row
2026-08-10BUG/MEDIUM: hlua_fcn: ensure systematic bref cleanup for patref list iterator
2026-08-10BUG/MEDIUM: lua: resume Channel:send() from the unsent part of the string
2026-08-07BUG/MINOR: quic: drop multiple Retry on same connection
2026-08-07BUG/MEDIUM: quic: prevent out-of-bound read on wrapping CRYPTO content
2026-08-07BUG/MINOR: mux-h2: strip the userinfo when deriving :authority for a server
2026-08-07BUG/MINOR: debug: only dump the trace once in __BUG_ON_ONCE()
2026-08-07BUG/MINOR: lb-chash: bound the walk when the saved cursor changed tree
2026-08-07BUG/MEDIUM: session: don't release a reversed connection twice on error
2026-08-07BUG/MINOR: connection: reserve the whole CRC32C TLV before saving its pointer
2026-08-07BUG/MEDIUM: fd: release the port range entry in host byte order
2026-08-07BUG/MINOR: acme: restrict the permissions of the generated account key
2026-08-07BUG/MINOR: ssl: reject server certificate names containing a NUL byte
2026-08-07BUG/MEDIUM: acme: don't delete a NULL token from the map
2026-08-07BUG/MEDIUM: ssl: require a full-length AEAD tag when decrypting with AES-GCM
2026-08-07BUG/MINOR: jwt: don't take an extra reference on the certificate public key
2026-08-07BUG/MEDIUM: jwe: validate the secret length against the algorithm of the token
2026-08-07BUG/MEDIUM: log: always reserve room for trailing 0 when using CBOR encoding helpers
2026-08-07BUG/MINOR: mux-fcgi: sanitize the STDERR records before logging them
2026-08-07BUG/MEDIUM: http-ana: check the cookie rewrite result before moving the offsets
2026-08-07BUG/MEDIUM: sock: bound the recvmsg() length when receiving old sockets
2026-08-07BUG/MEDIUM: stick-tables: use the same bucket for string keys with a NUL
2026-08-07BUG/MEDIUM: http-ana: don't crash on "keep-query" in a response redirect
2026-08-07BUG/MINOR: mux-fcgi: don't call fcgi_strm_destroy() on a NULL stream
2026-08-07BUG/MEDIUM: spoe: clear the applet pointer when the applet fails to start
2026-08-07BUG/MEDIUM: mux-fcgi: check the room left before appending the index
2026-08-06BUG/MINOR: hlua: use a local buffer to format the socket addresses
2026-08-06BUG/MINOR: stats-file: reject tgid 0 when preloading shm objects
2026-08-06BUG/MEDIUM: hpack: encode long methods and schemes using the long form
2026-08-06BUG/MINOR: proxy: release watcher in "show default-server" on CLI abort
2026-08-06BUG/MINOR: proxy: release watcher in various commands on CLI abort
2026-08-05BUG/MINOR: proxy: fix "show backend"
2026-08-03BUG/MINOR: proxy: fix default-server leak on post-parsing cleanup
2026-08-03BUG/MINOR: ech: fix label at end of compound statement
2026-08-03BUG/MINOR: server: check strdup return on server-template ID generation
2026-08-03BUG/MINOR: server: check strdup return value on server ID
2026-07-31BUG/MINOR: haload: fix stale global variables affecting URL allocations
2026-07-30BUG/MEDIUM: filter: Disable auto-close on channel during TCP payload filtering
2026-07-30BUG/MEDIUM: counters: preserve shared.tg pointer on 'clear counters all'
2026-07-30BUG/MINOR: ech: reject an ECH store with no usable private key
2026-07-30BUG/MINOR: ech: propagate error from load_echkeys()
2026-07-30BUG/MINOR: haload: fix rate limit bypass during stream errors
2026-07-29BUG/MINOR: cli: do not reject the "/" form of "show fd"
2026-07-29BUG/MINOR: cli: use the current argument to parse the FD spec in "show fd"
2026-07-29BUG/MINOR: server: fix check reuse-pool in srv_settings_cpy()
2026-07-29BUG/MINOR: server: duplicate server alt_proto in srv_settings_cpy()
2026-07-29BUG/MINOR: server: fix QUIC on server-template
2026-07-28BUG/MAJOR: ssl/ocsp: lock the OCSP response around reads in the stapling callback
2026-07-28BUG/MEDIUM: sample: reject the deprecated protobuf group wire types
2026-07-28BUG/MEDIUM: peers: check the available room before encoding dict values
2026-07-28BUG/MINOR: slz: avoid undefined shifts when building the word byte by byte
2026-07-28BUG/MINOR: slz: fix the adler32 accumulators signedness on 32-bit
2026-07-28BUG/MINOR: slz: do not append a block to an already finished stream
2026-07-28BUG/MEDIUM: slz: bound the bits wasted by the 9-bit literals
2026-07-28BUG/MINOR: slz: use the exact switch cost for the last literals of a block
2026-07-28BUG/MINOR: slz: do not read past the end of the input around the match loop
2026-07-28BUG/MINOR: http-rules: fix release of a failed "set-cookie-fmt" redirect rule
2026-07-28BUG/MINOR: htx: Transfer HTX_FL_EOM flag on success in htx_append_msg()
2026-07-28BUG/MINOR: htx: Perform raw copy for messages of same size in htx_copy_msg()
2026-07-28BUG/MEDIUM: tools: make string encoding possible to fail instead of truncating
2026-07-27BUG/MINOR: http-htx: check the strdup() of the "lf-string" http reply argument
2026-07-27BUG/MINOR: http-act: reject a negative capture id in the capture actions
2026-07-27BUG/MINOR: http-act: work on a copy of the sample in del-headers-bin
2026-07-27BUG/MINOR: http-act: restore the response buffer state in the early-hint action
2026-07-27BUG/MINOR: http-act: fix a double free of the map reference on a parsing error
2026-07-27BUG/MINOR: http-act: fix a double free of the regex on a rule parsing error
2026-07-27BUG/MINOR: http-ana: fix a one-byte over-read in the client-side cookie parser
2026-07-27BUG/MINOR: h3: don't use a block pointer to roll back a partial HTX conversion
2026-07-27BUG/MINOR: h2: don't use a block pointer to roll back a partial HTX conversion
2026-07-27BUG/MINOR: h1: report the right error position on authority/host mismatch
2026-07-27BUG/MINOR: http-htx: check the trash allocation in http_scheme_based_normalize()
2026-07-27BUG/MINOR: http: fix an out-of-bounds read in http_get_host_port() on empty host
2026-07-27BUG/MINOR: http-fetch: fix a NULL channel dereference in smp_fetch_body()
2026-07-27BUG/MEDIUM: http-fetch: reject a negative capture id in capture.{req,res}.hdr
2026-07-27BUG/MEDIUM: http-fetch: don't parse a non-HTTP check buffer as an HTX message
2026-07-27BUG/MINOR: http-htx: fix the length moved when removing a header value
2026-07-24BUG/MINOR: haload: fix CPU topology detection by omitting forced "nbthread"
2026-07-24BUG/MEDIUM: mux-h1: Always adjust case for all outgoing headers as expected
2026-07-24DEBUG: fd: catch access attempts to closed FDs
2026-07-24BUG/MEDIUM: ssl: Put CO_ER_SSL_KEYUPDATE at the right place
2026-07-24BUG/MEDIUM: ssl: Handle non-application data record while splicing
2026-07-23BUG/MEDIUM: ssl: Spell HAVE_VANILLA_OPENSSL correctly
2026-07-23BUG/MINOR: haload: fix display glitches by flushing stdout in summary
2026-07-23BUG/MINOR: haload: set default thread count to 1
2026-07-23BUG/MINOR: haload: fix use-after-free upon updating task expiration
2026-07-23BUG/MEDIUM: proxy: protect "show errors" against backend deletion
2026-07-22BUG/MINOR: resolvers: do not index resolvers names in the proxies
2026-07-22BUG/MEDIUM: server: Properly check for streams before deletion
2026-07-21BUG/MEDIUM: proxy: protect show backend against be deletion
2026-07-21BUG/MEDIUM: proxy: protect "show servers ..." against backend deletion
2026-07-21BUG/MEDIUM: proxy: protect "show servers ..." against server deletion
2026-07-21BUG/MINOR: sample: Fix bytes() when length it greater than remaining data
2026-07-21BUG/MEDIUM: sample: Adjust sample size capacity after pointer shift for ltrim()
2026-07-21BUG/MEDIUM: sample: Adjust sample size capacity after pointer shift for bytes()
2026-07-21BUG/MEDIUM: net-helper: Adjust sample size capacity after pointer shift
2026-07-21BUG/MINOR: mux-h1: Don't delay send if message with c-l was fully sent
2026-07-16CLEANUP: event_hdl: Use BUG_ON_STATIC()
2026-07-16DEBUG: add BUG_ON_STATIC(): a compile-time BUG_ON()
2026-07-16BUG/MINOR: ssl: fix proxy lookup for show ssl sni
2026-07-16BUG/MEDIUM: protobuf: fix nested path bypass in field lookup
2026-07-16BUG/MEDIUM: protobuf: adjust sample size capacity after pointer shift
2026-07-15BUG/MEDIUM: ssl-gencert: Don't forget to free memory when done
2026-07-15BUG/MEDIUM: stats: Ensure that Origin is valid on POSTs
2026-07-10BUG/MEDIUM: cache: reattach the row when a secondary entry is incomplete
2026-07-10BUG/MINOR: shctx: fix shctx_row_data_get() when offset exceeds a block
2026-07-10BUG/MEDIUM: stats: subject "stats admin" accesses to "stats scope" filtering
2026-07-10BUG/MEDIUM: applet: Reenable reads in applet context if requesting a connection
2026-07-10BUG/MINOR: hlua: Apply socket timeout on server side only
2026-07-08BUG/MINOR: http-conv: Make url-dec failed if no space for trailing null byte
2026-07-08BUG/MINOR: stream: Fix custom max-retries initialization when setting backend
2026-07-08BUG/MINOR: stream: Fix custom timeouts initialization when setting backend
2026-07-08BUG/MEDIUM: chunk: Review chunks usage to not retrieve a large buffer by error
2026-07-08BUG/MINOR: sample: Fix a possible underflow on be2hex for large chunk size
2026-07-08BUG/MEDIUM: tcpcheck: Add proxy used for healthcheck sections in proxies list
2026-07-08BUG/MINOR: hbuf: treat unexpected escape sequences as literals
2026-07-08BUG/MINOR: haload: fix spurious task wakeup in hld_strm_task()
2026-07-06BUG/MEDIUM: fd: Fix a deadlock when closing other tgroups fds
2026-07-06BUG/MINOR: quic: ignore STREAM after MUX closure on BE side
2026-07-06BUG/MEDIUM: mux_quic: complete stream shutdown for read channel
2026-07-06BUG/MEDIUM: mux_quic: do not free QCS if STOP_SENDING to sent
2026-07-03BUG/MINOR: trace/quic_frame: use buf, not trace_buf in chunk_frm_appendf()
2026-07-03BUG/MINOR: mux_quic: prevent multiple STOP_SENDING emission per stream
2026-07-03BUG/MEDIUM: h3: fix parser desync on error with multiple frames
2026-07-02BUG/MINOR: http-htx: Don't by-pass HTX API when merging cookie values
2026-07-02BUG/MINOR: mux-quic: Fix handling EOM after in qcs_http_rcv_buf()
2026-07-02BUG/MAJOR: htx: Don't swap buffers for empty HTX message with an error
2026-07-02BUG/MINOR: tools: fix invalid character detection in strl2ic()
2026-07-02BUG/MINOR: init: fix default global settings being overwritten by -G
2026-07-01BUG/MEDIUM: servers: Use a refcount for port_range and free it properly
2026-07-01BUG/MINOR: sample: set SMP_F_CONST on srv_name fetch
2026-06-30BUG/MEDIUM: server: initialise agent.health in srv_settings_init()
2026-06-29BUG/MINOR: h3: adjust HTTP headers traces
2026-06-29BUG/MINOR: hq-interop: support transcoding of absolute URI
2026-06-29BUG/MINOR: hq-interop: fix transcoding of wrapping response buffer
2026-06-26BUG/MEDIUM: mux_quic: fix memory leak of rx app_buf on stream free
2026-06-26BUG/MEDIUM: h3: fix trace crash on frontend response headers
2026-06-24BUG/MEDIUM: mux-quic: Drain the given amount of data in qcs_http_reset_buf()
2026-06-24BUG/MEDIUM: mux-spop: Truly drain outgoing data when the stream is closed
2026-06-24BUG/MEDIUM: mux-h2: Truly drain outgoing HTX data when the stream is closed
2026-06-24BUG/MEDIUM: mux-fcgi: Truly drain outgoing HTX data when the stream is closed
2026-06-24BUG/MINOR: poller: fix wait time calculation that is always 1 extra ms
2026-06-24DEBUG: cli: relax tid check in "debug dev task" for recent sched changes
2026-06-24BUG/MEDIUM: h3: increment unknown request payload length
2026-06-22BUG/MINOR: hq-interop: support response buffer wrapping
2026-06-22BUG/MINOR: hq-interop: support full demux buf on large response
2026-06-22BUG/MEDIUM: hlua: Properly report EOS when http applet exits
2026-06-19BUG/MINOR: hq-interop: prevent reset if missing content-length
2026-06-18BUG/MINOR: hq-interop: reject too big content
2026-06-16BUG/MEDIUM: mux-fcgi: fix uint16_t overflow in drl += drp
2026-06-16BUG/MEDIUM: http-act: Make a copy of the sample expr in (set/add)-headers-bin
2026-06-16BUG/MEDIUM: mux_quic: fix freeze transfer after QCS rxbuf realign
2026-06-16BUG/MINOR: hpack-tbl: add missing NULL check after hpack_dht_defrag()
2026-06-15BUG/MEDIUM: ssl: Don't free the early data buffer too early
2026-06-15BUG/MINOR: quic: fix rxbuf settings on backend side
2026-06-15BUG/MINOR: mux-h1: Properly resolve file path for 'h1-case-adjust-file'
2026-06-15BUG/MEDIUM: http-ana: Don't ignore L7 retry errors
2026-06-15BUG/MINOR: http-ana: Remove a debugging memset on redirect
2026-06-15DEBUG: stconn: Add a BUG_ON on shut flags when the endpoint is shut
2026-06-12BUG/MINOR: server: fix add server with consistent hash balancing
2026-06-12BUG/MEDIUM: h3: Properly handle PUSH_PROMISE on backend connections
2026-06-11BUG/MINOR: cpu-topo: use ha_diag_notice() to report thread creations
2026-06-11BUG/MEDIUM: ktls: defer enabling TLS ULP on a socket until connected
2026-06-10BUG/MEDIUM: acme: stuck ACME task when authz is already "valid"
2026-06-09BUG/MINOR: quic: fix Initial length value in sent packets
2026-06-08BUG/MEDIUM: checks: Dequeue checks on purge
2026-06-08BUG/MINOR: acl: report "ACL" not "map" in ACL ID lookup failures
2026-06-08BUG/MEDIUM: xprt_qmux: implement ->get_ssl_sock_ctx() to get the SSL laye
2026-06-08BUG/MEDIUM: threads: Fiw build when using no thread
2026-06-07BUG/MEDIUM: regex: initialize the match array earlier during boot
2026-06-05BUG/MINOR: tcpcheck: Override external check if healthcheck section is set
2026-06-05BUG/MINOR: mux_quic: do not interrupt recv on error/incomplete data
2026-06-05BUG/MEDIUM: mux_quic: prevent risk of infinite loop on recv
2026-06-04BUG/MEDIUM: server/checks: Support healtcheck keyword on default-server lines
2026-06-04BUG/MEDIUM: check: Ignore small-buffer option when starting an external check
2026-06-04BUG/MEDIUM: check: Skip tcpcheck post-config for external checks
2026-06-03BUG/MEDIUM: chunk: do not rely on small trash by default for expressions
2026-06-03BUG/MINOR: jwe: don't write randoms past MAX_DECRYPTED_CEK_LEN in RSA_PKCS1_PADDING
2026-06-03BUG/MEDIUM: stream: Don't use small buffer on queuing with a request data filter
2026-06-03BUG/MEDIUM: vars: Properly eval set-var-fmt action for emtpy log-format string
2026-06-03BUG/MEDIUM: channel: Fix condition to know if a channel may send
2026-06-02BUG/MINOR: haterm: also apply the tcp-bind-opts to clear TCP "bind" lines
2026-06-02BUG/MINOR: haterm: do not try to bind QUIC when not supported
2026-06-02BUG/MINOR: startup: unbreak chroot with CAP_SYS_CHROOT
2026-06-02BUG/MINOR: http-act: Properly handle final evaluation in pause action
2026-06-01BUG/MINOR: tasks: Increase the right niced_task counter
2026-06-01BUG/MEDIUM: leastconn: Unlock the write lock on allocation failure
2026-06-01BUG/MINOR: mux-spop: Fix possible off-by-one OOB read in spop_get_varint()
2026-06-01BUG/MINOR: applet: Commit changes into input buffer after sending HTX data
2026-06-01BUG/MEDIUM: ssl: Make sure the alpn length is small enough
2026-06-01BUG/MEDIUM: htx: Fix headers rollback on partial copy in htx_xfer()
2026-06-01BUG/MEDIUM: mux-h1: Dup connection/upgrade value to parse it when making headers
2026-06-01BUG/MINOR: cache: Fix copy of value when parsing maxage
2026-06-01BUG/MEDIUM: h3: fix MAX_PUSH_ID handling
2026-06-01BUG/MEDIUM: qmux: Close connection on invalid frame
2026-05-29BUG/MEDIUM: resolvers: Wait a bit before calling the xprt prepare_srv
2026-05-29BUG/MINOR: cache: fix cache tree iteration
2026-05-29BUG/MINOR: quic: Fix another buffer overflow with sockaddr_in46
2026-05-28BUG/MEDIUM: threads: ignore max-threads-per-group when thread-groups is set
2026-05-28BUG/MINOR: threads: set at least grp_max when mtpg is too small
2026-05-28BUG/MEDIUM: lua: register hlua_init() as a pre-check to fix crash without Lua config
2026-05-28BUG/MINOR: quic: update drs->lost before calling on_ack_recv
2026-05-28BUG/MEDIUM: quic: reset consecutive_losses on exit from recovery period (cubic)
2026-05-28BUG/MEDIUM: quic: reset cwnd in slow_start on persistent congestion (cubic)
2026-05-28BUG/MINOR: quic: fix ack range node pool_free call passing wrong pointer type
2026-05-28BUG/MINOR: mux_quic: prevent BE reuse with an errored conn
2026-05-28BUG/MINOR: mux_quic: fix BE conn removal on app shutdown
2026-05-28BUG/MINOR: mux_quic: open an idle QCS on reset on BE side
2026-05-28BUG/MINOR: mux-h2: Count padding for connection flow control on error path
2026-05-28BUG/MEDIUM: lua: defer Lua VM initialisation to the first Lua config keyword
2026-05-28BUG/MINOR: quic: Fix memory leak in quic_deallocate_dghdlrs()
2026-05-28BUG/MEDIUM: quic: handle ECONNREFUSED on RX side
2026-05-27BUG/MINOR: qpack: fix huff_dec() error handling in qpack_decode_fs()
2026-05-27BUG/MINOR: qpack: fix sign bit mask in qpack_decode_fs_pfx()
2026-05-27BUG/MINOR: qpack: fix potential null-pointer dereference in qpack_dht_insert()
2026-05-27BUG/MINOR: qpack: Fix index calculation in debug functions
2026-05-27Revert "BUG/MEDIUM: dns: fix long loops in additional records parse on name failure"
2026-05-27BUG/MINOR: qmux: reject too large initial record
2026-05-27BUG/MEDIUM: qmux: do not crash on receiving an invalid first frame
2026-05-27BUG/MEDIUM: qmux: do not crash on too large record
2026-05-27BUG/MEDIUM: cpu-topo: Enforce thread-hard-limit on policy
2026-05-27BUG/MINOR: mux-h1: H2 preface rejection doesn't update stick-table glitches
2026-05-27BUG/MINOR: ssl-gencert: validate SNI characters to prevent SAN certificate injection
2026-05-27BUG/MINOR: tcpcheck: Check LDAP response to not read more data than available
2026-05-26BUG/MINOR: mux-spop: Use relative offset to compute contig data in demux buf
2026-05-26BUG/MINOR: mux-fcgi: Use relative offset to compute contig data in demux buf
