| Merge date | Subject - Severity (minor, medium, major, critical) |
|---|
| 2025-04-22 | BUG/MINOR: server: check for either proxy-protocol v1 or v2 to send hedaer |
| 2025-04-17 | BUG/MINOR: h2: always trim leading and trailing LWS in header values |
| 2025-04-17 | BUG/MINOR: h2: reject extended connect for h2c protocol |
| 2025-04-17 | BUG/MINOR: h1: do not forward h2c upgrade header token |
| 2025-04-17 | BUG/MINOR: hlua: fix invalid errmsg use in hlua_init() |
| 2025-04-17 | BUG/MINOR: backend: do not use the source port when hashing clientip |
| 2025-04-17 | BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refs |
| 2025-04-17 | BUG/MINOR: backend: do not overwrite srv dst address on reuse |
| 2025-04-17 | BUG/MINOR: log: fix gcc warn about truncating NUL terminator while init char arrays |
| 2025-04-17 | BUG/MEDIUM: peers: prevent learning expiration too far in futur from unsync node |
| 2025-04-17 | BUG/MINOR: peers: fix expire learned from a peer not converted from ms to ticks |
| 2025-04-17 | BUG/MEDIUM: hlua/cli: fix cli applet UAF in hlua_applet_wakeup() |
| 2025-04-17 | BUG/MINOR: namespace: handle a possible strdup() failure |
| 2025-04-17 | BUG/MINOR: cfgparse/peers: properly handle ignored local peer case |
| 2025-04-17 | BUG/MINOR: cfgparse/peers: fix inconsistent check for missing peer server |
| 2025-04-17 | BUG/MEIDUM: startup: return to initial cwd only after check_config_validity() |
| 2025-04-17 | BUG/MINOR: cfgparse: fix NULL ptr dereference in cfg_parse_peers |
| 2025-04-17 | BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer |
| 2025-04-17 | BUG/MINOR: cli: Fix a possible infinite loop in _getsocks() |
| 2025-04-17 | BUG/MINOR: cli: Fix memory leak on error for _getsocks command |
| 2025-04-17 | BUG/MINOR: server: fix the "server-template" prefix memory leak |
| 2025-04-17 | BUG/MINOR: tcp-rules: Don't forward close during tcp-response content rules eval |
| 2025-04-17 | BUG/MINOR: fcgi: Don't set the status to 302 if it is already set |
| 2025-04-17 | BUG/MEDIUM: filters: Handle filters registered on data with no payload callback |
| 2025-04-17 | BUG/MINOR: cli: Wait for the last ACK when FDs are xferred from the old worker |
| 2025-04-17 | BUG/MEDIUM: htx: wrong count computation in htx_xfer_blks() |
| 2025-04-17 | BUG/MEDIUM: fd: mark FD transferred to another process as FD_CLONED |
| 2025-04-17 | BUG/MEDIUM: clock: make sure now_ms cannot be TICK_ETERNITY |
| 2025-04-17 | BUG/MEDIUM: spoe: Don't wakeup idle applets in loop during stopping |
| 2025-04-17 | BUG/MINOR: spoe: Allow applet creation when closing the last one during stopping |
| 2025-04-17 | BUG/MINOR: spoe: Check the shared waiting queue to shut applets during stopping |
| 2025-04-17 | BUG/MEDIUM: ssl: chosing correct certificate using RSA-PSS with TLSv1.3 |
| 2025-04-17 | BUG/MINOR: ssl: put ssl_sock_load_ca under SSL_NO_GENERATE_CERTIFICATES |
| 2025-04-17 | BUG/MINOR: stktable: fix big-endian compatiblity in smp_to_stkey() |
| 2025-04-17 | BUG/MEDIUM: pattern: prevent uninitialized reads in pat_match_{str,beg} |
| 2025-04-17 | BUG/MEDIUM: mux-h1: Fix how timeouts are applied on H1 connections |
| 2025-04-17 | BUG/MINOR: server-state: Fix expiration date of srvrq_check tasks |
| 2025-04-17 | BUG/MINOR: signal: register default handler for SIGINT in signal_init() |
| 2025-04-17 | BUG/MINOR: h1-htx: Use default reason if not set when formatting the response |