2026-05-26BUG/MEDIUM: h1-htx: Sanitize parsing to properly handle upgrade requests
2026-05-26BUG/MEDIUM: mux-fcgi: reject stream ID 0 for application records
2026-05-26BUG/MEDIUM: jwe: substitute random CEK on RSA1_5 decryption failure per RFC 7516 #11.5
2026-05-26BUG/MINOR: jwe: enforce GCM tag length to 128 bits
2026-05-26BUG/MINOR: quic: reject packet too short for HP decryption
2026-05-26BUG/MINOR: qmux: do not crash on frame parsing issue
2026-05-26BUG/MINOR: hlua: prevent Lua from passing CR/LF/NUL in HTTP headers
2026-05-26BUG/MINOR: h3: add missing break on rcv_buf()
2026-05-26BUG/MEDIUM: auth: fix unconfigured password NULL deref
2026-05-26BUG/MINOR: h3: reject server MAX_PUSH_ID frame
2026-05-26BUG/MINOR: h3: adjust error on PUSH_PROMISE frame reception
2026-05-26BUG/MINOR: h3: reject client CANCEL_PUSH frame
2026-05-26BUG/MINOR: h3: reject server push stream
2026-05-26BUG/MEDIUM: h3: reject client push stream
2026-05-26BUG/MEDIUM: tools: insert an XXH64 layer on the PRNG output
2026-05-26BUG/MINOR: addons/51d: NUL-terminate headers before passing them to Trie API
2026-05-26BUG/MINOR: resolvers: switch to a better PRNG for query IDs
2026-05-26BUG/MINOR: ssl-hello: make use of the null-terminated servername
2026-05-26BUG/MINOR: payload: fix the handshake length bounds check smp_client_hello_parse()
2026-05-26BUG/MINOR: base64: return empty string for empty input in base64dec()
2026-05-26BUG/MINOR: http-ext: always check remaining data when reading rfc7239 nodeport
2026-05-26BUG/MEDIUM: acme: protect against risk of null-deref on connection failure
2026-05-26BUG/MINOR: http-fetch: check against the whole token in get_http_auth()
2026-05-26BUG/MINOR: sample: request an extra output byte for the url_dec converter
2026-05-26BUG/MINOR: resolvers: relax size checks in authority record parsing
2026-05-26BUG/MINOR: cache: also recognize directives in the form "token="
2026-05-26BUG/MEDIUM: cache: always verify the primary hash in get_secondary_entry()
2026-05-26BUG/MEDIUM: h1: limit status codes to 3 digits by default
2026-05-26BUG/MEDIUM: h1: drop headers whose names contain invalid chars
2026-05-25BUG/MINOR: haterm: fix the random suffix multiplication
2026-05-25BUG/MINOR: sample: limit the be2hex converter's chunk size
2026-05-25BUG/MINOR: init: use more than ha_random64() for the cluster secret
2026-05-25BUG/MINOR: dict: fix refcount race on insert collision
2026-05-25BUG/MINOR: log: look for the end of priority before the end of the buffer
2026-05-25BUG/MINOR: mux-h2: validate HEADERS frame length before reading stream dep
2026-05-25BUG/MINOR: resolvers: fix risk of appending garbage past the domain name
2026-05-25BUG/MINOR: resolvers: fix room for trailing zero in resolv_dn_label_to_str()
2026-05-25BUG/MINOR: log: free logformat expr on compile failure in cfg_parse_log_profile
2026-05-25BUG/MEDIUM: cache: fix a refcount leak for missed secondary entries
2026-05-25BUG/MEDIUM: tcpcheck/spoe: bound the SPOP error code to valid values
2026-05-25BUG/MEDIUM: regex: allocate a large enough pcre2 match for all matches
2026-05-25BUG/MEDIUM: log-forward: make sure the month is unsigned
2026-05-23BUG/MEDIUM: acme: NUL terminate response buffer before PEM parsing
2026-05-22BUG/MEDIUM: cli: Fix parsing of pattern finishing a command payload
2026-05-22BUG/MEDIUM: hlua: Fix integer underflow when receiving line from lua cosocket
2026-05-22BUG/MINOR: tcpchecks: Limit parsing of agent-check reply to the buffer
2026-05-22BUG/MEDIUM: dict: hold lock while decrementing refcount in dict_entry_unref
2026-05-22BUG/MINOR: quic: fix ODCID lookup from derived value
2026-05-22BUG/MEDIUM: ssl-gencert: Unlock LRU cache if failing to generate certificate
2026-05-22BUG/MEDIUM: resolvers: Fix test on dn label size in resolv_dn_label_to_str()
2026-05-22BUG/MEDIUM: applet: Properly handle receives of size 0
2026-05-21BUG/MINOR: ocsp: Manage date too far away in the future
2026-05-21BUG/MEDIUM: net_helper: fix a remaining possibly infinite loop in converters
2026-05-20BUG/MEDIUM: htx: Alloc a chunk of right size in htx_replace_blk_value()
2026-05-20BUG/MEDIUM: applet: Fix transfer of HTX data to the applet
2026-05-20BUG/MINOR: htx: Fix value of HTX_XFER_HDRS_ONLY flag
2026-05-20BUG/MINOR: mux_quic: do not exceed stream.max-concurrent on backend side
2026-05-20BUG/MEDIUM: servers: Don't forget to set srv_hash when needed
2026-05-20BUG/MINOR: prevent conn leak in case of xprt_qmux init failure
2026-05-20BUG/MEDIUM: servers: Store the connection hash with the parameter cache
2026-05-19BUG/MINOR: backend: fix balance hash calculation when using hash-type none
2026-05-19BUG/MINOR: server: accept server IDs above 2^31 and clarify error message
2026-05-19BUG/MINOR: httpclient-cli: fix uninit variable in error label
2026-05-19BUG/MINOR: h1: Don't mask websocket protocol if multiple protocols used
2026-05-19BUG/MEDIUM: h1: Skip all h2c values from Upgrade headers during parsing
2026-05-19BUG/MINOR: httpclient-cli: Destroy http-client context if failing to start it
2026-05-19BUG/MINOR: server: Properly handle init-state value during haproxy startup
2026-05-19BUG/MINOR: jws: Add missing return value check (EVP_PKEY_get_bn_param)
2026-05-19BUG/MINOR: jws: fix OpenSSL 3.0 version check from > to >=
2026-05-19BUG/MEDIUM: limits: properly account for global.maxpipes in compute_ideal_maxconn()
2026-05-18BUG/MINOR: jwt: fix possible memory leak in convert_ecdsa_sig() error path
2026-05-18BUG/MINOR: check: properly report errno in chk_report_conn_err()
2026-05-18BUG/MINOR: sock: store the connection error status
2026-05-16BUG/MINOR: session/trace: use distinct flags for SESS_EV_END and _ERR
2026-05-15BUG/MINOR: resolvers: fix missing task_idle destruction in resolvers_destroy()
2026-05-15BUG/MINOR: resolvers: fix leaked fields on cfg_parse_resolvers() error paths
2026-05-15BUG/MINOR: resolvers: fix leaked dgram and dns_ring struct in parse_resolve_conf()
2026-05-15BUG/MINOR: resolvers: report the expression error in the do-resolve() action parser
2026-05-15BUG/MINOR: proxy: use proxy_drop() in parse_new_proxy() error path
2026-05-15BUG/MINOR: dns: fix dangling dgram pointer on dns_dgram_init() failure path
2026-05-15BUG/MINOR: resolvers: fix dangling list pointer in resolvers_new() error paths
2026-05-15BUG/MEDIUM: server/cli: unlock server lock on failure in cli_parse_set_server
2026-05-15BUG/MINOR: servers: use proper source of pool_conn_name in srv_settings_cpy()
2026-05-15BUG/MINOR: server: better handling of OOM in srv_set_fqdn()
2026-05-15BUG/MEDIUM: dns: fix memory leak of sockaddr in dns_session_init() error path
2026-05-15BUG/MEDIUM: resolvers: fix name compression pointer validation in resolv_read_name()
2026-05-15BUG/MEDIUM: dns: fix long loops in additional records parse on name failure
2026-05-15BUG/MINOR: config/dns: properly fail on duplicate nameserver name detection
2026-05-15BUG/MINOR: backend: correct parameter value validation in get_server_ph_post()
2026-05-13BUG/MINOR: xprt_qstrm: fix conflicting prototype
2026-05-13BUG/MEDIUM: http-client: Only consume input buffer when hc one is empty
2026-05-13BUG/MEDIUM: dict: hold read lock while incrementing refcount in dict_insert
2026-05-11BUG/MEDIUM: tasks: Keep the TASK_RUNNING flag until queued
2026-05-11BUG/MINOR: uri-auth: fix possible null-deref in latest fix for leaks
2026-05-11BUG/MINOR: mqtt: fix PUBLISH flags validation that want all bits to be set
2026-05-11BUG/MINOR: mqtt: connack parser uses wrong bit for SUBSCRIPTION_IDENTIFIERS_AVAILABLE
2026-05-11BUG/MINOR: mqtt: connect parser uses wrong bit field for TOPIC_ALIAS_MAXIMUM
2026-05-11BUG/MINOR: mqtt: connack parser returns MQTT_NEED_MORE_DATA on unknown property
2026-05-11BUG/MINOR: cfgcond: make KQUEUE check for GTUNE_USE_KQUEUE not GTUNE_USE_EPOLL
2026-05-11BUG/MINOR: cache: fix memory leak in parse_cache_rule error path
2026-05-11BUG/MINOR: uri-auth: avoid leaks on initialization error
2026-05-11BUG/MINOR: auth: free user groups on error paths in userlist_postinit()
2026-05-11BUG/MINOR: tools: fix memory leak in env_expand() error path
2026-05-11BUG/MINOR: http-act: set-status() must check the response message, not the request
2026-05-11BUG/MINOR: http-fetch: make http_first_req() check for HTTP first
2026-05-11BUG/MINOR: http-fetch: fix smp_fetch_hdr_ip()'s handling of brackets for IPv6
2026-05-11BUG/MINOR: mux-h1: only check h1s if not NULL
2026-05-11BUG/MINOR: cfgparse-listen: do not emit extraneous line in rule order warnings
2026-05-09BUG/MEDIUM: servers: Only requeue servers if they are up
2026-05-07BUG/MEDIUM: stick-table: properly check permissions on CLI's set/clear cmd
2026-05-07BUG/MEDIUM: jwe: Fix jwt.decrypt_alg_list to work correctly
2026-05-07BUG/MEDIUM: mux-h2: fix the detection of the ext connect support
2026-05-07Revert "BUG/MINOR: mux-h2: condition the processing of 8441 extension to global setting"
2026-05-07Revert "BUG/MEDIUM: cli: fix master CLI connection slot leak on client disconnect"
2026-05-07BUG/MEDIUM: mux-h2: Properly consume padding for DATA frames
2026-05-07BUG/MINOR: mux_quic: refresh timeout only if I/O performed
2026-05-07BUG/MINOR: mux_quic: fix max stream ID reuse estimation
2026-05-06BUG/MINOR: ssl: Use the sequence number with kTLS and TLS 1.2
2026-05-06BUG/MEDIUM: mux_quic: adjust qcc_is_dead() to account detached streams
2026-05-05DEBUG: haterm: Add hstream flags in the trace messages
2026-05-05BUG/MINOR: haterm: Report a 400-bad-request error on receive error
2026-05-05BUG/MINOR: haterm: Fix condition to use direct data forwarding
2026-05-05BUG/MEDIUM: haterm: Properly handle client timeout
2026-05-05BUG/MEDIUM: haterm: Properly handle end of request and end of response
2026-05-05BUG/MINOR: haterm: Don't set HTX_FL_EOM flag on 100-Continue responses
2026-05-05BUG/MEDIUM: haterm: Subscribe for receives until request was fully drained
2026-05-05BUG/MINOR: haterm: Fix a possible integer overflow on the request body length
2026-05-05BUG/MINOR: haterm: Immediately report error when draining the request
2026-05-05BUG/MEDIUM: h1_htx: Remove reverved block on error during contig chunks parsing
2026-05-05BUG/MINOR: http-fetch: Fix http_auth_bearer() when custom header is used
2026-05-05BUG/MINOR: http_fetch: Check return values of unchecked buffer operations
2026-05-05BUG/MINOR: acme: contact mail should be optional, don't pass ToS bool
2026-05-05BUG/MINOR: h2: only accept :protocol with extended CONNECT
2026-05-05BUG/MINOR: mux-h2: condition the processing of 8441 extension to global setting
2026-05-05BUG/MINOR: h2: add decoding for :protocol in traces
2026-05-04BUG/MINOR: mworker/cli: check ci_insert() return value in pcli_parse_request()
2026-05-04BUG/MEDIUM: mworker/cli: fix user and operator permission via @@ in master CLI
2026-05-04BUG/MAJOR: http-ana: fix private session retrieval on NTLM
2026-05-04BUG/MEDIUM: ssl/sample: check output buffer size in aes_cbc_enc converter
2026-05-04BUG/MAJOR: net_helper: also fix tcp_options_list for OOB write loop
2026-05-04BUG/MINOR: resolvers: Free opts on parse error in resolv_parse_do_resolve()
2026-05-04BUG/MINOR: resolvers: Fix lookup for a hostname in the state-file tree
2026-05-04BUG/MINOR: resolvers: Free new requester on error when linking a resolution
2026-05-04BUG/MINOR: tcpcheck: Properly report error for http health-checks
2026-05-04BUG/MINOR: dns: always validate the source address in responses
2026-05-04BUG/MAJOR: mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in h2c_dec_hdrs()
2026-05-04BUG/MEDIUM: mux-h2: fix the body_len to check when parsing request trailers
2026-05-04BUG/MINOR: quic: fix trace crash on datagram receive
2026-05-04BUG/MEDIUM: acme: fix stalled renewal when opportunistic DNS check fails
2026-05-04BUG/MINOR: quic: fix buffer overflow with sockaddr_in46
2026-04-30CI: github: add DEBUG_STRICT=2 to ASAN jobs
2026-04-30BUG/MINOR: pattern: release the reference on failure to load from file
2026-04-30BUG/MINOR: map: do not leak a map descriptor on load error
2026-04-30BUG/MINOR: acl: fix a possible arg corruption in smp_fetch_acl_parse()
2026-04-30BUG/MEDIUM: cli: fix master CLI connection slot leak on client disconnect
2026-04-30BUG/MINOR: quic: handle cases where we don't have an address
2026-04-30BUG/MINOR: hpack: validate idx > 0 in hpack_valid_idx()
2026-04-30BUG/MINOR: vars: only print first invalid char in fill_desc()
2026-04-30BUG/MINOR: vars: don't store the variable twice with set-var-fmt
2026-04-30BUG/MINOR: vars: make parse_store() return error on var_set() failure
2026-04-30BUG/MINOR: sink: do not free existing sinks on allocation error
2026-04-29BUG/MINOR: acme: skip auth/challenge steps when newOrder returns a certificate
2026-04-29BUG/MEDIUM: acme: fix segfault on newOrder with empty authorizations
2026-04-29BUG/MINOR: http-htx: Don't normalize emtpy path for OPTIONS requests
2026-04-29BUG/MEDIUM: mux-fcgi: Properly handle full buffer for FCGI_PARAM record
2026-04-29BUG/MINOR: net_helper: fix incomplete decoding in sample_conv_eth_vlan
2026-04-29BUG/MINOR: net_helper: fix out-of-bounds read in sample_conv_tcp_options_list
2026-04-29BUG/MINOR: net_helper: fix out-of-bounds read in tcp_fullhdr_find_opt
2026-04-29BUG/MINOR: payload: prevent integer overflow in distcc token parsing
2026-04-29BUG/MINOR: payload: validate minimum keyshare_len in smp_fetch_ssl_keyshare_groups
2026-04-29BUG/MINOR: fix various typos and spelling mistakes in user-visible messages
2026-04-29BUG/MEDIUM: tasks: Do not loop in task_schedule() if a task is running
2026-04-29BUG/MAJOR: mux-h1: Deal with true 64-bits integer to emit chunks size
2026-04-29BUG/MEDIUM: h1: Enforce the authority validation during H1 request parsing
2026-04-29BUG/MAJOR: http: forbid comma character in authority value
2026-04-29BUG/MEDIUM: http-htx: Loop on full host value during scheme based normalization
2026-04-29BUG/MEDIUM: http-htx: Don't use data from HTX message to update authority
2026-04-29BUG/MAJOR: http-htx: Store new host in a chunk for scheme-based normalization
2026-04-28BUG/MINOR: mux_quic: free frames emitted with QMux
2026-04-27BUG/MINOR: http_ana: use scf to report term_evts in http_wait_for_request()
2026-04-27BUG/MEDIUM: mux_h1: fix stack buffer overflow in h1_append_chunk_size()
2026-04-27BUG/MINOR: peers: fix wrong flag reported twice for dump_flags
2026-04-27BUG/MINOR: peers: fix logical "and" when checking for local in PEER_APP_ST_STARTING
2026-04-27BUG/MINOR: sample: fix NULL strm dereference in sample_conv_when
2026-04-27BUG/MINOR: sample: fix memory leak in smp_resolve_args error paths
2026-04-27BUG/MINOR: sample: fix memory leak in check_when_cond() when ACL is not found
2026-04-27BUG/MINOR: tools: free previously allocated strings on strdup failure in backup_env()
2026-04-27BUG/MINOR: tools: fix memory leak in indent_msg() on out of memory
2026-04-27BUG/MINOR: tools: my_memspn/my_memcspn wrong cast causing incorrect byte reading
2026-04-27BUG/MINOR: tree-wide: fix a few user-visible spelling mistakes from dev7
2026-04-27BUG/MINOR: ssl: fix double-free on failed realloc in ssl_sock.c
2026-04-25BUG/MINOR: ssl: fix memory leak on realloc failure in acme.ips
2026-04-25BUG/MINOR: ssl: fix memory leaks on realloc failure in ssl_sock.c
2026-04-25BUG/MINOR: ssl: fix memory leaks on realloc failure in ssl_ckch.c
2026-04-24BUG/MEDIUM: stats: fix crash on 'dump stats-file'
2026-04-24BUG/MINOR: tcpcheck: Allow connection reuse without prior traffic
2026-04-24BUG/MINOR: mux_quic: do not release conn on qcc_recv() for QMux
2026-04-24BUG/MINOR: xprt_qstrm: prevent crash if conn release on MUX wake
2026-04-24BUG/MINOR: xprt_qstrm: ensure all local TPs are allocated
2026-04-24BUG/MINOR: mux_quic: prevent crash on qc_frm_free() with QMux
2026-04-23BUG/MEDIUM: mux-h1: Force close mode for bodyless message announcing a C-L
2026-04-23BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as well
2026-04-23BUG/MINOR: server: fix a possible leak of an error message in dynamic servers
2026-04-23Revert "BUG/MINOR: stream: add the newly added SF_TXN_* flags to strm_show_flags()"
2026-04-23BUG/MINOR: debug: properly mark the entire libs archive read-only
2026-04-23BUG/MINOR: stream: add the newly added SF_TXN_* flags to strm_show_flags()
2026-04-23BUG/MINOR: servers: fix last_sess date calculation
2026-04-23BUG/MINOR: compression: properly disable request when setting response
2026-04-23BUG/MINOR: stream: Add SF_TXN_HTTP/SF_TXN_PCLI flags in strm_show_flags()
2026-04-23BUG/MEDIUM: tcpcheck: Release temporary small chunk when retrying on http-check
2026-04-23BUG/MINOR: tcpcheck: Fix a leak on deinit by releasing ruleset's conf.file
2026-04-23BUG/MINOR: tcpcheck: Don't release ruleset when parsing 'spop-check' ruleset
2026-04-23BUG/MINOR: http-act: fix a typo in a "del-heeaders-bin" error message
2026-04-23BUG/MINOR: mux-h1: Fix test to skip trailers from chunked messages
2026-04-23BUG/MINOR: mux-h1: Fix condition to send null-chunk for bodyless message
2026-04-23BUG/MINOR: log: also wait for the response when logging response headers
2026-04-23BUG/MINOR: H2: Don't forget to free shared_rx_bufs on failure
2026-04-23BUG/MINOR: h2: Don't look at the exclusive bit for PRIORITY frame
2026-04-23BUG/MINOR: h2: make tune.h2.log-errors actually work
2026-04-22BUG/MAJOR: net_helper: ip.fp infinite loop on malformed tcp options
2026-04-22BUG/MEDIUM: tasks: Make sure we don't schedule a task already running