| 2025-04-17 | BUG/MEDIUM: http-ana: Reset request flag about data sent to perform a L7 retry |
| 2025-04-17 | BUG/MEDIUM: sock: Remove FD_POLL_HUP during connect() if FD_POLL_ERR is not set |
| 2025-04-17 | BUG/MEDIUM: http-ana: Don't release too early the L7 buffer |
| 2025-04-17 | BUG/MEDIUM: mux-h2: Check the number of headers in HEADERS frame after decoding |
| 2025-04-17 | BUG/MEDIUM: mux-h2: Increase max number of headers when encoding HEADERS frames |
| 2025-04-17 | BUG/MINOR: http-ana: Adjust the server status before the L7 retries |
| 2025-04-17 | BUG/MINOR: http_ana: Report -1 for %Tr for invalid response only |
| 2025-04-17 | BUG/MINOR: peers: make sure to always apply offsets to now_ms in expiration |
| 2025-04-17 | BUG/MEDIUM: mailers: make sure to always apply offsets to now_ms in expiration |
| 2025-04-17 | BUG/MEDIUM: checks: make sure to always apply offsets to now_ms in expiration |
| 2025-04-17 | BUG/MEDIUM: mux-h2: Don't send RST_STREAM frame for streams with no ID |
| 2025-04-17 | BUG/MEDIUM: resolvers: Insert a non-executed resulution in front of the wait list |
| 2025-04-17 | BUG/MINOR: cli: don't show sockpairs in HAPROXY_CLI and HAPROXY_MASTER_CLI |
| 2024-12-02 | BUG/MINOR: ssl: can't load a separated key file with openssl > 3.0 |
| 2024-11-06 | BUG/MINOR: http-ana: Report internal error if an action yields on a final eval |
| 2024-11-06 | BUG/MINOR: ssl/cli: 'set ssl cert' does not check the transaction name correctly |
| 2024-11-06 | BUG/MEDIUM: connection/http-reuse: fix address collision on unhandled address families |
| 2024-11-06 | BUG/MINOR: mworker: fix mworker-max-reloads parser |
| 2024-11-06 | BUG/MINOR: http-ana: Don't report a server abort if response payload is invalid |
| 2024-11-06 | BUG/MEDIUM: hlua: properly handle sample func errors in hlua_run_sample_{fetch,conv}() |
| 2024-11-06 | BUG/MEDIUM: hlua: make hlua_ctx_renew() safe |
| 2024-11-06 | BUG/MEDIUM: server: server stuck in maintenance after FQDN change |
| 2024-11-06 | BUG/MINOR: cfgparse-global: fix allowed args number for setenv |
| 2024-11-06 | BUG/MEDIUM: cli: Deadlock when setting frontend maxconn |
| 2024-09-17 | BUG/MINOR: server: Don't warn fallback IP is used during init-addr resolution |
| 2024-09-17 | BUG/MINOR: polling: fix time reporting when using busy polling |
| 2024-09-17 | BUG/MEDIUM: pattern: prevent UAF on reused pattern expr |
| 2024-09-17 | BUG/MINOR: pattern: prevent const sample from being tampered in pat_match_beg() |
| 2024-09-17 | BUG/MINOR: pattern: do not leave a leading comma on "set" error messages |
| 2024-09-17 | BUG/MINOR: pattern: pat_ref_set: return 0 if err was found |
| 2024-09-17 | BUG/MINOR: pattern: pat_ref_set: fix UAF reported by coverity |
| 2024-09-17 | BUG/MINOR: proto_uxst: delete fd from fdtab if listen() fails |
| 2024-09-17 | BUG/MINOR: proto_tcp: delete fd from fdtab if listen() fails |
| 2024-09-17 | BUG/MINOR: trace: automatically start in waiting mode with "start " |
| 2024-09-17 | BUG/MINOR: fcgi-app: handle a possible strdup() failure |
| 2024-09-17 | BUG/MEDIUM: h2: Only report early HTX EOM for tunneled streams |
| 2024-09-17 | BUG/MEDIUM: cli: Always release back endpoint between two commands on the mcli |
| 2024-09-17 | BUG/MEDIUM: stream: Prevent mux upgrades if client connection is no longer ready |
| 2024-09-17 | BUG/MINOR: cli: Atomically inc the global request counter between CLI commands |
| 2024-09-17 | BUG/MEDIUM: spoe: Be sure to create a SPOE applet if none on the current thread |