2026-04-22BUG/MINOR: mux-h2: count a proto error when rejecting a stream on parsing error
2026-04-22BUG/MINOR: mux-h2: count a protocol error when failing to parse a trailer
2026-04-22BUG/MINOR: reg-tests: make shell syntax errors fatal
2026-04-21BUG/MAJOR: sched: protect task->expire on 32-bit platforms
2026-04-21BUG/MINOR: sample: adjust dependencies for channel output bytes counters
2026-04-21BUG/MINOR: log: consider format expression dependencies to decide when to log
2026-04-20BUG/MEDIUM: checks: Don't forget to set the "alt_proto" field
2026-04-20BUG/MINOR: xprt_qstrm: reduce max record length check
2026-04-20BUG/MINOR: mux_quic: convert QCC rx.rlen to 64bits
2026-04-20BUG/MINOR: xprt_qstrm: read record length in 64bits
2026-04-17BUG/MINOR: mux_quic: limit avail_streams() to 2^62
2026-04-17BUG/MINOR: task: fix uninitialised read in run_tasks_from_lists()
2026-04-16BUG/MEDIUM: mux-h2: ignore conn->owner when deciding if a connection is dead
2026-04-15BUG/MINOR: threads: properly set the number of tgroups when non using policy
2026-04-15BUG/MINOR: acme: fix fallback state after failed initial DNS check
2026-04-15BUG/MEDIUM: peers: trash of expired entries delayed after fullresync
2026-04-14BUG/MEDIUM: htx: Don't count delta twice when block value is replaced
2026-04-14BUG/MEDIUM: htx: Properly handle block modification during defragmentation
2026-04-13BUG/MINOR: haterm: don't apply the default pipe size margin twice
2026-04-13BUG/MINOR: acme: don't pass NULL into format string
2026-04-13BUG/MINOR: acme: read the wildcard flag from the authorization response
2026-04-13BUG/MINOR: haterm: preserve the pipe size margin for splicing
2026-04-13BUG/MEDIUM: cli: Properly handle too big payload on a command line
2026-04-13BUG/MINOR: log: Fix error message when using unavailable fetch in logfmt
2026-04-13BUG/MINOR: quic: do not use hardcoded values in QMux TP frame builder
2026-04-13BUG/MINOR: ot: fixed wrong NULL check in flt_ot_parse_cfg_group()
2026-04-13BUG/MINOR: ot: removed dead code in flt_ot_parse_cfg_str()
2026-04-13BUG/MINOR: xprt_qstrm: do not parse record length on read again
2026-04-13BUG/MINOR: mux_quic: prevent QMux crash on qcc_io_send() error path
2026-04-10BUG/MEDIUM: haterm: Properly initialize the splicing support for haterm
2026-04-10Revert "BUG/MEDIUM: haterm: Move all init functions of haterm in haterm_init.c"
2026-04-10BUG/MINOR: do not crash on QMux reception of BLOCKED frames
2026-04-10BUG/MINOR: quic: increment pos pointer on QMux transport params parsing
2026-04-10BUG/MINOR: mux-quic: fix potential NULL deref on qcc_release()
2026-04-10BUG/MINOR: hlua: fix use-after-free of HTTP reason string
2026-04-10BUG/MEDIUM: mux-fcgi: prevent record-length truncation with large bufsize
2026-04-10BUG/MINOR: sample: fix info leak in regsub when exp_replace fails
2026-04-09BUG/MEDIUM: samples: Fix handling of SMP_T_METH samples
2026-04-09BUG/MINOR: haterm: Return the good start-line for 100-continue interim message
2026-04-09BUG/MINOR: http-act: validate decoded lengths in *-headers-bin
2026-04-09BUG/MINOR: spoe: fix pointer arithmetic overflow in spoe_decode_buffer()
2026-04-09BUG/MINOR: resolvers: fix memory leak on AAAA additional records
2026-04-08BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals
2026-04-08Revert "BUG: hlua: fix stack overflow in httpclient headers conversion"
2026-04-08BUG/MEDIUM: connection: Wake the stconn on error when failing to create mux
2026-04-07BUG/MINOR: peers: fix OOB heap write in dictionary cache update
2026-04-07BUG/MEDIUM: chunk: fix infinite loop in get_larger_trash_chunk()
2026-04-07BUG/MEDIUM: chunk: fix typo allocating small trash with bufsize_large
2026-04-07BUG/MINOR: hlua: fix format-string vulnerability in Patref error path
2026-04-07BUG/MINOR: hlua: fix stack overflow in httpclient headers conversion
2026-04-07BUG: hlua: fix stack overflow in httpclient headers conversion
2026-04-07BUG/MEDIUM: jwe: fix memory leak in jwt_decrypt_secret with var argument
2026-04-07BUG/MEDIUM: jwt: fix heap overflow in ECDSA signature DER conversion
2026-04-07BUG/MEDIUM: jwe: fix NULL deref crash with empty CEK and non-dir alg
2026-04-07BUG/MEDIUM: payload: validate SNI name_len in req.ssl_sni
2026-04-05BUG/MEDIUM: tcpcheck: Properly retrieve tcpcheck type to install the best mux
2026-04-04BUG/MINOR: counters: fix unexpected 127 char GUID truncation for shm-stats-file objects
2026-04-03BUG/MEDIUM: tcpcheck/server: Fix parsing of healthcheck param for dynamic servers
2026-04-03BUG/MINOR: http-act: fix a typo in the "pause" action error message
2026-04-03BUG/MEDIUM: mux-h1: Disable 0-copy forwarding when draining the request
2026-04-03BUG/MEDIUM: haterm: Move all init functions of haterm in haterm_init.c
2026-04-03BUG/MINOR: ssl: fix memory leak in ssl_fc_crtname by using SSL_CTX ex_data index
2026-04-03BUG/MINOR: cfgcond: fail cleanly on missing argument for "feature"
2026-04-03BUG/MINOR: cfgcond: always set the error string on awslc_api checks
2026-04-03BUG/MINOR: cfgcond: always set the error string on openssl_version checks
2026-04-03BUG/MINOR: cfgcond: properly set the error pointer on evaluation error
2026-04-02BUG/MINOR: mux_quic: fix uninit for QMux emission
2026-04-02DEBUG: connection/flags: add QSTRM flags for the decoder
2026-04-02BUG/MINOR: quic: fix documentation for transport params decoding
2026-04-01BUG/MINOR: tcpcheck: Use tcpcheck context for expressions parsing
2026-04-01BUG/MINOR: tcpcheck: Don't enable http_needed when parsing HTTP samples
2026-04-01BUG/MINOR: tcpcheck: Remove unexpected flag on tcpcheck rules for httchck option
2026-04-01BUG/MINOR: http_act: Make set/add-headers-bin compatible with ACL conditions
2026-04-01BUG/MINOR: http_act: Properly handle decoding errors in *-headers-bin actions
2026-03-31BUG/MEDIUM: mux-h1: Don't set MSG_MORE on bodyless responses forwarded to client
2026-03-31BUG/MEDIUM: map/cli: CLI commands lack admin permission checks
2026-03-31BUG/MEDIUM: ssl/ocsp: ocsp commands are missing permission checks
2026-03-31BUG/MEDIUM: ssl/cli: tls-keys commands are missing permission checks
2026-03-31BUG/MEDIUM: map/cli: map/acl commands warn when accessed without admin level
2026-03-31BUG/MEDIUM: ssl/ocsp: ocsp commands warn when accessed without admin level
2026-03-31BUG/MEDIUM: ssl/cli: tls-keys commands warn when accessed without admin level
2026-03-30BUG/MINOR: net_helper: fix length controls on ip.fp tcp options parsing
2026-03-30BUG/MINOR: stconn: Always declare the SC created from healthchecks as a back SC
2026-03-30BUG/MINOR: quic: close conn on packet reception with incompatible frame
2026-03-27BUG/MEDIUM: htx: Fix htx_xfer() to consume more data than expected
2026-03-27BUG/MINOR: acme: fix task allocation leaked upon error
2026-03-27BUG/MEDIUM: acme: skip doing challenge if it is already valid
2026-03-27BUG/MINOR: http-ana: Only consider client abort for abortonclose
2026-03-27BUG/MINOR: config: Properly test warnif_misplaced_* return values
2026-03-27BUG/MINOR: config: Warn only if warnif_cond_conflicts report a conflict
2026-03-26BUG/MEDIUM: check: Don't reuse the server xprt if we should not
2026-03-25BUG/MINOR: acme: permission checks on the CLI
2026-03-25BUG/MINOR: ech: permission checks on the CLI
2026-03-23BUG/MINOR: acme/cli: fix argument check and error in 'acme challenge_ready'
2026-03-23BUG/MINOR: acme: replace atol with len-bounded __strl2uic() for retry-after
2026-03-23BUG/MINOR: acme: free() DER buffer on a2base64url error path
2026-03-23BUG/MINOR: acme: NULL check on my_strndup()
2026-03-23Revert "BUG/MEDIUM: mux-h2: make sure to always report pending errors to the stream"
2026-03-23BUG/MINOR: http_htx: fix null deref in http-errors config check
2026-03-23BUG/MINOR: acme/cli: wrong argument check in 'acme renew'
2026-03-23BUG/MINOR: acme: wrong error when checking for duplicate section
2026-03-23BUG/MINOR: acme: leak of ext_san upon insertion error
2026-03-23BUG/MEDIUM: acme: fix multiple resource leaks in acme_x509_req()
2026-03-20BUG/MINOR: qpack: fix 62-bit overflow and 1-byte OOB reads in decoding
2026-03-20BUG/MINOR: sock: adjust accept() error messages for ENFILE and ENOMEM
2026-03-19BUG/MINOR: mworker: fix sort order of mworker_proc in 'show proc'
2026-03-19BUG/MINOR: mworker/cli: fix show proc pagination losing entries on resume
2026-03-19BUG/MEDIUM: h3: reject unaligned frames except DATA
2026-03-19BUG/MAJOR: h3: check body size with content-length on empty FIN
2026-03-19BUG/MINOR: mux-h2: properly ignore R bit in WINDOW_UPDATE increments
2026-03-19BUG/MINOR: mux-h2: properly ignore R bit in GOAWAY stream ID
2026-03-19BUG/MEDIUM: peers: enforce check on incoming table key type
2026-03-18BUG/MINOR: mworker: don't try to access an initializing process
2026-03-18BUG/MINOR: spoe: Fix condition to abort processing on client abort
2026-03-17BUG/MINOR: mjson: make mystrtod() length-aware to prevent out-of-bounds reads
2026-03-17BUG/MINOR: stream: Fix crash in stream dump if the current rule has no keyword
2026-03-17BUG/MINOR: http-ana: Swap L7 buffer with request buffer by hand
2026-03-17BUG/MINOR: h2/h3: Never insert partial headers/trailers in an HTX message
2026-03-17BUG/MINOR: h2/h3: Only test number of trailers inserted in HTX message
2026-03-17BUG/MEDIUM: stconn: Don't perform L7 retries with large buffer
2026-03-17BUG/MEDIUM: stconn: Fix abort on close when a large buffer is used
2026-03-17BUG/MEDIUM: spoe: Properly abort processing on client abort
2026-03-17BUG/MINOR: spoe: Properly switch SPOE filter to WAITING_ACK state
2026-03-17BUG/MEDIUM: stconn: Don't forget to wakeup applets on shutdown
2026-03-16BUG/MINOR: sockpair: set FD_CLOEXEC on fd received via SCM_RIGHTS
2026-03-13BUG/MINOR: mworker: avoid passing NULL version in proc list serialization
2026-03-13BUG/MINOR: mworker: set a timeout on the worker socketpair read at startup
2026-03-13BUG/MINOR: mworker: fix typo &= instead of & in proc list serialization
2026-03-13BUG/MINOR: mworker: only match worker processes when looking for unspawned proc
2026-03-12BUG/MINOR: proxy: do not forget to validate quic-initial rules
2026-03-12BUG/MINOR: memprof: avoid a small memory leak in "show profiling"
2026-03-12BUG/MEDIUM: ssl: Don't report read data as early data with AWS-LC
2026-03-12BUG/MINOR: mworker: always stop the receiving listener
2026-03-12BUG/MEDIUM: ssl: Handle receiving early data with BoringSSL/AWS-LC
2026-03-12BUG/MINOR: jws: fix memory leak in jws_b64_signature
2026-03-12BUG/MINOR: tcpcheck: Fix typo in error error message for `http-check expect`
2026-03-10DEBUG: stconn: Add a CHECK_IF() when I/O are performed on a orphan SC
2026-03-09Revert "BUG/MINOR: jwt: Missing 'jwt_tokenize' return value check"
2026-03-09BUG/MINOR: mworker: don't set the PROC_O_LEAVING flag on master process
2026-03-09MINOR: mworker: add a BUG_ON() on mproxy_li in _send_status
2026-03-08BUG/MINOR: admin: haproxy-reload rename -vv long option
2026-03-08BUG/MINOR: admin: haproxy-reload use explicit socat address type
2026-03-06BUG/MINOR: jwt: Missing 'jwt_tokenize' return value check
2026-03-06BUG/MINOR: backend: Don't get proto to use for webscoket if there is no server
2026-03-06BUG/MINOR: ssl-sample: Fix sample_conv_sha2() by checking EVP_Digest* failures
2026-03-05BUG/MINOR: stconn: Increase SC bytes_out value in se_done_ff()
2026-03-05BUG/MEDIUM: mux-fcgi: Use a safe loop to resume each stream eligible for sending
2026-03-05BUG/MAJOR: resolvers: Properly lowered the names found in DNS response
2026-03-05BUG/MAJOR: fcgi: Fix param decoding by properly checking its size
2026-03-05BUG/MINOR: http-ana: Increment scf bytes_out value if an haproxy error is sent
2026-03-05BUG/MINOR: sample: Fix sample to retrieve the number of bytes received and sent
2026-03-05BUG/MINOR: channel: Increase the stconn bytes_in value in channel_add_input()
2026-03-05DEBUG: stream: Display the currently running rule in stream dump
2026-03-05BUG/MINOR: h1-htx: Be sure that H1 response version starts by "HTTP/"
2026-03-05BUG/MINOR: hlua: Properly enable/disable receives for TCP applets
2026-03-05BUG/MEDIUM: hlua: Fix end of request detection when retrieving payload
2026-03-05BUG/MINOR: hlua: Properly enable/disable line receives from HTTP applet
2026-03-05BUG/MEDIUM: qpack: correctly deal with too large decoded numbers
2026-03-05BUG/MINOR: quic: fix OOB read in preferred_address transport parameter
2026-03-05BUG/MINOR: qpack: fix 1-byte OOB read in qpack_decode_fs_pfx()
2026-03-05BUG/MAJOR: qpack: unchecked length passed to huffman decoder
2026-03-05BUG/MEDIUM: hpack: correctly deal with too large decoded numbers
2026-03-03BUG/MEDIUM: stream: Handle TASK_WOKEN_RES as a stream event
2026-03-03BUG/MINOR: hlua: fix return with push nil on proxy check
2026-02-26BUG/MINOR: proxy: add dynamic backend into ID tree
2026-02-26BUG/MINOR: promex: fix server iteration when last server is deleted
2026-02-26BUG/MINOR: call EXTRA_COUNTERS_FREE() before srv_free_params() in srv_drop()
2026-02-26BUG/MINOR: server: adjust initialization order for dynamic servers
2026-02-26BUG/MEDIUM: mux-h2: make sure to always report pending errors to the stream
2026-02-25BUG/MINOR: quic: missing app ops init during backend 0-RTT sessions
2026-02-24BUG/MEDIUM: cpu-topo: Distribute CPUs fairly across groups
2026-02-23BUG/MINOR: haterm: cannot reset default "haterm" mode
2026-02-23BUG/MEDIUM: spoe: Acquire context buffer in applet before consuming a frame
2026-02-23BUG/MINOR: acme: fix incorrect number of arguments allowed in config
2026-02-22BUG/MINOR: acme: wrong labels logic always memprintf errmsg
2026-02-21BUG/MINOR: acme: acme_ctx_destroy() leaks auth->dns
2026-02-20BUG/MINOR: quic/h3: display QUIC/H3 backend module on HTML stats
2026-02-20MINOR: quic: add BUG_ON() on half_open_conn counter access from BE
2026-02-20BUG/MINOR: quic: fix counters used on BE side
2026-02-20BUG/MINOR: haterm: missing allocation check in copy_argv()
2026-02-20BUG/MINOR: server: enable no-check-sni-auto for dynamic servers
2026-02-20BUG/MINOR: server: set auto SNI for dynamic servers
2026-02-20BUG/MINOR: proxy: detect strdup error on server auto SNI
2026-02-19BUG/MEDIUM: stats-file: detect and fix inconsistent shared clock when resuming from shm-stats-file
2026-02-19BUG/MINOR: stats-file: manipulate shm-stats-file heartbeat using unsigned int
2026-02-19BUG/MEDIUM: stats-file: fix shm-stats-file recover when all process slots are full
2026-02-19BUG/MINOR: backend: check delay MUX before conn_prepare()
2026-02-19BUG/MINOR: acme: fix X509_NAME leak when X509_set_issuer_name() fails
2026-02-18BUG/MEDIUM: ssl: SSL backend sessions used after free
2026-02-18BUG/MEDIUM: htx: Fix function used to change part of a block value when defrag
2026-02-18BUG/MINOR: config: Check buffer pool creation for failures
2026-02-18BUG/MEDIUM: jwe: fix timing side-channel and dead code in JWE decryption
2026-02-18BUG/MINOR: http-ana: Stop to wait for body on client error/abort
2026-02-18BUG/MEDIUM: shctx: Use the next block when data exactly filled a block
2026-02-18BUG/MINOR: flt-trace: Properly compute length of the first DATA block
2026-02-18BUG/MEDIUM: applet: Fix test on shut flags for legacy applets (v2)
2026-02-18BUG/MEDIUM: mux-h1: Stop sending vi fast-forward for unexpected states
2026-02-18BUG/MEDIUM: mux-h2/quic: Stop sending via fast-forward if stream is closed
2026-02-17MINOR: mux-quic: add BUG_ON_STRESS() when draining data on closed stream
2026-02-17BUG/MEDIUM: h3: reject frontend CONNECT as currently not implemented
2026-02-17BUG/MAJOR: Revert "MEDIUM: mux-quic: add BUG_ON if sending on locally closed QCS"
2026-02-16BUG/MINOR: ssl: error with ssl-f-use when no "crt"
2026-02-16BUG/MINOR: ssl: clarify ssl-f-use errors in post-section parsing
2026-02-16BUG/MINOR: ssl: fix leak in ssl-f-use parser upon error
2026-02-16BUG/MINOR: ssl: double-free on error path w/ ssl-f-use parser
2026-02-16BUG/MINOR: ssl: lack crtlist_dup_ssl_conf() declaration
2026-02-14BUG/MINOR: deviceatlas: set cache_size on hot-reloaded atlas instance
2026-02-14BUG/MINOR: deviceatlas: fix deinit to only finalize when initialized
2026-02-14BUG/MINOR: deviceatlas: fix resource leak on hot-reload compile failure
2026-02-14BUG/MINOR: deviceatlas: fix double-checked locking race in checkinst
2026-02-14BUG/MINOR: deviceatlas: fix cookie vlen using wrong length after extraction
2026-02-14BUG/MINOR: deviceatlas: fix off-by-one in da_haproxy_conv()
2026-02-14BUG/MEDIUM: deviceatlas: fix resource leaks on init error paths
2026-02-14BUG/MINOR: deviceatlas: add NULL checks on strdup() results in config parsers
2026-02-14BUG/MINOR: deviceatlas: add missing return on error in config parsers
2026-02-12BUG/MAJOR: quic: fix parsing frame type
2026-02-12BUG/MAJOR: quic: reject invalid token
2026-02-12BUG/MINOR: quic: ensure handshake speed up is only run once per conn
2026-02-10BUG/MINOR: ssl: SSL_CERT_DIR environment variable doesn't affect haproxy
2026-02-10BUG/MEDIUM: lb-chash: always properly initialize lb_nodes with dynamic servers
2026-02-09BUG/MINOR: proxy: fix default ALPN bind settings
2026-02-06BUG/MINOR: proxy: fix null dereference in "add backend" handler
2026-02-06BUG/MINOR: proxy: fix clang build error on "add backend" handler
2026-02-06BUG/MINOR: startup: handle a possible strdup() failure
2026-02-06BUG/MINOR: startup: fix allocation error message of progname string
2026-02-06BUG/MEDIUM: threads: Differ checking the max threads per group number
2026-02-06BUG/MINOR: threads: Initialize maxthrpertgroup earlier.