| 2024-07-03 | BUG/MAJOR: server: do not delete srv referenced by session |
| 2024-07-03 | BUG/MINOR: hlua: report proper context upon error in hlua_cli_io_handler_fct() |
| 2024-07-03 | BUG/MINOR: cfgparse: remove the correct option on httpcheck send-state warning |
| 2024-06-19 | BUG/MEDIUM: cli: fix cli_output_msg() regression |
| 2024-06-10 | BUG/MINOR: haproxy: only tid 0 must not sleep if got signal |
| 2024-06-10 | BUG/MAJOR: connection: fix server used_conns with H2 + reuse safe |
| 2024-06-10 | BUG/MEDIUM: http_ana: ignore NTLM for reuse aggressive/always and no H1 |
| 2024-06-10 | BUG/MEDIUM: ssl: wrong priority whem limiting ECDSA ciphers in ECDSA+RSA configuration |
| 2024-06-10 | BUG/MINOR: hlua: prevent LJMP in hlua_traceback() |
| 2024-06-10 | BUG/MINOR: hlua: fix unsafe hlua_pusherror() usage |
| 2024-06-10 | BUG/MINOR: hlua: don't use lua_pushfstring() when we don't expect LJMP |
| 2024-06-10 | BUG/MINOR: tools: fix possible null-deref in env_expand() on out-of-memory |
| 2024-06-10 | BUG/MINOR: tcpcheck: report correct error in tcp-check rule parser |
| 2024-06-10 | BUG/MINOR: activity: fix Delta_calls and Delta_bytes count |
| 2024-06-10 | BUG/MINOR: ssl/ocsp: init callback func ptr as NULL |
| 2024-06-10 | BUG/MINOR: server: Don't reset resolver options on a new default-server line |
| 2024-06-10 | BUG/MINOR: connection: parse PROXY TLV for LOCAL mode |
| 2024-06-10 | BUG/MINOR: stats: Don't state the 303 redirect response is chunked |
| 2024-06-10 | BUG/MINOR: htpp-ana/stats: Specify that HTX redirect messages have a C-L header |
| 2024-06-10 | BUG/MEDIUM: fd: prevent memory waste in fdtab array |
| 2024-06-10 | BUG/MEDIUM: stick-tables: properly mark stktable_data as packed |
| 2024-06-10 | BUG/MEDIUM: htx: mark htx_sl as packed since it may be realigned |
| 2024-06-10 | BUG/MINOR: h1: fix detection of upper bytes in the URI |
| 2024-06-10 | BUG/MINOR: backend: use cum_sess counters instead of cum_conn |
| 2024-06-10 | BUG/MINOR: fd: my_closefrom() on Linux could skip contiguous series of sockets |
| 2024-06-10 | BUG/MINOR: sock: handle a weird condition with connect() |
| 2024-06-10 | BUG/MEDIUM: cache: Vary not working properly on anything other than accept-encoding |
| 2024-06-10 | BUG/MEDIUM: evports: do not clear returned events list on signal |
| 2024-06-10 | BUG/MEDIUM: stconn: Don't forward channel data if input data must be filtered |
| 2024-06-10 | BUG/MEDIUM: peers/trace: fix crash when listing event types |
| 2024-06-10 | BUG/MEDIUM: http-ana: Deliver 502 on keep-alive for fressh server connection |
| 2024-06-10 | BUG/MINOR: log: invalid snprintf() usage in sess_build_logline() |
| 2024-06-10 | BUG/MINOR: tools/log: invalid encode_{chunk,string} usage |
| 2024-06-10 | BUG/MINOR: log: fix lf_text_len() truncate inconsistency |
| 2024-06-10 | BUG/MEDIUM: cli: Warn if pipelined commands are delimited by a \n |
| 2024-06-10 | BUG/MEDIUM: cli: fix once for all the problem of missing trailing LFs |
| 2024-05-17 | BUG/MEDIUM: thread/sched: set proper scheduling context upon ha_set_tid() |
| 2024-04-05 | BUG/MINOR: proxy: fix logformat expression leak in use_backend rules |
| 2024-04-05 | BUG/MEDIUM: hlua: streams don't support mixing lua-load with lua-load-per-thread (2nd try) |
| 2024-04-05 | DEBUG: lua: precisely identify if stream is stuck inside lua or not |
| 2024-04-03 | BUG/MINOR: ist: only store NUL byte on succeeded alloc |