2026-02-04BUG/MINOR: config: Fix setting of alt_proto
2026-02-04BUG/MINOR: cpu-topo: count cores not cpus to distinguish core types
2026-02-04BUG/MEDIUM: threads: Atomically set TH_FL_SLEEPING and clr FL_NOTIFIED
2026-01-30BUG/MEDIUM: applet: Fix test on shut flags for legacy applets
2026-01-29BUG/MEDIUM: ssl: fix msg callbacks on QUIC connections
2026-01-29BUG/MINOR: config/ssl: fix spelling of "expose-experimental-directives"
2026-01-27BUG/MINOR: ssl: fix error message of tune.ssl.certificate-compression
2026-01-27BUG/MAJOR: applet: Don't call I/O handler if the applet was shut
2026-01-26BUG/MINOR: ssl: Encrypted keys could not be loaded when given alongside certificate
2026-01-26BUG/MINOR: ssl: Properly manage alloc failures in SSL passphrase callback
2026-01-26BUG/MINOR: stick-tables: abort startup on stk_ctr pool creation failure
2026-01-26BUG/MINOR: config: check capture pool creations for failures
2026-01-23BUG/MINOR: proto_tcp: Properly report support for HAVE_TCP_MD5SIG feature
2026-01-23BUG/MEDIUM: mux-h1: Skip UNUSED htx block when formating the start line
2026-01-23BUG/MINOR: promex: Detach promex from the server on error dump its metrics dump
2026-01-23BUG/MINOR: hlua: consume error object if ignored after a failing lua_pcall()
2026-01-23BUG/MEDIUM: hlua: fix invalid lua_pcall() usage in hlua_traceback()
2026-01-22BUG/MEDIUM: debug: only dump Lua state when panicking
2026-01-22BUG/MINOR: proxy: fix deinit crash on defaults with duplicate name
2026-01-21BUG/MEDIUM: mux-quic: prevent BUG_ON() on aborted uni stream close
2026-01-21BUG/MEDIUM: ssl: fix generate-certificates option when SNI greater than 64bytes
2026-01-21BUG/MEDIUM: ssl: fix error path on generate-certificates
2026-01-19BUG/MEDIUM: log: parsing log-forward options may result in segfault
2026-01-19BUG/MEDIUM: promex: server iteration may rely on stale server
2026-01-19BUG/MINOR: server: ensure server is detached from proxy list before being freed
2026-01-16BUG/MINOR: cfgparse: fix "default" prefix parsing
2026-01-15BUG/MINOR: proxy: free persist_rules
2026-01-15BUG/MEDIUM: queues: Fix arithmetic when feeling non_empty_tgids
2026-01-14BUG/MINOR: http_act: fix deinit performed on uninitialized lf_expr in release_http_map()
2026-01-13BUG/MEDIUM: quic: fix ACK ECN frame parsing
2026-01-13BUG/MEDIUM: threads: Fix binding thread on bind.
2026-01-13BUG/MINOR: net_helper: fix IPv6 header length processing
2026-01-12BUG/MINOR: hlua_fcn: ensure Patref:add_bulk() is given a table object before using it
2026-01-12BUG/MINOR: hlua_fcn: fix broken yield for Patref:add_bulk()
2026-01-12BUG/MINOR: stats-file: Use a 16bits variable when loading tgid
2026-01-08BUG/MINOR: ech/quic: enable ech configuration also for quic listeners
2026-01-08BUG/MINOR: cli/stick-tables: argument to "show table" is optional
2026-01-07BUG/MINOR: cfgparse: wrong section name upon error
2026-01-07BUG/MINOR: quic: fix deprecated warning for window size keyword
2026-01-06BUG/MEDIUM: stconn: Move data from to during zero-copy forwarding
2026-01-06BUG/MEDIUM: mworker: can't use signals after a failed reload
2026-01-06BUG/MEDIUM: mux-h1: Take care to update value during zero-copy forwarding
2026-01-05BUG/MEDIUM: peers: Properly handle shutdown when trying to get a line
2026-01-05BUG/MINOR: mworker/cli: fix show proc pagination using reload counter
2025-12-31BUG/MINOR: backend: inspect request not response buffer to check for TFO
2025-12-31BUG/MINOR: backend: fix the conn_retries check for TFO
2025-12-31BUG/MAJOR: set the correct generation ID in pat_ref_append().
2025-12-26BUG/MEDIUM: cpu-topo: Don't forget to reset visited_ccx.
2025-12-19BUG/MINOR: cpu-topo: fix -Wlogical-not-parentheses build with clang
2025-12-18BUG/MEDIUM: mux-h2: synchronize all conditions to create a new backend stream
2025-12-18BUG/MEDIUM: backend: Do not remove CO_FL_SESS_IDLE in assign_server()
2025-12-14BUG/MEDIUM: quic: Don't try to use hystart if not implemented
2025-12-12BUG/MEDIUM: stconn: Don't report abort from SC if read0 was already received
2025-12-12BUG/MEDIUM: http-ana: Properly detect client abort when forwarding response (v2)
2025-12-11BUG/MEDIUM: mworker/listener: ambiguous use of RX_F_INHERITED with shards
2025-12-10BUG/MEDIUM: h3: fix access to QCS definitely
2025-12-09BUG/MEDIUM: ssl: Don't resume session for check connections
2025-12-09BUG/MEDIUM: ssl: Don't store the ALPN for check connections
2025-12-09BUG/MEDIUM: ssl: Always check the ALPN after handshake
2025-12-09BUG/MINOR: mworker/cli: 'show proc' is limited by buffer size
2025-12-09BUG/MEDIUM: h3: do not access QCS if not allocated
2025-12-08BUG/MEDIUM: http-ana: Don't close server connection on read0 in TUNNEL mode
2025-12-08BUG/MINOR: log: Dump good %B and %U values in logs
2025-12-08BUG/MEDIUM: ssl: Don't reuse TLS session if the connection's SNI differs
2025-12-08BUG/MINOR: ssl: Don't allow to set NULL sni
2025-12-08BUG/MINOR: quic: do not set first the default QUIC curves
2025-12-08BUG/MINOR: quic-be: missing connection stream closure upon TLS alert to send
2025-12-08BUG/MINOR: quic-be: handshake errors without connection stream closure
2025-12-08BUG/MINOR: quic/ssl: crash in ClientHello callback ssl traces
2025-12-04BUG/MEDIUM: config: ignore empty args in skipped blocks
2025-12-04BUG/MEDIUM: connection: fix "bc_settings_streams_limit" typo
2025-12-03BUG/MINOR: quic-be: Missing keywords array NULL termination
2025-11-28BUG/MINOR: jwt: Missing "case" in switch statement
2025-11-26BUG/MINOR: sock-inet: ignore conntrack for transparent sockets on Linux
2025-11-26Revert "BUG/MEDIUM: server/ssl: Unset the SNI for new server connections if none is set"
2025-11-25BUG/MINOR: acme: fix ha_alert() call
2025-11-25BUG/MEDIUM: server/ssl: Unset the SNI for new server connections if none is set
2025-11-25BUG/MINOR: h3: handle properly buf alloc failure on response forwarding
2025-11-25BUG/MINOR: h3: do no crash on forwarding multiple chained response
2025-11-25BUG/MINOR: server: fix srv_drop() crash on partially init srv
2025-11-25BUG/MINOR: quic: release BE quic_conn on connect failure
2025-11-25BUG/MINOR: quic: fix uninit list on show quic handler
2025-11-25BUG/MINOR: quic/server: free quic_retry_token on srv drop
2025-11-25BUG/MEDIUM: quic: do not prevent sending if no BE token
2025-11-24BUG/MINOR: freq_ctr: Prevent possible signed overflow in freq_ctr_overshoot_period
2025-11-24BUG/MEDIUM: server: do not use default SNI if manually set
2025-11-21BUG/MINOR: acme: warning ‘ctx’ may be used uninitialized
2025-11-21BUG/MINOR: acme: better challenge_ready processing
2025-11-21BUG/MINOR: acme: prevent creating map entries with dns-01
2025-11-21BUG/MINOR: acme: handle multiple auth with the same name
2025-11-21BUG/MINOR: mux-quic: check access on qcs stream-endpoint
2025-11-21BUG/MEDIUM: quic-be: quic_conn_closed buffer overflow
2025-11-21BUG/MINOR: mux-quic: fix sedesc leak on BE side
2025-11-21BUG/MEDIUM: cli: State the cli have no more data to deliver if it yields
2025-11-21BUG/MEDIUM: applet: Fix conditions to detect spinning loop with the new API
2025-11-20BUG/MEDIUM: connection/ssl: also fix the ssl_sock_io_cb() regarding idle list
2025-11-20BUG/MINOR: quic: flag conn with CO_FL_FDLESS on backend side
2025-11-20BUG/MEDIUM: config: Use the mux protocol ALPN by default for listeners if forced
2025-11-20BUG/MEDIUM: queues: Don't forget to unlock the queue before exiting
2025-11-20BUG/MINOR: acme: alert when the map doesn't exist at startup
2025-11-20BUG/MEDIUM: quic-be/ssl_sock: TLS callback called without connection
2025-11-19BUG/MINOR: quic: fix FD usage for quic_conn_closed on backend side
2025-11-19BUG/MINOR: quic: do not decrement jobs for backend conns
2025-11-19BUG/MINOR: mux-quic: implement max-reuse server parameter
2025-11-19BUG/MINOR: ssl: remove dead code in ssl_sock_from_buf()
2025-11-18BUG/MINOR: acme: P-256 doesn't work with openssl >= 3.0
2025-11-18BUG/MINOR: mworker: wrong signals during startup
2025-11-18BUG/MEDIUM: mworker: signals inconsistencies during startup and reload
2025-11-17BUG/MEDIUM: quic-be: prevent use of MUX for 0-RTT sessions without secrets
2025-11-14BUG/MINOR: quic-be: backend SSL session reuse fix (OpenSSL 3.5)
2025-11-14BUG/MINOR: quic-be: missing version negotiation
2025-11-14BUG/MINOR: check: fix QUIC check test when QUIC disabled
2025-11-14DEBUG: servers: add a few checks for stress-testing idle conns
2025-11-14DEBUG: add BUG_ON_STRESS(): a BUG_ON() implemented only when DEBUG_STRESS > 0
2025-11-14DEBUG: extend DEBUG_STRESS to ease testing and turn on extra checks
2025-11-14BUG/MEDIUM: connection: do not reinsert a purgeable conn in idle list
2025-11-14Revert "BUG/MEDIUM: connections: permit to permanently remove an idle conn"
2025-11-14BUG/MEDIUM: h1: prevent a crash on HTTP/2 upgrade
2025-11-14BUG/MINOR: stick-tables: Fix return value for __stksess_kill()
2025-11-14BUG/MEDIUM: stick-tables: Always return the good stksess from stktable_set_entry
2025-11-14BUG/MINOR: check: fix reuse-pool if MUX inherited from server
2025-11-14BUG/MINOR: check: only try connection reuse for http-check rulesets
2025-11-13BUG/MINOR: acme: can't override the default resolver
2025-11-13BUG/MEDIUM: acme: move from mt_list to a rwlock + ebmbtree
2025-11-13BUG/MEDIUM: quic-be: do not launch the connection migration process
2025-11-13BUG/MINOR: acme: more explicit error when BIO_new_file()
2025-11-12BUG/MEDIUM: init: 'devnullfd' not properly closed for master
2025-11-12BUG/MINOR: do not account backend connections into maxconn
2025-11-11BUG/MEDIUM: stats-file: fix shm-stats-file preload not working anymore
2025-11-10BUG/MEDIUM: quic: handle collision on CID generation
2025-11-10BUG/MINOR: quic: close connection on CID alloc failure
2025-11-10BUG/MEDIUM: config: for word expansion, empty or non-existing are the same
2025-11-07BUG/MINOR: acme: avoid a possible crash on error paths
2025-11-07BUG/MEDIUM: proxy: use aligned allocations for struct proxy_per_tgroup
2025-11-07BUG/MEDIUM: proxy: use aligned allocations for struct proxy
2025-11-07BUG/MEDIUM: stick-tables: Make sure updates are seen as local
2025-11-07BUG/MEDIUM: peers: Fix update message parsing during a full resync
2025-11-07BUG/MINOR: acme: wrong dns-01 challenge in the log
2025-11-06BUG/MEDIUM: config: solve the empty argument problem again
2025-11-06BUG/MINOR: config: emit warning for empty args when *not* in discovery mode
2025-11-06BUG/MEDIUM: server: close a race around ready_srv when deleting a server
2025-11-06BUG/MINOR: config: Limit "tune.maxpollevents" parameter to 1000000
2025-11-06DEBUG: stream: Add bytes_in/bytes_out value for both SC in session dump
2025-11-06BUG/MINOR: acme: allow 'key' when generating cert
2025-11-06BUG/MINOR: acme: fix initialization issue in acme_gen_tmp_x509()
2025-11-05BUG/MEDIUM: stick-tables: Make sure we handle expiration on all tables
2025-11-05BUG/MEDIUM: connections: permit to permanently remove an idle conn
2025-11-05BUG/MEDIUM: mux-h2: make sure not to move a dead connection to idle
2025-11-05BUG/MEDIUM: mux-h1: fix 414 / 431 status code reporting
2025-11-04BUG/MEDIUM: server: Also call srv_reset_path_parameters() on srv up
2025-11-04BUG/MEDIUM: server: Add a rwlock to path parameter
2025-11-04BUG/MINOR: quic: fix crash on client handshake abort
2025-11-03BUG/MAJOR: stats-file: fix crash on non-x86 platform caused by unaligned cast
2025-11-02BUG/MINOR: resolvers: ensure fair round robin iteration
2025-10-30BUG/MINOR: mux-h2: send the preface along with the first request if needed
2025-10-30BUG/MINOR: ech: non destructive parsing in cli_find_ech_specific_ctx()
2025-10-30BUG/MINOR: ssl: returns when SSL_CTX_new failed during init
2025-10-29BUG/MINOR: resolvers: Apply dns-accept-family setting on additional records
2025-10-29BUG/MINOR: init: Do not close previously created fd in stdio_quiet
2025-10-28BUG/MINOR: acl: warn if "_sub" derivative used with an explicit match
2025-10-28BUG/MINOR: ssl: Remove unreachable code in CLI function
2025-10-28BUG/MEDIUM: ssl: Crash because of dangling ckch_store reference in a ckch instance
2025-10-27BUG/MEDIUM: cli: do not return ACKs one char at a time
2025-10-24BUG/MEDIUM: mt_list: Use atomic operations to prevent compiler optims
2025-10-24BUG/MINOR: stick-tables: properly index string-type keys
2025-10-24BUG/MAJOR: stats-file: ensure shm_stats_file_object struct mapping consistency (2nd attempt)
2025-10-24Revert "BUG/MAJOR: stats-file: ensure shm_stats_file_object struct mapping consistency"
2025-10-24BUG/MEDIUM: applet: Improve again spinning loops detection with the new API
2025-10-23BUG/MINOR: quic: rename and duplicate stream settings
2025-10-23BUG/MINOR: quic: split option for congestion max window size
2025-10-23BUG/MINOR: quic: split max-idle-timeout option for FE/BE usage
2025-10-23BUG/MEDIUM: mt_lists: Avoid el->prev = el->next = el
2025-10-23BUG/MEDIUM: stick-tables: Don't loop if there's nothing left
2025-10-23BUG/MEDIUM: build: limit excessive and counter-productive gcc-15 vectorization
2025-10-22BUG/MAJOR: stats-file: ensure shm_stats_file_object struct mapping consistency
2025-10-22BUG/MAJOR: quic: use ncbmbuf for CRYPTO handling
2025-10-22BUG/MAJOR: pools: fix default pool alignment
2025-10-21BUG/MEDIUM: h3: properly encode response after interim one in same buf
2025-10-21BUG/MEDIUM: h1-htx: Don't set HTX_FL_EOM flag on 1xx informational messages
2025-10-20BUG/MEDIUM: cli: also free the trash chunk on the error path
2025-10-20BUG/MINOR: quic-be: unchecked connections during handshakes
2025-10-19BUG/MEDIUM: mt_list: Make sure not to unlock the element twice
2025-10-17BUG/MEDIUM: threads/config: drop absent threads from thread groups
2025-10-17BUG/MINOR: quic: SSL counters not handled
2025-10-17BUG/MAJOR: quic: do not reset QUIC backends fds in closing state
2025-10-17BUG/MAJOR: quic: uninitialized quic_conn_closed struct members
2025-10-17BUG/MINOR: quic: check applet_putchk() for 'show quic' first line
2025-10-16BUG/MEDIUM: stick-tables: Don't forget to dec count on failure.
2025-10-16BUG/MAJOR: lb-chash: fix key calculation when using default hash-key id
2025-10-16BUG/MINOR: pools: don't report "limited to the first X entries" by default
2025-10-16BUG/MEDIUM: pools: fix crash on filtered "show pools" output
2025-10-13BUG/MEDIUM: pools: fix bad freeing of aligned pools in UAF mode
2025-10-13BUG/MINOR: ssl: Potential NULL deref in trace macro
2025-10-10BUG/MINOR: ssl: Free key_base from global_ssl structure during deinit
2025-10-10BUG/MINOR: ssl: Free global_ssl structure contents during deinit
2025-10-10BUG/MEDIUM: apppet: Improve spinning loop detection with the new API
2025-10-10BUG/MINOR: ssl: leak crtlist_name in ssl-f-use
2025-10-10BUG/MINOR: ssl: leak in ssl-f-use
2025-10-10DEBUG: mux-h1: Dump and values with sedesc info
2025-10-10BUG/MEDIUM: stconn: Properly forward kip to the opposite SE descriptor
2025-10-09BUG/MINOR: ssl: always clear the remains of the first hello for the second one
2025-10-09BUG/MEDIUM: ssl: take care of second client hello
2025-10-09BUG/MINOR: acme: memory leak from the config parser
2025-10-07BUG/MINOR: acme: avoid overflow when diff > notAfter
2025-10-03BUG/MINOR: http-ana: Reset analyse_exp date after 'wait-for-body' action
2025-10-03BUG/MINOR: sink: retry attempt for sft server may never occur
2025-10-03BUG/MEDIUM: connections: Only avoid creating a mux if we have one
2025-10-03BUG/MEDIUM: resolvers: break an infinite loop in resolv_get_ip_from_response()
2025-10-02BUG/MINOR: h3: forbid 'Z' as well in header field names checks
2025-10-02BUG/MINOR: h2: forbid 'Z' as well in header field names checks
2025-10-02BUG/CRITICAL: mjson: fix possible DoS when parsing numbers
2025-10-01BUG/MEDIUM: fwlc: Handle memory allocation failures.
2025-10-01BUG/MEDIUM: wdt: improve stuck task detection accuracy
2025-09-30BUG/MEDIUM: stick-tables: Make sure not to free a pending entry
2025-09-29BUG/MEDIUM: acme: free() of i2d_X509_REQ() with AWS-LC
2025-09-27BUG/MEDIUM: acme: cfg_postsection_acme() don't init correctly acme sections
2025-09-27BUG/MINOR: acme: don't unlink from acme_ctx_destroy()
2025-09-26BUG/MEDIUM: ssl: ca-file directory mode must read every certificates of a file
2025-09-25BUG/MINOR: pattern: Fix pattern lookup for map with opt@ prefix
2025-09-25BUG/MINOR: acme: possible overflow in acme_will_expire()
2025-09-25BUG/MINOR: acme: possible overflow on scheduling computation
2025-09-25BUG/MINOR: pattern: Properly flag virtual maps as using samples
2025-09-25BUG/MINOR: compression: Test payload size only if content-length is specified
2025-09-22BUG/MEDIUM: stick-tables: Don't let table_process_entry() handle refcnt
2025-09-22BUG/MINOR: acme/cli: wrong description for "acme challenge_ready"
2025-09-19BUG/MEDIUM: http-client: Fix the test on the response start-line
2025-09-18BUG/MEDIUM: sink: fix unexpected double postinit of sink backend
2025-09-17BUG/MEDIUM: ring: invert the length check to avoid an int overflow
2025-09-16BUG/MEDIUM: pattern: fix possible infinite loops on deletion (try 2)
2025-09-16Revert "BUG/MEDIUM: pattern: fix possible infinite loops on deletion"
2025-09-16BUG/MEDIUM: pattern: fix possible infinite loops on deletion
2025-09-15BUG/MINOR: resolvers: always normalize FQDN from response
2025-09-15BUG/MINOR: ocsp: Crash when updating CA during ocsp updates
2025-09-15BUG/MEDIUM: http_ana: fix potential NULL deref in http_process_req_common()
2025-09-15Revert "BUG/MINOR: ocsp: Crash when updating CA during ocsp updates"
2025-09-15BUG/MINOR: ocsp: Crash when updating CA during ocsp updates
2025-09-15BUG/MEDIUM: resolvers: Wake resolver task up whne unlinking a stream requester
2025-09-12BUG/MEDIUM: resolvers: Accept to create resolution without hostname
2025-09-12BUG/MEDIUM: resolvers: Make resolution owns its hostname_dn value
2025-09-12BUG/MEDIUM: resolvers: Test for empty tree when getting a record from DNS answer
2025-09-11BUG/MINOR: resolvers: Restore round-robin selection on records in DNS answers
2025-09-11BUG/MEDIUM: resolvers: Properly cache do-resolv resolution
2025-09-11BUG/MINOR: ocsp: prototype inconsistency
2025-09-11BUG/MINOR: ssl: Fix potential NULL deref in trace callback
2025-09-11BUG/MINOR: ssl: Potential NULL deref in trace macro
2025-09-11BUG/MEDIUM: jws: return size_t in JWS functions
2025-09-11BUG/MINOR: acme: null pointer dereference upon allocation failure
2025-09-11BUG/MAJOR: stream: Force channel analysis on successful synchronous send
2025-09-10BUG/MINOR: stick-table: make sure never to miss a process_table_expire update
2025-09-10BUG/MEDIUM: ssl: Fix a crash if we failed to create the mux
2025-09-10BUG/MEDIUM: ssl: Fix a crash when using QUIC
2025-09-10DEBUG: stick-tables: export stktable_add_pend_updates() for better reporting
2025-09-10BUG/MEDIUM: stick-tables: don't loop on non-expirable entries
2025-09-10BUG/MINOR: activity: fix reporting of task latency
2025-09-09BUG/MEDIUM: ssl: create the mux immediately on early data
2025-09-09BUG/MEDIUM: h1: Allow reception if we have early data
2025-09-09DEBUG: peers: export functions that use locks
2025-09-09DEBUG: stream: count the number of passes in the connect loop
2025-09-09BUG/MINOR: check: ensure checks are compatible with QUIC servers
2025-09-09BUG/MEDIUM: checks: fix ALPN inheritance from server
2025-09-09BUG/MINOR: hq-interop: adjust parsing/encoding on backend side
2025-09-09BUG/MEDIUM: mux-h2: Reinforce conditions to report an error to app-layer stream
2025-09-09BUG/MEDIUM: mux-h2: Report RST/error to app-layer stream during 0-copy fwding
2025-09-09BUG/MINOR: mux-h2: Remove H2_CF_DEM_DFULL flags when the demux buffer is reset
2025-09-09BUG/MEDIUM: mux-h2: Restart reading when mbuf ring is no longer full
2025-09-09BUG/MEDIUM: mux-h2; Don't block reveives in H2_CS_ERROR and H2_CS_ERROR2 states
2025-09-09BUG/MEDIUM: mux-h2: Reset MUX blocking flags when a send error is caught
2025-09-08BUG/MINOR: quic: properly support GSO on backend side
2025-09-08BUG/MINOR: pools: Fix the dump of pools info to deal with buffers limitations
2025-09-08BUG/MEDIUM: proxy: fix crash with stop_proxy() called during init
2025-09-06BUG/MEDIUM: ssl: Properly initialize msg_controllen.