| 2024-04-03 | BUG/MINOR: backend: properly handle redispatch 0 |
| 2024-04-03 | BUG/MINOR: server: ignore 'enabled' for dynamic servers |
| 2024-04-03 | BUG/MINOR: server: 'source' interface ignored from 'default-server' directive |
| 2024-04-03 | BUG/MEDIUM: mux-fcgi: Properly handle EOM flag on end-of-trailers HTX block |
| 2024-04-03 | BUG/MINOR: session: ensure conn owner is set after insert into session |
| 2024-04-03 | BUG/MEDIUM: spoe: Return an invalid frame on recv if size is too small |
| 2024-04-03 | BUG/MINOR: spoe: Be sure to be able to quickly close IDLE applets on soft-stop |
| 2024-04-03 | BUG/MEDIUM: spoe: Don't rely on stream's expiration to detect processing timeout |
| 2024-04-03 | BUG/MINOR: listener: Don't schedule frontend without task in listener_release() |
| 2024-04-03 | BUG/MINOR: listener: Wake proxy's mngmt task up if necessary on session release |
| 2024-04-03 | BUG/MINOR: ssl: fix possible ctx memory leak in sample_conv_aes_gcm() |
| 2024-04-03 | BUG/MINOR: cfgparse: report proper location for log-format-sd errors |
| 2024-04-03 | BUG/MAJOR: hlua: improper lock usage with hlua_ctx_resume() |
| 2024-04-03 | BUG/MEDIUM: hlua: improper lock usage with SET_SAFE_LJMP() |
| 2024-04-03 | BUG/MINOR: hlua: don't use lua_tostring() from unprotected contexts |
| 2024-04-03 | BUG/MINOR: hlua: fix unsafe lua_tostring() usage with empty stack |
| 2024-04-03 | BUG/MINOR: tools: seed the statistical PRNG slightly better |
| 2024-04-03 | BUG/MINOR: hlua: Fix log level to the right value when set via TXN:set_loglevel |
| 2024-04-03 | BUG/MINOR: ssl/cli: duplicate cleaning code in cli_parse_del_crtlist |
| 2024-04-03 | BUG/MINOR: ist: allocate nul byte on istdup |
| 2024-04-03 | BUG/MEDIUM: hlua: Don't loop if a lua socket does not consume received data |
| 2024-04-03 | BUG/MINOR: ssl: Clear the ckch instance when deleting a crt-list line |
| 2024-04-03 | BUG/MAJOR: ssl_sock: Always clear retry flags in read/write functions |
| 2024-04-03 | BUG/MEDIUM: h1: always reject the NUL character in header values |
| 2024-04-03 | BUG/MEDIUM: h1: Don't support LF only to mark the end of a chunk size |
| 2024-04-03 | BUG/MINOR: h1: Don't support LF only at the end of chunks |
| 2024-04-03 | BUG/MINOR: h1-htx: properly initialize the err_pos field |
| 2024-04-03 | BUG/MEDIUM: pool: fix rare risk of deadlock in pool_flush() |
| 2024-04-03 | BUG/MINOR: vars/cli: fix missing LF after "get var" output |
| 2024-04-03 | BUG/MEDIUM: cli: some err/warn msg dumps add LR into CSV output on stat's CLI |
| 2024-01-17 | BUG/MEDIUM: spoe: Never create new spoe applet if there is no server up |
| 2024-01-17 | BUG/MEDIUM: stconn: Forward shutdown on write timeout only if it is forwardable |
| 2024-01-17 | BUG/MEDIUM: mux-h2: Report too large HEADERS frame only when rxbuf is empty |
| 2024-01-17 | BUG/MEDIUM: connection: report connection errors even when no mux is installed |
| 2024-01-17 | BUG/MINOR: sock: mark abns sockets as non-suspendable and always unbind them |
| 2023-12-14 | BUG/MINOR: startup: set GTUNE_SOCKET_TRANSFER correctly |
| 2023-12-14 | BUG/MEDIUM: pattern: don't trim pools under lock in pat_ref_purge_range() |
| 2023-12-14 | BUG/MINOR: cache: Remove incomplete entries from the cache when stream is closed |
| 2023-12-14 | BUG/MINOR: sample: Make the `word` converter compatible with `-m found` |
| 2023-12-14 | BUG/MINOR: config: Stopped parsing upon unmatched environment variables |