2025-09-06BUG/MINOR: cpu_topo: work around a small bug in musl's CPU_ISSET()
2025-09-05BUG/MINOR: quic: too short PADDING frame for too short packets
2025-09-05BUG/MINOR: tcpcheck: Don't use sni as pool-conn-name for non-SSL connections
2025-09-05BUG/MINOR: server: Update healthcheck when server settings are changed via CLI
2025-09-05BUG/MEDIUM: server: Use sni as pool connection name for SSL server only
2025-09-05BUG/MINOR: acl: Fix error message about several '-m' parameters
2025-09-04BUG/MINOR: log: fix potential memory leak upon error in add_to_logformat_list()
2025-09-04BUG/MEDIUM: quic-be: too early SSL_SESSION initialization
2025-09-04BUG/MINOR: connection: streamline conn detach from lists
2025-09-04BUG/MEDIUM: conn: fix UAF on connection after reversal on edge
2025-09-03BUG/MINOR: check: fix dst address when reusing a connection
2025-09-03BUG/MINOR: check: ensure check-reuse is compatible with SSL
2025-09-03MEDIUM: stats-file: add some BUG_ON() guards to ensure exported structs are not changed by accident
2025-09-03BUG/MEDIUM: peers: don't fail twice to grab the update lock
2025-09-03BUG/MINOR: stick-tables: never leave used entries without expiration
2025-09-03BUG/MEDIUM: stick-tables: don't leave the expire loop with elements deleted
2025-09-02BUG/MINOR: haproxy: be sure not to quit too early on soft stop
2025-09-02MEDIUM: quic: strengthen BUG_ON() for unpad Initial packet on client
2025-09-02BUG/MINOR: quic: pad Initial pkt with CONNECTION_CLOSE on client
2025-09-02BUG/MINOR: quic: fix padding issue on INITIAL retransmit
2025-09-02BUG/MINOR: quic: fix room check if padding requested
2025-09-02BUG/MINOR: quic: ignore AGAIN ncbuf err when parsing CRYPTO frames
2025-09-02BUG/MINOR: tools: Add OOM check for malloc() in indent_msg()
2025-09-02BUG/MINOR: compression: Add OOM check for calloc() in parse_compression_options()
2025-09-02BUG/MINOR: cfgparse: Add OOM check for calloc() in cfg_parse_listen()
2025-09-02BUG/MINOR: acl: Add OOM check for calloc() in smp_fetch_acl_parse()
2025-09-02BUG/MINOR: log: Add OOM checks for calloc() and malloc() in logformat parser and dup_logger()
2025-09-02BUG/MINOR: halog: Add OOM checks for calloc() in filter_count_srv_status() and filter_count_url()
2025-09-01BUG/MINOR: acl: Properly detect overwritten matching method
2025-09-01BUG/MINOR: server: Duplicate healthcheck's sni inherited from default server
2025-09-01BUG/MEDIUM: server: Duplicate healthcheck's alpn inherited from default server
2025-09-01BUG/MAJOR: mux-quic: fix crash on reload during emission
2025-09-01BUG/MEDIUM: quic: CRYPTO frame freeing without eb_delete()
2025-08-29BUG/BUILD: stats: fix build due to missing stat enum definition
2025-08-28BUG/MINOR: mux-quic: do not access conn after idle list insert
2025-08-28BUG/MINOR: server: decrement session idle_conns on del server
2025-08-28BUG/MINOR: connection: remove extra session_unown_conn() on reverse
2025-08-28BUG/MINOR: connection: rearrange union list members
2025-08-28BUG/MEDIUM: mworker: fix startup and reload on macOS
2025-08-28BUG/MINOR: acl: set arg_list->kw to aclkw->kw string literal if aclkw is found
2025-08-28BUG/MINOR: mux-quic: trace with non initialized qcc
2025-08-27BUG/MINOR: quic: reorder fragmented RX CRYPTO frames by their offsets
2025-08-27BUG/MEDIUM: quic-be: avoid crashes when releasing Initial pktns
2025-08-26BUG/MEDIUM: spoe: Improve error detection in SPOE applet on client abort
2025-08-25BUG/MEDIUM: mux-spop: Reject connection attempts from a non-spop frontend
2025-08-25BUG/MEDIUM: http_ana: handle yield for "stats http-request" evaluation
2025-08-22BUG/MINOR: quic: don't coalesce probing and ACK packet of same type
2025-08-22BUG/MAJOR: quic: fix INITIAL padding with probing packet only
2025-08-22BUG/MINOR: quic: do not emit probe data if CONNECTION_CLOSE requested
2025-08-22BUG/MEDIUM: quic: reset padding when building GSO datagrams
2025-08-21BUG/MAJOR: stream: Remove READ/WRITE events on channels after analysers eval
2025-08-21BUG/MEDIUM: ssl: apply ssl-f-use on every "ssl" bind
2025-08-21BUG/MEDIUM: quic-be: crash after backend CID allocation failures
2025-08-21BUG/MINOR: quic-be: missing Initial packet number space discarding
2025-08-21BUG/MEDIUM: mux-h2: fix crash on idle-ping due to unwanted ABORT_NOW
2025-08-20BUG/MEDIUM: mworker: more verbose error upon loading failure
2025-08-20BUG/MEDIUM: quic-be: do not initialize ->conn too early
2025-08-20BUG/MEDIUM: quic: crash after quic_conn allocation failures
2025-08-20BUG/MEDIUM: cli: Report inbuf is no longer full when a line is consumed
2025-08-20BUG/MINOR: spoe: Properly detect and skip empty NOTIFY frames
2025-08-14BUG/MINOR: mux-h1: fix wrong lock label
2025-08-14BUG/MEDIUM: quic: listener connection stuck during handshakes (OpenSSL 3.5)
2025-08-11BUG/MINOR: init: Initialize random seed earlier in the init process
2025-08-08BUG/MEDIUM: ssl: fix build with AWS-LC
2025-08-08BUG/MEDIUM: ssl: Fix 0rtt to the server
2025-08-08BUG/MINOR: stick-table: cap sticky counter idx with tune.nb_stk_ctr instead of MAX_SESS_STKCTR
2025-08-07BUG/MINOR: proxy: avoid NULL-deref in post_section_px_cleanup()
2025-08-07BUG/MINOR: cfgparse-listen: update err_code for fatal error on proxy directive
2025-08-07BUG/MINOR: cfgparse: immediately stop after hard error in srv_init()
2025-08-06DEBUG: pools: also retrieve file and line for direct callers of create_pool()
2025-08-06DEBUG: pools: store the pool registration file name and line number
2025-08-05BUG/MEDIUM: hlua_fcn: ensure systematic watcher cleanup for server list iterator
2025-08-05BUG/MINOR: acme: possible integer underflow in acme_txt_record()
2025-07-31BUG/MEDIUM: mux-quic: ensure Early-data header is set
2025-07-29BUG/MINOR: hlua: take default-path into account with lua-load-per-thread
2025-07-28BUG/MEDIUM: queue/stats: also use stream_set_srv_target() for pendconns
2025-07-25BUG/MEDIUM: logs: fix sess_build_logline_orig() recursion with options
2025-07-24BUG/MINOR: httpclient-cli: Don't try to dump raw headers in HTX mode
2025-07-24BUG/MEDIUM: dns: Reset reconnect tempo when connection is finally established
2025-07-24BUG/MEDIUM: hlua: Report to SC when output data are blocked on a lua socket
2025-07-24BUG/MEDIUM: hlua: Report to SC when data were consumed on a lua socket
2025-07-24BUG/MEDIUM: Remove sync sends from streams to applets
2025-07-24BUG/MINOR: applet: Fix applet_getword() to not return one extra byte
2025-07-24BUG/MEDIUM: stconn: Fix conditions to know an applet can get data from stream
2025-07-24BUG/MEDIUM: applet: State inbuf is no longer full if input data are skipped
2025-07-24BUG/MINOR: hlua: Skip headers when a receive is performed on an HTTP applet
2025-07-23BUG/MINOR: acme: allow "processing" in challenge requests
2025-07-23BUG/MINOR: mux-quic: ensure close-spread-time is properly applied
2025-07-23BUG/MINOR mux-quic: apply correctly timeout on output pending data
2025-07-23BUG/MEDIUM: acme: use POST-as-GET instead of GET for resources
2025-07-22BUG/MINOR: h3: fix uninitialized value in h3_req_headers_send()
2025-07-21BUG/MINOR: hq-interop: fix FIN transmission
2025-07-21BUG/MINOR: logs: fix log-steps extra log origins selection
2025-07-21BUG/MEDIUM: threads: Disable the workaround to load libgcc_s on macOS
2025-07-17BUG/MINOR: halog: exit with error when some output filters are set simultaneosly
2025-07-17BUG/MEDIUM: quic-be: CC buffer released from wrong pool
2025-07-16BUG/MINOR: applet: Don't trigger BUG_ON if the tid is not on appctx init
2025-07-16BUG/MINOR: quic: Wrong source address use on FreeBSD
2025-07-15BUG/MINOR: h3: properly handle interim response on BE side
2025-07-15BUG/MEDIUM: h3: handle interim response properly on FE side
2025-07-15BUG/MINOR: h3: ensure that invalid status code are not encoded (FE side)
2025-07-15BUG/MINOR: h3: properly realloc buffer after interim response encoding
2025-07-15BUG/MEDIUM: h3: do not overwrite interim with final response
2025-07-10BUG/MINOR: h1-htx: Don't forget to init flags in h1_format_htx_msg function
2025-07-10BUG/MINOR: mux-h1: Use configured error files if possible for early H1 errors
2025-07-09BUG/MINOR: h3: fix https scheme request encoding for BE side
2025-07-09BUG/MEDIUM: http-client: Notify applet has more data to deliver until the EOM
2025-07-09BUG/MEDIUM: http-client: Drain the request if an early response is received
2025-07-09BUG/MINOR: http-client: Reject any 101-switching-protocols response
2025-07-09BUG/MINOR: http-client: Ignore 1XX interim responses in non-HTX mode
2025-07-09BUG/MEDIUM: http-client: Test HTX_FL_EOM flag before commiting the HTX buffer
2025-07-09BUG/MEDIUM: http-client: Ask for more room when request data cannot be xferred
2025-07-09BUG/MEDIUM: http-client: Properly inc input data when HTX blocks are xferred
2025-07-09BUG/MEDIUM: http-client: Don't wake http-client applet if nothing was xferred
2025-07-09BUG/MEDIUM: quic: Crash after QUIC server callbacks restoration (OpenSSL 3.5)
2025-07-09BUG/MINOR: listener: really assign distinct IDs to shards
2025-07-08BUG/MINOR: resolvers: don't lower the case of binary DNS format
2025-07-07BUG/MINOR: quic-be: Malformed coalesced Initial packets
2025-07-07BUG/MINOR: quic: Missing TLS 1.3 QUIC cipher suites and groups inits (OpenSSL 3.5 QUIC API)
2025-07-07BUG/MEDIUM: quic: SSL/TCP handshake failures with OpenSSL 3.5
2025-07-06CI: set DEBUG_STRICT=2 for coverity scan
2025-07-04BUG/MINOR: http-act: Fix parsing of the expression argument for pause action
2025-07-04BUG/MINOR: proto-tcp: Take care to initialized tcp_md5sig structure
2025-07-03BUG/MINOR: ssl/ocsp: fix definition discrepancies with ocsp_update_init()
2025-07-02BUG/MINOR: ssl: crash in ssl_sock_io_cb() with SSL traces and idle connections
2025-07-01BUG/MINOR: httpclient: wrongly named httpproxy flag
2025-06-30BUG/MINOR: jwt: Copy input and parameters in dedicated buffers in jwt_verify converter
2025-06-30BUG/MEDIUM: mux-h2: Properly handle connection error during preface sending
2025-06-30BUG/MEDIUM: hlua: Forbid any L6/L7 sample fetche functions from lua services
2025-06-30BUG/MEDIUM: counters/server: fix server and proxy last_change mixup
2025-06-27BUG/MINOR: quic-be: Wrong retry_source_connection_id check
2025-06-26BUG/MINOR: tools: use my_unsetenv instead of unsetenv
2025-06-26BUG/MINOR: quic: wrong QUIC_FT_CONNECTION_CLOSE(0x1c) frame encoding
2025-06-25BUG/MEDIUM: ssl/clienthello: ECDSA with ssl-max-ver TLSv1.2 and no ECDSA ciphers
2025-06-24BUG/MINOR: log: Be able to use %ID alias at anytime of the stream's evaluation
2025-06-24BUG/MINOR: stream: Avoid recursive evaluation for unique-id based on itself
2025-06-23BUG/MINOR: tools: only reset argument start upon new argument
2025-06-20BUG/MEDIUM: quic: do not release BE quic-conn prior to upper conn
2025-06-20BUG/MAJOR: fwlc: Count an avoided server as unusable.
2025-06-18BUG/MINOR: mux-quic/h3: properly handle too low peer fctl initial stream
2025-06-17MINOR: h3: use BUG_ON() on missing request start-line
2025-06-16BUG/MINOR: mux-quic: check sc_attach_mux return value
2025-06-16BUG/MEDIUM: check: Set SOCKERR by default when a connection error is reported
2025-06-16BUG/MEDIUM: cli: Don't consume data if outbuf is full or not available
2025-06-16BUG/MINOR: quic: fix ODCID initialization on frontend side
2025-06-16BUG/MINOR: quic: Fix OSSL_FUNC_SSL_QUIC_TLS_got_transport_params_fn callback (OpenSSL3.5)
2025-06-13BUG/MINOR: quic: don't restrict reception on backend privileged ports
2025-06-13BUG/MINOR: http-ana: Properly handle keep-query redirect option if no QS
2025-06-12BUG/MINOR: quic: work around NEW_TOKEN parsing error on backend side
2025-06-12BUG/MINOR: quic: prevent crash on startup with -dt
2025-06-12BUG/MINOR: quic-be: CID double free upon qc_new_conn() failures
2025-06-12BUG/MEDIUM: mux-quic: adjust wakeup behavior
2025-06-12BUG/MINOR: hlua: Don't forget the return statement after a hlua_yieldk()
2025-06-11BUG/MINOR: config/server: reject QUIC addresses
2025-06-10BUG/MINIR: h1: Fix doc of 'accept-unsafe-...-request' about URI parsing
2025-06-10BUG/MEDIUM: fd: Use the provided tgid in fd_insert() to get tgroup_info
2025-06-06BUG/MINOR: quic: Missing SSL session object freeing
2025-06-06BUG/MINOR: config: fix arg number reported on empty arg warning
2025-06-06BUG/MINOR: config: emit warning for empty args only in discovery mode
2025-06-05BUG/MEDIUM: cli: Properly parse empty lines and avoid crashed
2025-06-04BUG/MINOR: mux-spop: Fix null-pointer deref on SPOP stream allocation failure
2025-06-03DEBUG: check: Add the healthcheck's expiration date in the trace messags
2025-06-03BUG/MEDIUM: check: Requeue healthchecks on I/O events to handle check timeout
2025-06-03BUG/MAJOR: leastconn: Protect tree_elt with the lbprm lock
2025-05-27BUG/MEDIUM: httpclient: Throw an error if an lua httpclient instance is reused
2025-05-27BUG/MEDIUM: hlua: Fix receive API for TCP applets to properly handle shutdowns
2025-05-27BUG/MEDIUM: hlua: Fix getline() for TCP applets to work with applet's buffers
2025-05-26BUG/MEDIUM: hlua: Properly detect shudowns for TCP applets based on the new API
2025-05-26BUG/MEDIUM: cli/ring: Properly handle shutdown in "show event" I/O handler
2025-05-26BUG/MEDIUM: h3: Declare absolute URI as normalized when a :authority is found
2025-05-26BUG/MINOR: h3: Set HTX flags corresponding to the scheme found in the request
2025-05-23BUG/MAJOR: cache: Crash because of wrong cache entry deleted
2025-05-22BUG/MEDIUM: server: fix potential null-deref after previous fix
2025-05-22BUG/MEDIUM: server: fix crash after duplicate GUID insertion
2025-05-21BUG/MINOR: acme: fix formatting issue in error and logs
2025-05-21BUG/MEDIUM: acme: check if acme domains are configured
2025-05-21BUG/MEDIUM: mux-quic: fix BUG_ON() on rxbuf alloc error
2025-05-20BUG/MEDIUM: wdt: always ignore the first watchdog wakeup
2025-05-19BUG/MAJOR: leastconn: never reuse the node after dropping the lock
2025-05-19BUG/MINOR: quic: fix crash on quic_conn alloc failure
2025-05-17BUG/MAJOR: queue: properly keep count of the queue length
2025-05-17BUG/MAJOR: leastconn: do not loop forever when facing saturated servers
2025-05-16BUG/MEDIUM: h1/h2/h3: reject forbidden chars in the Host header field
2025-05-16BUG/MINOR: h3: don't insert more than one Host header
2025-05-16BUG/MEDIUM: stconn: Disable 0-copy forwarding for filters altering the payload
2025-05-15BUG/MEDIUM: peers: also limit the number of incoming updates
2025-05-15BUG/MINOR: sink: detect and warn when using "send-proxy" options with ring servers
2025-05-14DEBUG: mux-spop: Review some trace messages to adjust the message or the level
2025-05-14BUG/MEDIUM: mux-spop; Don't report a read error if there are pending data
2025-05-14BUG/MEDIUM: mux-spop: Properly detect truncated frames on demux to report error
2025-05-14BUG/MEDIUM: spop-conn: Report short read for partial frames payload
2025-05-14BUG/MEDIUM: mux-spop: Properly handle CLOSING state
2025-05-13BUG/MEDIUM: mux-spop: Remove frame parsing states from the SPOP connection state
2025-05-13BUG/MINOR: mux-spop: Don't open new streams for SPOP connection on error
2025-05-13BUG/MINOR: mux-spop: Make the demux stream ID a signed integer
2025-05-13BUG/MINOR: mux-spop: Don't report error for stream if ACK was already received
2025-05-13BUG/MINOR: spoe: Don't report error on applet release if filter is in DONE state
2025-05-13BUG/MINOR: hlua: Fix Channel:data() and Channel:line() to respect documentation
2025-05-13BUG/MINOR: cpu-topo: fix group-by-cluster policy for disordered clusters
2025-05-12BUG/MEDIUM: h2/h3: reject some forbidden chars in :authority before reassembly
2025-05-12BUG/MINOR: server: perform lbprm deinit for dynamic servers
2025-05-12BUG/MINOR: server: dont depend on proxy for server cleanup in srv_drop()
2025-05-12BUG/MINOR: cfgparse: improve the empty arg position report's robustness
2025-05-12BUG/MINOR: tools: improve parse_line()'s robustness against empty args
2025-05-12BUG/MINOR: threads: fix soft-stop without multithreading support
2025-05-09BUG/MINOR: ssl/ckch: always ha_freearray() the previous entry during parsing
2025-05-09BUG/MINOR: ssl/ckch: always free() the previous entry during parsing
2025-05-09BUG/MINOR: ssl: prevent multiple 'crt' on the same ssl-f-use line
2025-05-09BUG/MINOR: ssl: doesn't fill conf->crt with first arg
2025-05-09DEBUG: pools: add a new integrity mode "backup" to copy the released area
2025-05-09DEBUG: pool: permit per-pool UAF configuration
2025-05-09BUG/MEDIUM: mux-quic: fix crash on invalid fctl frame dereference
2025-05-09BUG/MINOR: cfgparse: consider the special case of empty arg caused by \x00
2025-05-09BUG/MEDIUM: quic: free stream_desc on all data acked
2025-05-08BUG/MEDIUM: stick-table: always remove update before adding a new one
2025-05-08BUG/MINOR: cli: fix too many args detection for commands
2025-05-07BUG/MEDIUM: stick-tables: close a tiny race in __stksess_kill()
2025-05-07BUG/MEDIUM: peers: hold the refcnt until updating ts->seen
2025-05-07BUG/MINOR: quic: reject invalid max_udp_payload size
2025-05-07BUG/MINOR: quic: fix TP reject on invalid max-ack-delay
2025-05-07BUG/MINOR: quic: use proper error code on invalid received TP value
2025-05-07BUG/MINOR: quic: reject retry_source_cid TP on server side
2025-05-07BUG/MINOR: quic: use proper error code on invalid server TP
2025-05-07BUG/MINOR: quic: use proper error code on missing CID in TPs
2025-05-07BUG/MINOR: tools: only fill first empty arg when not out of range
2025-05-06BUG/MINOR: ssl: can't use crt-store some certificates in ssl-f-use
2025-05-06BUG/MAJOR: queue: lock around the call to pendconn_process_next_strm()
2025-05-06Revert "BUG/MEDIUM: mux-spop: Handle CLOSING state and wait for AGENT DISCONNECT frame"
2025-05-06BUG/MINOR: proxy: only use proxy_inc_fe_cum_sess_ver_ctr() with frontends
2025-05-06DEBUG: threads: display held locks in threads dumps
2025-05-05DEBUG: threads: merge successive idempotent lock operations in history
2025-05-05DEBUG: threads: don't keep lock label "OTHER" in the per-thread history
2025-05-05BUG/MINOR: tools: make parseline report the required space for the trailing 0
2025-05-05BUG/MINOR: tools: always terminate empty lines
2025-05-05BUG/MINOR: tools: do not create an empty arg from trailing spaces
2025-05-02BUG/MINOR: acme/cli: don't output error on success
2025-05-02BUG/MEDIUM: stktable: fix sc_*() BUG_ON() regression with ctx > 9
2025-05-02BUG/MAJOR: tasks: fix task accounting when killed
2025-05-02BUG/MEDIUM: quic: Let it be known if the tasklet has been released.
2025-05-02BUG/MINOR: acme: reinit the retries only at next request
2025-04-30BUG/MEDIUM: connections: Report connection closing in conn_create_mux()
2025-04-30BUG/MINOR: mux-spop: Use the right bitwise operator in spop_ctl()
2025-04-30BUG/MINOR: mux-h1: Fix trace message in h1_detroy() to not relay on connection
2025-04-30BUG/MINOR: mux-h1: Don't pretend connection was released for TCP>H1>H2 upgrade
2025-04-30BUG/MEDIUM: mux-spop: Handle CLOSING state and wait for AGENT DISCONNECT frame
2025-04-30BUG/MEDIUM: mux-spop: Wait end of handshake to declare a spop connection ready
2025-04-29BUG/MINOR: dns: prevent ds accumulation within dss
2025-04-29BUG/MINOR: dns: add tempo between 2 connection attempts for dns servers
2025-04-29BUG/MINOR: acme: remove references to virt@acme
2025-04-29BUG/MINOR: quic: ensure cwnd limits are always enforced
2025-04-29BUG/MINOR: acme: creating an account should not end the task
2025-04-29BUG/MINOR: mux-h2: fix the offset of the pattern for the ping frame
2025-04-29BUG/MINOR: acme: does not try to unlock after a failed trylock
2025-04-28BUG/MINOR: ssl/acme: free EVP_PKEY upon error
2025-04-28MEDIUM: thread: set DEBUG_THREAD to 1 by default
2025-04-28MEDIUM: threads: keep history of taken locks with DEBUG_THREAD > 0
2025-04-28MINOR: threads: turn the full lock debugging to DEBUG_THREAD=2
2025-04-28MINOR: threads: prepare DEBUG_THREAD to receive more values
2025-04-25BUG/MAJOR: listeners: transfer connection accounting when switching listeners
2025-04-25BUG/MAJOR: tasklets: Make sure he tasklet can't run twice
2025-04-25BUG/MINOR: master/cli: only parse the '@@' prefix on complete lines
2025-04-25Revert "BUG/MINOR: master/cli: properly trim the '@@' process name in error messages"
2025-04-25BUG/MEDIUM: cli: Handle applet shutdown when waiting for a command line
2025-04-24BUG/MINOR: master/cli: properly trim the '@@' process name in error messages
2025-04-24BUG/MINOR: ring: Fix I/O handler of "show event" command to not rely on the SC
2025-04-24BUG/MINOR: hlua: Fix I/O handler of lua CLI commands to not rely on the SC
2025-04-24BUG/MINOR: cli: Issue an error when too many args are passed for a command
2025-04-24BUG/MINOR: mux-quic: do not decode if conn in error
2025-04-24BUG/MINOR: mux-quic: fix possible infinite loop during decoding
2025-04-22BUG/MEDIUM: mux-spop: Respect the negociated max-frame-size value to send frames
2025-04-18BUG/MINOR: proxy: always detach a proxy from the names tree on free()
2025-04-18BUG/MINOR: quic: do not crash on CRYPTO ncbuf alloc failure
2025-04-17BUG/MINOR: debug: detect and prevent re-entrance in ha_thread_dump_fill()
2025-04-17BUG/MINOR: wdt/debug: avoid signal re-entrance between debugger and watchdog
2025-04-17BUG/MINOR debug: fix !USE_THREAD_DUMP in ha_thread_dump_fill()
2025-04-17BUG/MINOR: threads: set threads_idle and threads_harmless even with no threads
2025-04-17BUG/MINOR: mux-h2: do not apply timer on idle backend connection
2025-04-17BUG/MINOR: rhttp: ensure GOAWAY can be emitted after reversal
2025-04-17BUG/MINOR: rhttp: fix reconnect if timeout connect unset
2025-04-17BUG/MINOR: mux-h2: prevent past scheduling with idle connections
2025-04-17BUG/MEDIUM: hlua: fix hlua_applet_{http,tcp}_fct() yield regression (lost data)
2025-04-16BUG/MINOR: h3: reject request URI with invalid characters
2025-04-16BUG/MINOR: h3: reject invalid :path in request
2025-04-16BUG/MINOR: h3: filter upgrade connection header
2025-04-16BUG/MEDIUM: h3: trim whitespaces in header value prior to QPACK encoding
2025-04-16BUG/MEDIUM: h3: trim whitespaces when parsing headers value
2025-04-16BUG/MINOR: acme/cli: fix certificate name in error message
2025-04-16BUG/MINOR: acme: fix the exponential backoff of retries
2025-04-16BUG/MINOR: acme: key not restored upon error in acme_res_certificate() V2
2025-04-16Revert "BUG/MINOR: acme: key not restored upon error in acme_res_certificate()"
2025-04-15BUG/MEDIUM: http-ana: Report 502 from req analyzer only during rsp forwarding
2025-04-15BUG/MINOR: http-ana: Properly detect client abort when forwarding the response
2025-04-15BUILD: incompatible pointer type suspected with -DDEBUG_UNIT
2025-04-15BUG/MINOR: acme: fix possible NULL deref
2025-04-14DEBUG: counters: add the ability to enable/disable updating the COUNT_IF counters
2025-04-14DEBUG: counters: make COUNT_IF() only appear at DEBUG_COUNTERS>=1
2025-04-14DEBUG: rename DEBUG_GLITCHES to DEBUG_COUNTERS and enable it by default
2025-04-14DEBUG: init: report invalid characters in debug description strings
2025-04-14BUG/MINOR: debug: remove the trailing \n from BUG_ON() statements
2025-04-14BUG/MINOR: thread: protect thread_cpus_enabled_at_boot with USE_THREAD
2025-04-14BUG/MINOR: acme: key not restored upon error in acme_res_certificate()
2025-04-12BUG/MINOR: cpu-topo: check the correct variable for NULL after malloc()
2025-04-12BUG/MINOR: acme: ckch_conf_acme_init() when no filename
2025-04-10BUG/MINOR: hlua: fix invalid errmsg use in hlua_init()
2025-04-09BUG/MINOR: backend: do not use the source port when hashing clientip
2025-04-07BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refs
2025-04-07BUG/MINOR: log: fix CBOR encoding with LOG_VARTEXT_START() + lf_encode_chunk()
2025-04-03BUG/MINOR: hlua_fcn: fix potential UAF with Queue:pop_wait()
2025-04-03BUG/MINOR: server: ensure check-reuse-pool is copied from default-server
2025-04-03BUG/MEDIUM: peers: prevent learning expiration too far in futur from unsync node
2025-04-03BUG/MINOR: peers: fix expire learned from a peer not converted from ms to ticks
2025-04-03BUG/MEDIUM: stream: Fix a possible freeze during a forced shut on a stream
2025-04-02BUG/MEDIUM: backend: fix reuse with set-dst/set-dst-port
2025-04-02BUG/MINOR: backend: do not overwrite srv dst address on reuse
2025-04-02BUG/MINOR: rhttp: fix incorrect dst/dst_port values
2025-04-02BUG/MEDIUM: leastconn: Don't try to reposition if the server is down
2025-04-02BUG/MINOR: ssl/ckch: leak in error path
2025-04-01BUG/MINOR: config: silence .notice/.warning/.alert in discovery mode
2025-03-27BUG/MINOR: log: fix gcc warn about truncating NUL terminator while init char arrays
2025-03-20BUG/MINOR: mux-quic: remove extra BUG_ON() in _qcc_send_stream()
2025-03-20BUG/MEDIUM: mux-quic: fix crash on RS/SS emission if already close local
2025-03-20BUG/MINOR: mux-h2: Reset streams with NO_ERROR code if full response was already sent
2025-03-19BUG/MEDIUM: hlua/cli: fix cli applet UAF in hlua_applet_wakeup()
2025-03-18BUG/MINOR: limits: compute_ideal_maxconn: don't cap remain if fd_hard_limit=0
2025-03-18BUG/MINOR: hlua: fix optional timeout argument index for AppletTCP:receive()
2025-03-18BUG/MINOR: log: prevent saddr NULL deref in syslog_io_handler()
2025-03-13BUG/MINOR: stats: fix capabilities and hide settings for some generic metrics
2025-03-12BUG/MEDIUM: thread: use pthread_self() not ha_pthread[tid] in set_affinity
2025-03-07BUG/MINOR: cfgparse-tcp: relax namespace bind check
2025-03-07BUG/MINOR: stream: fix age calculation in "show sess" output
2025-03-07BUG/MINOR: server: dont return immediately from parse_server() when skipping checks
2025-03-06BUG/MINOR: cfgparse/peers: properly handle ignored local peer case
2025-03-06BUG/MINOR: cfgparse/peers: fix inconsistent check for missing peer server
2025-03-06BUG/MEIDUM: startup: return to initial cwd only after check_config_validity()
2025-03-05BUG/MINOR: log: set proper smp size for balance log-hash
2025-03-04DEBUG: init: Add a macro to register unit tests
2025-03-03DEBUG: init: add a way to register functions for unit tests
2025-03-03BUG/MINOR: server: check for either proxy-protocol v1 or v2 to send hedaer
2025-02-28BUG/MINOR: hq-interop: fix leak in case of rcv_buf early return
2025-02-28BUG/MEDIUM: mux-fcgi: Try to fully fill demux buffer on receive if not empty
2025-02-27BUG/MINOR: h3: do not report transfer as aborted on preemptive response
2025-02-27BUG/MINOR: server: fix the "server-template" prefix memory leak
2025-02-27BUG/MEDIUM: server: properly initialize PROXY v2 TLVs
2025-02-24BUG/MEDIUM: stream: don't use localtime in dumps from a signal handler
2025-02-24BUG/MINOR: h2: always trim leading and trailing LWS in header values
2025-02-21BUG/MEDIUM: stream: use non-blocking freq_ctr calls from the stream dumper
2025-02-21BUG/MEDIUM: stream: never allocate connection addresses from signal handler
2025-02-21BUG/MINOR: mux-h1: always make sure h1s->sd exists in h1_dump_h1s_info()
2025-02-21BUG/MINOR: stream: do not call co_data() from __strm_dump_to_buffer()
2025-02-21BUG/MINOR: sink: add tempo between 2 connection attempts for sft servers
2025-02-21BUG/MINOR: log: fix outgoing abns address family
2025-02-21BUG/MEDIUM: uxst: fix outgoing abns address family in connect()
2025-02-20BUG/MINOR: cfgparse: fix NULL ptr dereference in cfg_parse_peers
2025-02-20BUG/MEDIUM: spoe/mux-spop: Introduce an NOOP action to deal with empty ACK
2025-02-20BUG/MEDIUM: applet: Don't handle EOI/EOS/ERROR is applet is waiting for room
2025-02-18BUG/MINOR: mux-h2: Properly handle full or truncated HTX messages on shut
2025-02-18BUG/MINOR: mux-quic: prevent crash after MUX init failure
2025-02-18BUG/MINOR: quic: prevent crash on conn access after MUX init failure
2025-02-17BUG/MINOR: fcgi: Don't set the status to 302 if it is already set
2025-02-17BUG/MEDIUM: filters: Handle filters registered on data with no payload callback
2025-02-17BUG/MINOR: cli: Wait for the last ACK when FDs are xferred from the old worker
2025-02-17BUG/MEDIUM: cli: Be sure to drop all input data in END state
2025-02-17BUG/MINOR: startup: hap_register_feature() fix for partial feature name
2025-02-17BUG/MINOR: startup: leave at first post_section_parser which fails
2025-02-12BUG/MINOR: ssl/cli: "show ssl crt-list" lacks sigals
2025-02-12BUG/MINOR: ssl/cli: "show ssl crt-list" lacks client-sigals
2025-02-12BUG/MEDIUM: fd: mark FD transferred to another process as FD_CLONED
2025-02-12BUG/MINOR: mworker: post_section_parser for the last section in discovery
2025-02-12BUG/MINOR: mworker: section ignored in discovery after a post_section_parser
2025-02-12BUG/MINOR: quic: fix CRYPTO payload size calcul for encoding
2025-02-12BUG/MINOR: quic: reserve length field for long header encoding
2025-02-10DEBUG: thread: reduce the struct lock_stat to store only 30 buckets
2025-02-10DEBUG: thread: make lock_stat per operation instead of for all operations
2025-02-10DEBUG: thread: don't keep the redundant _locked counter
2025-02-10DEBUG: thread: report the wait time buckets for lock classes
2025-02-10DEBUG: thread: make lock time computation more consistent
2025-02-10DEBUG: thread: report the spin lock counters as seek locks
2025-02-10BUG/MEDIUM: debug: close a possible race between thread dump and panic()
2025-02-07BUG/MEDIUM: ssl: chosing correct certificate using RSA-PSS with TLSv1.3
2025-02-07BUG/MINOR: debug: make sure the "debug dev sched" tasks don't block stopping
2025-02-07BUG/MINOR: debug: make "debug dev sched" accept a negative TID
2025-02-06BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer
2025-02-06BUG/MINOR: flt-trace: Support only one name option
2025-02-06BUG/MINOR: auth: Fix a leak on error path when parsing user's groups
2025-02-06BUG/MINOR: config/userlist: Support one 'users' option for 'group' directive
2025-02-06BUG/MINOR: cli: Fix a possible infinite loop in _getsocks()
2025-02-06BUG/MINOR: cli: Fix memory leak on error for _getsocks command
2025-02-06BUG/MINOR: cli: Don't set SE flags from the cli applet
2025-02-06BUG/MEDIUM: mux-fcgi: Propagate flags to SE in fcgi_strm_wake_one_stream
2025-02-06BUG/MEDIUM: flt-spoe: Properly handle end of stream from the SPOE applet
2025-02-06BUG/MEDIUM: applet: Don't pretend to have more data to handle EOI/EOS/ERROR
2025-02-06BUG/MEDIUM: flt-spoe: Set/test applet flags instead of SE flags from I/O handler
2025-02-06BUG/MINOR: tevt/mux-h2: Set truncated receive/eos events at SE level on error
2025-02-03BUG/MINOR: http-check: Don't pretend a C-L heeader is set before adding it
2025-02-03BUG/MINOR: tcp-rules: Don't forward close during tcp-response content rules eval
2025-02-03DEBUG: mux-h1: Remove some debug counters
2025-02-03DEBUG: http-ana: Remove debug counters from HTTP analyzers
2025-02-03BUG/MINOR: tevt/http-ana: Remove badly placed event reports
2025-02-03BUG/MEDIUM: mux-fcgi: Properly handle read0 on partial records
2025-01-31BUG/MEDIUM: htx: wrong count computation in htx_xfer_blks()
2025-01-31BUG/MINOR: mux-h1: Only report a SE error on demux error
2025-01-30DEBUG: epoll: store and compare the FD's generation count with reported event
2025-01-30DEBUG: fd: add a counter of takeovers of an FD since it was last opened
2025-01-29BUG/MEDIUM: chunk: make sure to flush the trash pool before resizing
2025-01-28BUG/MINOR: stream: Properly handle "on-marked-up shutdown-backup-sessions"
2025-01-24BUG/MINOR: ssl: put ssl_sock_load_ca under SSL_NO_GENERATE_CERTIFICATES
2025-01-23BUG/MINOR: quic: do not increase congestion window if app limited
2025-01-23BUG/MEDIUM: mux-h1: Properly close H1C if an error is reported before sending data
2025-01-21MINOR: quic: Add a BUG_ON() on quic_tx_packet refcount
2025-01-21BUG/MINOR: quic: ensure a detached coalesced packet can't access its neighbours
2025-01-20BUG/MINOR: init: set HAPROXY_STARTUP_VERSION from the variable, not the macro
2025-01-20BUG/MAJOR: log/sink: possible sink collision in sink_new_from_srv()
2025-01-20BUG/MAJOR: quic: reject too large CRYPTO frames
2025-01-14BUG/MEDIUM: promex: Use right context pointers to dump backends extra-counters
2025-01-14BUG/MEDIUM: stktable: fix missing lock on some table converters
2025-01-10BUG/MINOR: quic: reject NEW_TOKEN frames from clients
2025-01-09BUG/MEDIUM: queues: Adjust the proxy counters when appropriate
2025-01-09BUG/MINOR: stktable: fix big-endian compatiblity in smp_to_stkey()
2025-01-08BUG/MEDIUM: h1-htx: Properly handle bodyless messages
2025-01-07BUG/MAJOR: ssl/ocsp: fix NULL conn object dereferencing to access QUIC TLS counters
2025-01-06BUG/MEDIUM: promex/resolvers: Don't dump metrics if no nameserver is defined
2025-01-03BUG/MINOR: mux-quic: handle closure of uni-stream
2025-01-03BUG/MINOR: mux-quic: fix wakeup on qcc_set_error()
2025-01-03BUG/MINOR: log: Allow to use if/unless conditionnals for do-log action
2025-01-02BUG/MINOR: cfgparse-tcp: handle a possible strdup() failure
2025-01-02BUG/MINOR: pool: handle a possible strdup() failure
2025-01-02BUG/MINOR: compression: handle a possible strdup() failure
2025-01-02BUG/MEDIUM: mux-quic: do not attach on already closed stream
2025-01-02BUG/MAJOR: mux-quic: properly fix BUG_ON on empty STREAM emission
2025-01-02Revert "BUG/MAJOR: mux-quic: fix BUG_ON on empty STREAM emission"
2025-01-02BUG/MEDIUM: mux-h2: Count copied data when looping on RX bufs in h2_rcv_buf()
2024-12-31BUG/MAJOR: mux-quic: fix BUG_ON on empty STREAM emission
2024-12-31BUG/MINOR: stktable: invalid use of stkctr_set_entry() with mixed table types
2024-12-25BUG/MINOR: debug: handle a possible strdup() failure
2024-12-25BUG/MINOR: mux_h1: handle a possible strdup() failure
2024-12-25BUG/MINOR: listener: handle a possible strdup() failure
2024-12-25BUG/MINOR: checks: handle a possible strdup() failure
2024-12-24BUG/MEDIUM: queues: Stricly respect maxconn for outgoing connections
2024-12-23BUG/MINOR: stats: fix segfault caused by uninitialized value in "show schema json"
2024-12-23BUG/MEDIUM: queue: Make process_srv_queue return the number of streams
2024-12-19BUG/MINOR: h2/rhttp: fix HTTP2 conn counters on reverse
2024-12-19BUG/MEDIUM: mux-quic: prevent BUG_ON() by refreshing frms on MAX_DATA
2024-12-18BUG/MEDIUM: mux-quic: do not mix qcc_io_send() return codes with pacing
2024-12-17MINOR: bug: make BUG_ON() fall back to ASSUME
2024-12-17BUG/MEDIUM: queues: Do not use pendconn_grab_from_px().