| 2023-12-14 | BUG/MINOR: server: do not leak default-server in defaults sections |
| 2023-12-14 | BUG/MINOR: proxy/stktable: missing frees on proxy cleanup |
| 2023-12-14 | BUG/MINOR: stream/cli: report correct stream age in "show sess" |
| 2023-12-14 | BUG/MEDIUM: mux-fcgi: fail earlier on malloc in takeover() |
| 2023-12-14 | BUG/MEDIUM: mux-h1: fail earlier on malloc in takeover() |
| 2023-12-14 | BUG/MEDIUM: mux-h2: fail earlier on malloc in takeover() |
| 2023-12-14 | BUG/MINOR: stconn: Use HTX-aware channel's functions to get info on buffer |
| 2023-12-14 | BUG/MINOR: stconn: Fix streamer detection for HTX streams |
| 2023-12-14 | BUG/MEDIUM: stream: Don't call mux .ctl() callback if not implemented |
| 2023-12-13 | BUG/MEDIUM: stream: Properly handle abortonclose when set on backend only |
| 2023-12-13 | BUG/MINOR: stconn: Handle abortonclose if backend connection was already set up |
| 2023-12-13 | BUG/MINOR: mux-h1: Properly handle http-request and http-keep-alive timeouts |
| 2023-12-13 | BUG/MINOR: stick-table/cli: Check for invalid ipv4 key |
| 2023-12-13 | BUG/MINOR: cfgparse/stktable: fix error message on stktable_init() failure |
| 2023-12-13 | BUG/MINOR: stktable: missing free in parse_stick_table() |
| 2023-12-13 | BUG/MINOR: tcpcheck: Report hexstring instead of binary one on check failure |
| 2023-12-13 | BUG/MEDIUM: ssl: segfault when cipher is NULL |
| 2023-12-13 | BUG/MINOR: ssl: suboptimal certificate selection with TLSv1.3 and dual ECDSA/RSA |
| 2023-12-13 | BUG/MINOR: mux-h2: update tracked counters with req cnt/req err |
| 2023-12-13 | BUG/MINOR: mux-h2: commit the current stream ID even on reject |
| 2023-12-13 | BUG/MEDIUM: peers: Be sure to always refresh recconnect timer in sync task |
| 2023-12-13 | BUG/MEDIUM: mux-h2: Don't report an error on shutr if a shutw is pending |
| 2023-12-13 | BUG/MINOR: mux-h2: make up other blocked streams upon removal from list |
| 2023-12-13 | BUG/MEDIUM: actions: always apply a longest match on prefix lookup |
| 2023-12-06 | BUG/MINOR: debug: enter ha_panic() only once |
| 2023-11-24 | BUG/MEDIUM: listener/proxy: fix listeners notify for proxy resume (2nd try) |
| 2023-10-04 | BUG/MINOR: server: add missing free for server->rdr_pfx |
| 2023-10-04 | BUG/MAJOR: mux-h2: Report a protocol error for any DATA frame before headers |
| 2023-10-04 | BUG/MINOR: freq_ctr: fix possible negative rate with the scaled API |
| 2023-10-04 | BUG/MINOR: promex: fix backend_agg_check_status |
| 2023-10-04 | BUG/MEDIUM: mux-fcgi: Don't swap trash and dbuf when handling STDERR records |
| 2023-10-04 | BUG/MINOR: hlua/init: coroutine may not resume itself |
| 2023-10-04 | BUG/MEDIUM: hlua: don't pass stale nargs argument to lua_resume() |
| 2023-10-04 | BUG/MEDIUM: hlua: streams don't support mixing lua-load with lua-load-per-thread |
| 2023-10-04 | BUG/MINOR: hlua/action: incorrect message on E_YIELD error |
| 2023-10-04 | BUG/MEDIUM: stconn/stream: Forward shutdown on write timeout |
| 2023-10-04 | BUG/MEDIUM: stconn: Wake applets on sending path if there is a pending shutdown |
| 2023-10-04 | BUG/MINOR: ssl_sock: fix possible memory leak on OOM |
| 2023-10-04 | BUG/MINOR: hlua_fcn: potentially unsafe stktable_data_ptr usage |
| 2023-10-04 | BUG/MINOR: stktable: allow sc-set-gpt(0) from tcp-request connection |
| 2023-10-04 | BUG/MINOR: hlua: fix invalid use of lua_pop on error paths |
| 2023-09-04 | BUG/MEDIUM: dns: Be sure to unlock DSS when existing dns_session_io_handler() |