2024-12-17BUG/MEDIUM: queues: Make sure we call process_srv_queue() when leaving
2024-12-16BUG/MEDIUM: stconn: Only consider I/O timers to update stream's expiration date
2024-12-16BUG/MINOR: ssl/cli: 'show ssl ca-file' escape the first '*' of a filename
2024-12-16BUG/MINOR: ssl/cli: 'show ssl crl-file' escape the first '*' of a filename
2024-12-16BUG/MINOR: ssl/cli: 'show ssl cert' escape the first '*' of a filename
2024-12-13BUG/MINOR: quic: missing Startup accelerating probing bw states
2024-12-13BUG/MINOR: cli: cli_snd_buf: preserve \r\n for payload lines
2024-12-13BUG/MINOR: quic: too permissive exit condition for high loss detection in Startup (BBR)
2024-12-13BUG/MINOR: quic: fix the wrong tracked recovery start time value
2024-12-13BUG/MINOR: quic: reduce packet losses at least during ProbeBW_CRUISE (BBR)
2024-12-13BUG/MINOR: quic: underflow issue for bbr_inflight_hi_from_lost_packet()
2024-12-13BUG/MINOR: quic: remove max_bw filter from delivery rate sampling
2024-12-13BUG/MINOR: quic: wrong bbr_target_inflight() implementation
2024-12-13BUG/MINOR: quic: fix BBB max bandwidth oscillation issue.
2024-12-13BUG/MINOR: quic: wrong logical statement in in_recovery_period() (BBR)
2024-12-12MINOR: build: define DEBUG_STRESS
2024-12-11BUG/MINOR: hlua_fcn: restore server pairs iterator pointer consistency
2024-12-11BUG/MINOR: server-state: Fix expiration date of srvrq_check tasks
2024-12-11BUG/MINOR: http-fetch: Ignore empty argument string for query()
2024-12-10BUG/MEDIUM: stats/server: use watcher to track server during stats dump
2024-12-10BUG/MINOR: stats: decrement srv refcount on stats-file release
2024-12-10BUG/MINOR: resolvers: handle a possible strdup() failure
2024-12-10BUG/MINOR: ssl_crtlist: handle a possible strdup() failure
2024-12-10BUG/MINOR: namespace: handle a possible strdup() failure
2024-12-09BUG/MINOR: mworker: detach from tty when received READY from worker
2024-12-09BUG/MEDIUM: mworker: report status, if daemonized master fails
2024-12-09BUG/MEDIUM: startup: report status if daemonized process fails
2024-12-09BUG/MEDIUM: startup: don't daemonize if started with -c
2024-12-06BUG/MINOR: mux-h2: fix expression when detecting excess of CONTINUATION frames
2024-12-06BUG/MINOR: debug: COUNT_IF() should return true/false
2024-12-06BUG/MINOR: startup: fix error path for master, if can't open pidfile
2024-12-06BUG/MINOR: mworker: fix -D -W -sf/-st modes
2024-12-06BUG/MINOR: mworker: don't save program PIDs in oldpids
2024-12-05BUG/MINOR: config: Fix parsing of accept-invalid-http-{request,response}
2024-12-05BUG/MEDIUM: mux-h2: make sure not to touch dummy streams when sending WU
2024-12-05BUG/MINOR: quic: remove startup alert if GSO unsupported
2024-12-05BUG/MINOR: quic: remove startup alert if conn socket-owner unsupported
2024-12-05BUG/MEDIUM: mux-quic: remove pacing status when everything is sent
2024-12-04BUG/MINOR: init: do not call fork_poller() for non-forked processes
2024-12-04BUG/MEDIUM: init: make sure only daemonized processes change their session
2024-12-04BUG/MINOR: quic: fix bbr_inflight() calls with wrong gain value
2024-12-02BUG/MINOR: startup: fix pidfile creation
2024-12-02BUG/MINOR: startup: close pidfd and free global.pidfile in handle_pidfile()
2024-12-02BUG/MINOR: signal: register default handler for SIGINT in signal_init()
2024-12-02BUG/MINOR: listener: fix potential null pointer dereference in listener_release()
2024-11-29BUG/MINOR: h1-htx: Use default reason if not set when formatting the response
2024-11-29BUG/MEDIUM: http-ana: Reset request flag about data sent to perform a L7 retry
2024-11-29BUG/MEDIUM: quic: prevent stream freeze on pacing
2024-11-29BUG/MEDIUM: event_hdl: fix uninitialized value in async mode when no data is provided
2024-11-29BUG/MINOR: hlua_fcn: fix Patref:set() force parameter
2024-11-28BUG/MINOR: improve BBR throughput on very fast links
2024-11-28BUG/MINOR: log: fix lf_text() behavior with empty string
2024-11-27BUG/MEDIUM: sock: Remove FD_POLL_HUP during connect() if FD_POLL_ERR is not set
2024-11-26BUG/MEDIUM: quic: prevent EMSGSIZE with GSO for larger bufsize
2024-11-25BUG/MEDIUM: http-ana: Don't release too early the L7 buffer
2024-11-25BUG/MAJOR: quic: fix wrong packet building due to already acked frames
2024-11-25BUG/MEDIUM: quic: fix sending performance due to qc_prep_pkts() return
2024-11-25BUG/MINOR: mux-quic: fix show quic report of QCS prepared bytes
2024-11-22BUG/MINOR: quic: Avoid BUG_ON() on ->on_pkt_lost() BBR callback call
2024-11-22BUG/MAJOR: mux-h1: Properly handle wrapping on obuf when dumping the first-line
2024-11-21BUG/MEDIUM: pools/memprofile: always clean stale pool info on pool_destroy()
2024-11-21BUG/MINOR: activity/memprofile: reinitialize the free calls on DSO summary
2024-11-21BUG/MEDIUM: wdt: fix the stuck detection for warnings
2024-11-21BUG/MEDIUM: debug: don't set the STUCK flag from debug_handler()
2024-11-21BUG/MINOR: startup: init_early: remove obsolete comment
2024-11-21BUG/MINOR: config: allow to check HAPROXY_LOCALPEER in config
2024-11-21BUG/MINOR: startup: fix UAF when set the default for log_tag
2024-11-21BUG/MINOR: quic: Missing application limitations tracking for BBR
2024-11-21BUG/MINOR: cfgparse-quic: fix warning for cc-aglo with 0 burst
2024-11-21BUG/MINOR: cfgparse-quic: fix bbr initialization
2024-11-20BUG/MEDIUM: h3: Increase max number of headers when sending headers
2024-11-20BUG/MEDIUM: h3: Properly limit the number of headers received
2024-11-20BUG/MEDIUM: mux-h2: Check the number of headers in HEADERS frame after decoding
2024-11-20BUG/MEDIUM: mux-h2: Increase max number of headers when encoding HEADERS frames
2024-11-20BUG/MINOR: cfgparse-quic: fix renaming of max-window-size
2024-11-20BUG/MINOR: http-ana: Adjust the server status before the L7 retries
2024-11-19BUG/MINOR: http_ana: Report -1 for %Tr for invalid response only
2024-11-19BUG/MINOR: mworker-prog: don't warn about deprecated section with expose-deprecated-directives
2024-11-15MINOR: chunk: add a BUG_ON upon the next init_trash_buffer()
2024-11-15BUG/MEDIUM: clock: make sure now_ms cannot be TICK_ETERNITY
2024-11-15BUG/MINOR: peers: make sure to always apply offsets to now_ms in expiration
2024-11-15BUG/MINOR: mux_quic: make sure to always apply offsets to now_ms in expiration
2024-11-15BUG/MEDIUM: mailers: make sure to always apply offsets to now_ms in expiration
2024-11-15BUG/MINOR: debug: do not set task expiration to TICK_ETERNITY
2024-11-15BUG/MEDIUM: checks: make sure to always apply offsets to now_ms in expiration
2024-11-15BUG/MINOR: Don't report early srv aborts on request forwarding in DONE state
2024-11-15BUG/MEDIUM: mux-h2: Don't send RST_STREAM frame for streams with no ID
2024-11-14BUG/MINOR: deinit: release uri_auth admin rules
2024-11-13BUG/MEDIUM: resolvers: Insert a non-executed resulution in front of the wait list
2024-11-13BUG/MEDIUM: stconn: Don't forward shut for SC in connecting state
2024-11-13BUG/MINOR: cli: don't show sockpairs in HAPROXY_CLI and HAPROXY_MASTER_CLI
2024-11-13BUG/MINOR: startup: set HAPROXY_CFGFILES in read_cfg
2024-11-08BUG/MEDIUM: quic: prevent crash due to CRYPTO parsing error
2024-11-08BUG/MEDIUM: mux-h2: try to wait for the peer to read the GOAWAY
2024-11-07BUG/MINOR: guid/server: ensure thread-safety on GUID insert/delete
2024-11-06DEBUG: wdt: set the default blocked task delay to 100 ms
2024-11-06DEBUG: wdt: add a stats counter "BlockedTrafficWarnings" in show info
2024-11-06DEBUG: wdt: make the blocked traffic warning delay configurable
2024-11-06DEBUG: cli: make it possible for "debug dev loop" to trigger warnings
2024-11-06DEBUG: wdt: better detect apparently locked up threads and warn about them
2024-11-06BUG/MEDIUM: quic: do not consider ACK on released stream as error
2024-11-06BUG/MINOR: mworker: do 'program' postparser checks in read_cfg_in_discovery_mode
2024-11-06BUG/MINOR: quic: repeat packet parsing to deal with fragmented CRYPTO
2024-11-05BUG/MINOR: quic: fix malformed probing packet building
2024-11-05DEBUG: cli: support closing "hard" using close() in addition to fd_delete()
2024-11-05BUG/MEDIUM: promex: Fix dump of extra counters
2024-10-31BUG/MINOR: http-ana: Report internal error if an action yields on a final eval
2024-10-31BUG/MEDIUM: mux-h1: Fix how timeouts are applied on H1 connections
2024-10-31DEBUG: mux-h1: Add H1C expiration dates in trace messages
2024-10-30BUG/MINOR: startup: don't dump polling info for master in verbose mode
2024-10-30BUG/MINOR: startup: dump keywords only in worker if started with -W -dKAll
2024-10-30BUG/MINOR: startup: dump libs only in worker if started with -W -dL
2024-10-30BUG/MINOR: startup: don't fork worker if started with -c -W
2024-10-29BUG/MINOR: errors: print_message: don't allocate startup logs ring
2024-10-29BUG/MINOR: errors: startup_logs_free: set global startup_logs ptr to NULL
2024-10-29BUG/MINOR: mworker: mworker_reexec: unset MODE_STARTING before free startup logs ring
2024-10-29BUG/MINOR: ssl/cli: 'set ssl cert' does not check the transaction name correctly
2024-10-29BUG/MINOR: trace: stop rewriting argv with -dt
2024-10-26BUG/MINOR: mworker/cli: fix mworker_cli_global_proxy_new_listener
2024-10-26BUG/MEIDUM: mworker: fix fd leak from master to worker
2024-10-24BUG/MINOR: stconn: Don't disable 0-copy FF if EOS was reported on consumer side
2024-10-24BUG/MINOR: http-ana: Fix wrong client abort reports during responses forwarding
2024-10-24BUG/MEDIUM: stconn: Report blocked send if sends are blocked by an error
2024-10-24BUG/MEDIUM: server: fix race on servers_list during server deletion
2024-10-24BUG/MINOR: server: fix dynamic server leak with check on failed init
2024-10-24BUG/MINOR: mworker: show worker warnings in startup logs
2024-10-24BUG/MINOR: mworker/cli: show master startup logs in recovery mode
2024-10-24BUG/MINOR: mux-h1: Fix conditions on pipe in some COUNT_IF()
2024-10-24DEBUG: mux-h1: Add debug counters to track errors with in/out pending data
2024-10-23BUG/MEDIUM: connection/http-reuse: fix address collision on unhandled address families
2024-10-22DEBUG: mux-h1: Add debug counters to track some errors
2024-10-22DEBUG: stream: Add debug counters to track some client/server aborts
2024-10-22BUG/MINOR: stconn: Pretend the SE have more data to deliver on abortonclose
2024-10-22BUG/MEDIUM: mux-h2: Remove H2S from send list if data are sent via 0-copy FF
2024-10-22BUG/MEDIUM: stats-html: Never dump more data than expected during 0-copy FF
2024-10-21MEDIUM: debug: add match counters for BUG_ON/WARN_ON/CHECK_IF
2024-10-21CLEANUP: debug: make the BUG_ON() macros check the condition in the outer one
2024-10-21BUG/MINOR: mux-quic: do not close STREAM with empty FIN if no data sent
2024-10-21BUG/MINOR: mworker: fix mworker-max-reloads parser
2024-10-18BUG/MINOR: sample: free err2 in smp_resolve_args for type ARGT_REG
2024-10-17CLEANUP: http_ext: remove useless BUG_ON() in http_handle_xot_header()
2024-10-17BUG/MEDIUM: quic: avoid freezing 0RTT connections
2024-10-17BUG/MINOR: quic: avoid leaking post handshake frames
2024-10-17BUG/MAJOR: filters/htx: Add a flag to state the payload is altered by a filter
2024-10-17BUG/MEDIUM: stconn: Check FF data of SC to perform a shutdown in sc_notify()
2024-10-17BUG/MINOR: http-ana: Don't report a server abort if response payload is invalid
2024-10-17BUG/MEDIUM: stconn: Wait iobuf is empty to shut SE down during a check send
2024-10-17BUG/MINOR: resolvers/mworker: missing default resolvers in mworker mode
2024-10-17BUG/MEDIUM: mworker/httpclient: initialization skipped by accident in mworker mode
2024-10-17BUG/MINOR: httpclient: return NULL when no proxy available during httpclient_new()
2024-10-16BUG/MINOR: mworker: fix memory leak due to master-worker fork
2024-10-16DEBUG: mux-h2/flags: add H2_CF_DEM_RXBUF & H2_SF_EXPECT_RXDATA for the decoder
2024-10-16BUG/MEDIUM: queue: make sure never to queue when there's no more served conns
2024-10-16BUG/MEDIUM: server: server stuck in maintenance after FQDN change
2024-10-16BUG/MEDIUM: quic: support wait-for-handshake
2024-10-16BUG/MINOR: stream: unblock stream on wait-for-handshake completion
2024-10-12BUG/MINOR: mux-h2/traces: present the correct buffer for trailers errors traces
2024-10-10BUG/MEDIUM: mux-quic: ensure timeout server is active for short requests
2024-10-09BUG/MEDIUM: quic: properly decount out-of-order ACK on stream release
2024-10-09BUG/MINOR: quic: fix discarding of already stored out-of-order ACK
2024-10-08BUG/MEDIUM: hlua: properly handle sample func errors in hlua_run_sample_{fetch,conv}()
2024-10-08BUG/MEDIUM: hlua: make hlua_ctx_renew() safe
2024-10-04BUG/MINOR: stats: Fix the name for the total number of streams created
2024-10-04BUG/MAJOR: mux-quic: do not crash on empty STREAM frame emission
2024-10-02BUG/MINOR: quic: fix trace on releasing STREAM frame after ack
2024-10-02BUG/MINOR: mux-quic: fix crash on qcc_init() early return
2024-10-02BUG/MINOR: http-ana: Disable fast-fwd for unfinished req waiting for upgrade
2024-10-02BUG/MINOR: mux-h1: Fix condition to set EOI on SE during zero-copy forwarding
2024-10-01BUG/MEDIUM: queue: always dequeue the backend when redistributing the last server
2024-10-01BUG/MINOR: cfgparse-global: fix allowed args number for setenv
2024-09-30BUG/MINOR: mcli: Pretend the mux have more data to deliver between two commands
2024-09-27BUG/MINOR: queue: make sure that maintenance redispatches server queue
2024-09-27BUG/MINOR: server: make sure the HMAINT state is part of MAINT
2024-09-27BUG/MEDIUM: stream: make stream_shutdown() async-safe
2024-09-27Revert "BUG/MINOR: server: shut down streams under thread isolation"
2024-09-25BUG/MEDIUM: cli: Deadlock when setting frontend maxconn
2024-09-24BUG/MEDIUM: cli: Be sure to catch immediate client abort
2024-09-21BUG/MINOR: proxy: also make the cli and resolvers use the global name
2024-09-21BUG/MINOR: server: shut down streams under thread isolation
2024-09-20BUG/MINOR: cfgparse: detect another uncaught case of duplicate defaults
2024-09-18BUG/MINOR: mux-quic: report glitches to session
2024-09-17BUG/MINOR: cfgparse: detect incorrect overlap of same backend names
2024-09-17BUG/MINOR: cfgparse-listen: fix option httpslog override warning message
2024-09-17BUG/MINOR: fix missing "'option httpslog' overrides previous 'option tcplog clf'..." detection
2024-09-17BUG/MINOR: fix missing "log-format overrides previous 'option tcplog clf'..." detection
2024-09-16BUG/MEDIUM: promex: Wait to have the request before sending the response
2024-09-16BUG/MEDIUM: cache/stats: Wait to have the request before sending the response
2024-09-16BUG/MEDIUM: sc_strm/applet: Wake applet after a successfull synchronous send
2024-09-16BUG/MINOR: peers: local entries updates may not be advertised after resync
2024-09-13BUG/MEDIUM: queue: implement a flag to check for the dequeuing
2024-09-12BUG/MINOR: clock: validate that now_offset still applies to the current date
2024-09-12BUG/MINOR: clock: make time jump corrections a bit more accurate
2024-09-12BUG/MINOR: polling: fix time reporting when using busy polling
2024-09-10BUG/MINOR: pattern: do not leave a leading comma on "set" error messages
2024-09-09BUG/MINOR: h1-htx: Don't flag response as bodyless when a tunnel is established
2024-09-09BUG/MAJOR: mux-h1: Wake SC to perform 0-copy forwarding in CLOSING state
2024-09-09BUG/MEDIUM: pattern: prevent UAF on reused pattern expr
2024-09-09BUG/MEDIUM: pattern: prevent uninitialized reads in pat_match_{str,beg}
2024-09-09BUG/MINOR: pattern: prevent const sample from being tampered in pat_match_beg()
2024-09-08BUG/MEDIUM: clock: detect and cover jumps during execution
2024-09-06BUG/MEDIUM: mux-h1/mux-h2: Reject upgrades with payload on H2 side only
2024-09-04BUG/MEDIUM: clock: also update the date offset on time jumps
2024-09-03BUG/MEDIUM: mux-pt: Fix condition to perform a shutdown for writes in mux_pt_shut()
2024-09-03BUG/MINOR: Crash on O-RTT RX packet after dropping Initial pktns
2024-09-03BUG/MINOR: mux-spop: always clear MUX_MFULL and DEM_MROOM when clearing the mbuf
2024-09-03BUG/MAJOR: mux-h2: always clear MUX_MFULL and DEM_MROOM when clearing the mbuf
2024-09-03BUG/MEDIUM: mux-h1: Properly handle empty message when an error is triggered
2024-09-03BUG/MINOR: quic: unexploited retransmission cases for Initial pktns.
2024-09-02BUG/MEDIUM: cli: Always release back endpoint between two commands on the mcli
2024-09-02BUG/MEDIUM: mux-pt: Never fully close the connection on shutdown
2024-09-02BUG/MINOR: quic: Crash from trace dumping SSL eary data status (AWS-LC)
2024-08-30BUG/MEDIUM: quic: always validate sender address on 0-RTT
2024-08-30BUG/MINOR: quic: Missing incrementation in NEW_TOKEN frame builder
2024-08-30BUG/MINIR: proxy: Match on 429 status when trying to perform a L7 retry
2024-08-28BUG/MEDIUM: stream: Prevent mux upgrades if client connection is no longer ready
2024-08-28BUG/MEDIUM: mux-h2: Set ES flag when necessary on 0-copy data forwarding
2024-08-23BUG/MINOR: haproxy: free init_env in deinit only if allocated
2024-08-20BUG/MINOR: cfgparse-global: remove tune.fast-forward from common_kw_list
2024-08-20BUG/MINOR: cfgparse-global: remove redundant goto
2024-08-20BUG/MINOR: cfgparse-global: clean common_kw_list
2024-08-20BUG/MINOR: cfgparse-global: fix err msg in mworker keyword parser
2024-08-20BUG/MINOR: stats: add lang attribute to html tag
2024-08-20BUG/MINOR: stats: fix color of input elements in dark mode
2024-08-13BUG/MINOR: release-estimator: fix relative scheme in CHANGELOG URL
2024-08-13BUG/MINOR: pattern: pat_ref_set: return 0 if err was found
2024-08-13BUG/MINOR: pattern: pat_ref_set: fix UAF reported by coverity
2024-08-11BUG/MINOR: tools: make fgets_from_mem() stop at the end of the input
2024-08-09BUG/MINOR: h3: properly reject too long header responses
2024-08-09BUG/MINOR: cfgparse: parse_cfg: fix null ptr dereference reported by coverity
2024-08-09BUG/MINOR: proto_uxst: delete fd from fdtab if listen() fails
2024-08-09BUG/MINOR: mux-quic: do not send too big MAX_STREAMS ID
2024-08-08BUG/MEDIUM: mworker/cli: fix pipelined modes on master CLI
2024-08-08BUG/MINOR: proto_tcp: keep error msg if listen() fails
2024-08-08BUG/MINOR: proto_tcp: delete fd from fdtab if listen() fails
2024-08-07BUG/MINOR: quic: prevent freeze after early QCS closure
2024-08-07BUG/MINOR: quic/trace: make quic_conn_enc_level_init() emit NEW not CLOSE
2024-08-07BUG/MINOR: trace/quic: make "qconn" selectable as a lockon criterion
2024-08-07BUG/MINOR: trace: automatically start in waiting mode with "start "
2024-08-07BUG/MEDIUM: trace: fix null deref in lockon mechanism since TRACE_ENABLED()
2024-08-07BUG/MINOR: trace/quic: permit to lock on frontend/connect/session etc
2024-08-07BUG/MINOR: trace/quic: enable conn/session pointer recovery from quic_conn
2024-08-07BUG/MEDIUM: quic: handle retransmit for standalone FIN STREAM
2024-08-06BUG/MEDIUM: server/addr: fix tune.events.max-events-at-once event miss and leak
2024-08-06BUG/MINOR: fcgi-app: handle a possible strdup() failure
2024-08-05BUG/MINOR: quic: Too short datagram during packet building failures (aws-lc only)
2024-08-02BUG/MINOR: quic: Too shord datagram during O-RTT handshakes (aws-lc only)
2024-08-02BUG/MEDIUM: peer: Notify the applet won't consume data when it waits for sync
2024-08-02BUG/MEDIUM: mux-h2: Propagate term flags to SE on error in h2s_wake_one_stream
2024-08-02BUG/MEDIUM: h2: Only report early HTX EOM for tunneled streams
2024-08-02BUG/MEDIUM: http-ana: Report error on write error waiting for the response
2024-08-01BUG/MINOR: h2: reject extended connect for h2c protocol
2024-08-01BUG/MINOR: h1: do not forward h2c upgrade header token
2024-08-01BUG/MIONR: quic: fix fc_lost
2024-08-01BUG/MINOR: quic: fix fc_rtt/srtt values
2024-07-31BUG/MEDIUM: quic: prevent conn freeze on 0RTT undeciphered content
2024-07-30BUG/MEDIUM: ssl: 0-RTT initialized at the wrong place for AWS-LC
2024-07-30BUG/MEDIUM: ssl: reactivate 0-RTT for AWS-LC
2024-07-30BUG/MINOR: stconn: bs.id and fs.id had their dependencies incorrect
2024-07-30BUG/MEDIUM: mux-pt/mux-h1: Release the pipe on connection error on sending path
2024-07-30BUG/MEDIUM: stconn: Report error on SC on send if a previous SE error was set
2024-07-29BUG/MEDIUM: queue: deal with a rare TOCTOU in assign_server_and_queue()
2024-07-26BUG/MEDIUM: jwt: Clear SSL error queue on error when checking the signature
2024-07-26BUG/MEDIUM: quic: fix invalid conn reject with CONNECTION_REFUSED
2024-07-24BUG/MINOR: quic: Lack of precision when computing K (cubic only cc)
2024-07-24BUG/MEDIUM: sink: properly init applet under sft lock
2024-07-19BUG/MINOR: quic: Non optimal first datagram.
2024-07-18BUG/MINOR: cli: Atomically inc the global request counter between CLI commands
2024-07-18BUG/MINOR: server: Don't warn fallback IP is used during init-addr resolution
2024-07-18BUG/MINOR: stick-table: fix crash for src_inc_gpc() without stkcounter
2024-07-18BUG/MEDIUM: startup: fix zero-warning mode
2024-07-17BUG/MAJOR: mux-h2: force a hard error upon short read with pending error
2024-07-17BUG/MEDIUM: ssl_sock: fix deadlock in ssl_sock_load_ocsp() on error path
2024-07-16BUG/MEDIUM: debug/cli: fix "show threads" crashing with low thread counts
2024-07-16BUG/MINOR: do not close uninit FD in quic_test_socketops()
2024-07-12BUG/MINOR: session: Eval L4/L5 rules defined in the default section
2024-07-11BUG/MINOR: limits: fix license type in limits.h
2024-07-11BUG/MEDIUM: bwlim: Be sure to never set the analyze expiration date in past
2024-07-10BUG/MEDIUM: spoe: Be sure to create a SPOE applet if none on the current thread
2024-07-10BUG/MEDIUM: h1: Reject empty Transfer-encoding header
2024-07-10BUG/MINOR: h1: Reject empty coding name as last transfer-encoding value
2024-07-10BUG/MINOR: h1: Fail to parse empty transfer coding names
2024-07-08BUG/MINOR: jwt: fix variable initialisation
2024-07-08BUG/MEDIUM: init: fix fd_hard_limit default in compute_ideal_maxconn
2024-07-05BUG/MEDIUM: peers: Fix crash when syncing learn state of a peer without appctx
2024-07-04BUG/MEDIUM: quic: prevent crash on accept queue full
2024-07-03MINOR: quic: add 2 BUG_ON() on datagram dispatch
2024-07-03BUG/MINOR: jwt: don't try to load files with HMAC algorithm
2024-07-03BUG/MEDIUM: server: fix race on server_atomic_sync()
2024-07-02BUG/MEDIUM: hlua/cli: Fix lua CLI commands to work with applet's buffers
2024-07-01BUG/MINOR: promex: Remove Help prefix repeated twice for each metric
2024-07-01BUG/MEDIUM: quic: fix possible exit from qc_check_dcid() without unlocking
2024-07-01BUG/MINOR: quic: Wrong datagram building when probing.
2024-06-28BUG/MINOR: quic: fix race-condition on trace for CID retrieval
2024-06-28BUG/MINOR: quic: fix race condition in qc_check_dcid()
2024-06-28BUG/MEDIUM: quic: fix race-condition in quic_get_cid_tid()
2024-06-28BUG/MEDIUM: h3: ensure the ":scheme" pseudo header is totally valid
2024-06-28BUG/MEDIUM: h3: ensure the ":method" pseudo header is totally valid
2024-06-28BUG/MEDIUM: server/dns: prevent DOWN/UP flap upon resolution timeout or error
2024-06-27BUG/MINOR: server: fix first server template name lookup UAF
2024-06-26BUG/MEDIUM: stick-table: Decrement the ref count inside lock to kill a session
2024-06-26BUG/MINOR: hlua: report proper context upon error in hlua_cli_io_handler_fct()
2024-06-24BUG/MINOR: quic: fix BUG_ON() on Tx pkt alloc failure
2024-06-24BUG/MINOR: h3: fix BUG_ON() crash on control stream alloc failure
2024-06-24BUG/MINOR: mux-quic: fix crash on qcs SD alloc failure
2024-06-24BUG/MINOR: h3: fix crash on STOP_SENDING receive after GOAWAY emission
2024-06-19BUG/MAJOR: quic: do not loop on emission on closing/draining state
2024-06-19BUG/MAJOR: quic: fix padding with short packets
2024-06-17BUG/MINOR: proxy: fix email-alert leak on deinit() (2nd try)
2024-06-17BUG/MEDIUM: proxy: fix email-alert invalid free
2024-06-17BUG/MEDIUM: ssl: AWS-LC + TLSv1.3 won't do ECDSA in RSA+ECDSA configuration
2024-06-14DEBUG: hlua: distinguish burst timeout errors from exec timeout errors
2024-06-14BUG/MINOR: log: fix broken '+bin' logformat node option
2024-06-12BUG/MINOR: quic: fix padding of INITIAL packets
2024-06-12BUG/MAJOR: mux-h1: Prevent any UAF on H1 connection after draining a request
2024-06-12BUG/MINOR: promex: Skip resolvers metrics when there is no resolver section
2024-06-11BUG/MEDIUM: log: fix lf_expr_postcheck() behavior with default section
2024-06-11BUG/MEDIUM: proxy: fix UAF with {tcp,http}checks logformat expressions
2024-06-11BUG/MINOR: proxy: fix header_unique_id leak on deinit()
2024-06-11BUG/MINOR: proxy: fix source interface and usesrc leaks on deinit()
2024-06-11BUG/MINOR: proxy: fix dyncookie_key leak on deinit()
2024-06-11BUG/MINOR: proxy: fix check_{command,path} leak on deinit()
2024-06-11BUG/MINOR: proxy: fix email-alert leak on deinit()
2024-06-11BUG/MINOR: proxy: fix log_tag leak on deinit()
2024-06-11BUG/MINOR: proxy: fix server_id_hdr_name leak on deinit()
2024-06-10BUG/MINOR: mux-h1: Use the right variable to set NEGO_FF_FL_EXACT_SIZE flag
2024-06-10BUG/MAJOR: mux-h1: Properly copy chunked input data during zero-copy nego
2024-06-10BUG/MEDIUM: stconn/mux-h1: Fix suspect change causing timeouts
2024-06-10BUG/MINOR: quic: ensure Tx buf is always purged
2024-06-10BUG/MINOR: quic: fix computed length of emitted STREAM frames
2024-06-07BUG/MEDIUM: ssl: bad auth selection with TLS1.2 and WolfSSL
2024-06-05BUG/MEDIUM: ssl: wrong priority whem limiting ECDSA ciphers in ECDSA+RSA configuration
2024-06-05BUG/MEDIUM: mux-quic: Don't unblock zero-copy fwding if blocked during nego
2024-06-04BUG/MINOR: hlua: fix leak in hlua_ckch_set() error path
2024-06-04BUG/MINOR: hlua: prevent LJMP in hlua_traceback()
2024-06-04BUG/MINOR: hlua: fix unsafe hlua_pusherror() usage
2024-06-04BUG/MINOR: hlua: don't use lua_pushfstring() when we don't expect LJMP
2024-06-04BUG/MINOR: quic: prevent crash on qc_kill_conn()
2024-06-04BUG/MEDIUM: mux-quic: Unblock zero-copy forwarding if the txbuf can be released
2024-06-04BUG/MEDIUM: h1-htx: Don't state interim responses are bodyless
2024-06-03BUG/MINOR: hlua: use CertCache.set() from various hlua contexts
2024-05-31BUG/MINOR: tools: fix possible null-deref in env_expand() on out-of-memory
2024-05-31BUG/MINOR: tcpcheck: report correct error in tcp-check rule parser
2024-05-31BUG/MINOR: cfgparse: remove the correct option on httpcheck send-state warning
2024-05-28BUG/MINOR: activity: fix Delta_calls and Delta_bytes count
2024-05-28BUG/MINOR: ssl/ocsp: init callback func ptr as NULL
2024-05-24BUG/MINOR: server: Don't reset resolver options on a new default-server line
2024-05-24BUG/MINOR: http-htx: Support default path during scheme based normalization
2024-05-24BUG/MEDIUM: server/dns: preserve server's port upon resolution timeout or error
2024-05-24BUG/MINOR: rhttp: initialize session origin after preconnect reversal
2024-05-24BUG/MINOR: quic: adjust restriction for stateless reset emission
2024-05-24DEBUG: pollers/fd: add thread id suffix to per-thread memory areas name hints
2024-05-24DEBUG: tools: add vma_set_name_id() helper
2024-05-24BUG/MEDIUM: stick-tables: make sure never to create two same remote entries
2024-05-24BUG/MEDIUM: stick-tables: Fix race with peers when killing a sticky session
2024-05-24BUG/MEDIUM: stick-tables: Fix race with peers when trashing oldest entries
2024-05-23BUG/MEDIUM: mux-quic: Create sedesc in same time of the QUIC stream
2024-05-22BUG/MEDIUM: quic_tls: prevent LibreSSL < 4.0 from negotiating CHACHA20_POLY1305
2024-05-22BUG/MAJOR: quic: Crash with TLS_AES_128_CCM_SHA256 (libressl only)
2024-05-22BUG/MINOR: sock: fix sock_create_server_socket
2024-05-22BUG/MINOR: rhttp: fix task_wakeup state
2024-05-22BUG/MINOR: rhttp: prevent listener suspend
2024-05-22BUG/MEDIUM: rhttp: fix preconnect on single-thread
2024-05-22BUG/MINOR: server: free PROXY v2 TLVs on srv drop
2024-05-22BUG/MINOR: connection: parse PROXY TLV for LOCAL mode
2024-05-22BUG/MINOR: http-ana: Don't crush stream termination condition on internal error
2024-05-21BUG/MEDIUM: proto: fix fd leak in _connect_server
2024-05-21DEBUG: fd: add name hint for large memory areas
2024-05-21DEBUG: errors: add name hint for startup-logs memory area
2024-05-21DEBUG: pollers: add name hint for large memory areas used by pollers
2024-05-21DEBUG: sink: add name hint for memory area used by memory-backed sinks
2024-05-21DEBUG: shctx: name shared memory using vma_set_name()
2024-05-21DEBUG: tools: add vma_set_name() helper
2024-05-21BUG/MINOR: ring: free ring's allocated area not ring's usable area when using maps
2024-05-17BUG/MINOR: stats: Don't state the 303 redirect response is chunked
2024-05-17BUG/MEDIUM: fd: prevent memory waste in fdtab array
2024-05-15BUG/MAJOR: h1: Be stricter on request target validation during message parsing
2024-05-15BUG/MEDIUM: h1: Reject CONNECT request if the target has a scheme
2024-05-15BUG/MINOR: h1: Check authority for non-CONNECT methods only if a scheme is found
2024-05-15BUG/MEDIUM: muxes: enforce buf_wait check in takeover()
2024-05-15BUG/MINOR: ssl_sock: fix xprt_set_used() to properly clear the TASK_F_USR1 bit
2024-05-15BUG/MEDIUM: stick-tables: properly mark stktable_data as packed
2024-05-15BUG/MEDIUM: htx: mark htx_sl as packed since it may be realigned
2024-05-15BUG/MINOR: qpack: fix error code reported on QPACK decoding failure
2024-05-15BUG/MINOR: mux-quic: fix error code on shutdown for non HTTP/3
2024-05-15BUG/MEDIUM: server: clear purgeable conns before server deletion
2024-05-14BUG/MINOR: log: smp_rgs array issues with inherited global log directives
2024-05-13BUG/MINOR: log: fix leak in add_sample_to_logformat_list() error path
2024-05-10BUG/MEDIUM: mux-quic: fix crash on STOP_SENDING received without SD
2024-05-07BUG/MEDIUM: log/ring: broken syslog octet counting
2024-05-06BUG/MINOR: cfgparse: use curproxy global var from config post validation
2024-05-06BUG/MINOR: acl: support built-in ACLs with acl() sample
2024-05-06BUG/MINOR: haproxy: only tid 0 must not sleep if got signal
2024-05-03BUG/MINOR: log: prevent double spaces emission in sess_build_logline()
2024-04-30BUG/MINOR: stconn: don't wake up an applet waiting on buffer allocation
2024-04-30BUG/MEDIUM: log: don't ignore disabled node's options
2024-04-30BUG/MINOR: log: fix global lf_expr node options behavior (2nd try)
2024-04-30BUG/MINOR: log/encode: fix potential NULL-dereference in LOGCHAR()
2024-04-30BUG/MINOR: log/encode: consider global options for key encoding
2024-04-29BUG/MINOR: log: fix global lf_expr node options behavior
2024-04-29BUG/MINOR: stats: replace objt_* by __objt_* macros
2024-04-29BUG/MEDIUM: cache: Vary not working properly on anything other than accept-encoding
2024-04-26BUG/MINOR: mworker: reintroduce way to disable seamless reload with -x /dev/null
2024-04-25BUG/MINOR: peers: Don't wait for a remote resync if there no remote peer
2024-04-25BUG/MEDIUM: peers: Use atomic operations on peers flags when necessary
2024-04-25BUG/MEDIUM: peers: Wait for sync task ack when a resynchro is finished
2024-04-25BUG/MEDIUM: peers: Reprocess peer state after all session shutdowns
2024-04-25BUG/MEDIUM: peers: Automatically start to learn on local peer
2024-04-24BUG/MINOR: h1: fix detection of upper bytes in the URI
2024-04-23BUG/MEDIUM: applet: Let's applets decide if they have more data to deliver
2024-04-22BUG/MINOR: stats: fix stot metric for listeners
2024-04-22BUG/MINOR: backend: use cum_sess counters instead of cum_conn
2024-04-19BUG/MEDIUM: peers: Fix state transitions of a peer
2024-04-19BUG/MEDIUM: peers: Don't set PEERS_F_RESYNC_PROCESS flag on a peer
2024-04-19BUG/MINOR: fd: my_closefrom() on Linux could skip contiguous series of sockets
2024-04-19BUG/MINOR: sock: handle a weird condition with connect()
2024-04-19BUG/MINOR: stconn: Fix sc_mux_strm() return value
2024-04-18BUG/MEDIUM: peers: fix localpeer regression with 'bind+server' config style
2024-04-18BUG/MEDIUM: peers: Fix exit condition when max-updates-at-once is reached
2024-04-18BUG/MEDIUM: spoe: Always retry when an applet fails to send a frame
2024-04-18BUG/MEDIUM: applet: Fix applet API to put input data in a buffer
2024-04-17BUG/MINOR: ssl: fix crt-store load parsing
2024-04-17BUG/MINOR: ssl: check on forbidden character on wrong value
2024-04-17BUG/MEDIUM: evports: do not clear returned events list on signal
2024-04-16BUG/MEDIUM: stconn: Don't forward channel data if input data must be filtered
2024-04-16BUG/MAJOR: peers: Update peers section state from a thread-safe manner
2024-04-16BUG/MINOR: peers: Report a resync was explicitly requested from a thread-safe manner
2024-04-16BUG/MEDIUM: grpc: Fix several unaligned 32/64 bits accesses
2024-04-15BUG/MAJOR: ring: use the correct size to reallocate startup_logs
2024-04-13BUG/MINOR: lru: fix the standalone test case for invalid revision
2024-04-12DEBUG: pools: report the data around the offending area in case of mismatch
2024-04-12DEBUG: pool: improve decoding of corrupted pools
2024-04-12BUG/MAJOR: stick-tables: fix race with peers in entry expiration
2024-04-12BUG/MEDIUM: peers/trace: fix crash when listing event types
2024-04-12BUG/MEDIUM: stick-tables: fix the task's next expiration date
2024-04-12BUG/MEDIUM: cache/stats: Handle inbuf allocation failure in the I/O handler
2024-04-11BUG/MINOR: server: fix slowstart behavior
2024-04-11BUILD: makefile: also drop DEBUG_CFLAGS
2024-04-11CI: update the build options to get rid of unneeded DEBUG options
2024-04-11BUILD: pools: make DEBUG_MEMORY_POOLS=1 the default option
2024-04-11BUILD: debug: make DEBUG_STRICT=1 the default
2024-04-11BUG/MINOR: debug: make sure DEBUG_STRICT=0 does work as documented
2024-04-11BUG/MINOR: guid: fix crash on invalid guid name
2024-04-10BUG/MINOR: http-ana: Fix TX_L7_RETRY and TX_D_L7_RETRY values
2024-04-10BUG/MEDIUM: http-ana: Deliver 502 on keep-alive for fressh server connection
2024-04-09BUG/MINOR: log: invalid snprintf() usage in sess_build_logline()
2024-04-09BUG/MINOR: tools/log: invalid encode_{chunk,string} usage
2024-04-09BUG/MINOR: log: fix lf_text_len() truncate inconsistency
2024-04-09BUG/MINOR: listener: always assign distinct IDs to shards
2024-04-08BUG/MINOR: cli: Don't warn about a too big command for incomplete commands
2024-04-06BUG/MEDIUM: quic: don't blindly rely on unaligned accesses

Back to the list of branches and versions
Back to the HAProxy page