Merge date | Subject - Severity (minor, medium, major, critical) |
2025-10-01 | BUG/MEDIUM: ssl: ca-file directory mode must read every certificates of a file |
2025-10-01 | BUG/MINOR: pattern: Fix pattern lookup for map with opt@ prefix |
2025-10-01 | BUG/MINOR: pattern: Properly flag virtual maps as using samples |
2025-10-01 | BUG/MEDIUM: stick-tables: Don't let table_process_entry() handle refcnt |
2025-10-01 | BUG/MINOR: server: Update healthcheck when server settings are changed via CLI |
2025-10-01 | BUG/MEDIUM: server: Use sni as pool connection name for SSL server only |
2025-10-01 | BUG/MEDIUM: ring: invert the length check to avoid an int overflow |
2025-10-01 | BUG/MINOR: resolvers: always normalize FQDN from response |
2025-10-01 | BUG/MINOR: ocsp: Crash when updating CA during ocsp updates |
2025-10-01 | BUG/MAJOR: stream: Force channel analysis on successful synchronous send |
2025-10-01 | BUG/MAJOR: stream: Remove READ/WRITE events on channels after analysers eval |
2025-10-01 | BUG/MINOR: activity: fix reporting of task latency |
2025-10-01 | BUG/MEDIUM: ssl: create the mux immediately on early data |
2025-10-01 | BUG/MEDIUM: h1: Allow reception if we have early data |
2025-10-01 | BUG/MEDIUM: checks: fix ALPN inheritance from server |
2025-10-01 | BUG/MINOR: cpu_topo: work around a small bug in musl's CPU_ISSET() |
2025-10-01 | BUG/MINOR: log: fix potential memory leak upon error in add_to_logformat_list() |
2025-10-01 | BUG/MINOR: connection: streamline conn detach from lists |
2025-10-01 | BUG/MEDIUM: conn: fix UAF on connection after reversal on edge |
2025-10-01 | BUG/MINOR: haproxy: be sure not to quit too early on soft stop |
2025-10-01 | BUG/MINOR: quic: fix padding issue on INITIAL retransmit |
2025-10-01 | BUG/MINOR: quic: fix room check if padding requested |
2025-10-01 | BUG/MINOR: quic: ignore AGAIN ncbuf err when parsing CRYPTO frames |
2025-10-01 | BUG/MINOR: tools: Add OOM check for malloc() in indent_msg() |
2025-10-01 | BUG/MINOR: compression: Add OOM check for calloc() in parse_compression_options() |
2025-10-01 | BUG/MINOR: cfgparse: Add OOM check for calloc() in cfg_parse_listen() |
2025-10-01 | BUG/MINOR: acl: Add OOM check for calloc() in smp_fetch_acl_parse() |
2025-10-01 | BUG/MINOR: log: Add OOM checks for calloc() and malloc() in logformat parser and dup_logger() |
2025-10-01 | BUG/MINOR: halog: Add OOM checks for calloc() in filter_count_srv_status() and filter_count_url() |
2025-10-01 | BUG/MEDIUM: server: Duplicate healthcheck's alpn inherited from default server |
2025-10-01 | BUG/MAJOR: mux-quic: fix crash on reload during emission |
2025-10-01 | BUG/MEDIUM: quic: CRYPTO frame freeing without eb_delete() |
2025-10-01 | BUG/MINOR: server: decrement session idle_conns on del server |
2025-10-01 | BUG/MINOR: connection: remove extra session_unown_conn() on reverse |
2025-10-01 | BUG/MINOR: connection: rearrange union list members |
2025-10-01 | BUG/MEDIUM: mworker: fix startup and reload on macOS |
2025-10-01 | BUG/MINOR: acl: set arg_list->kw to aclkw->kw string literal if aclkw is found |
2025-10-01 | BUG/MINOR: mux-quic: trace with non initialized qcc |
2025-10-01 | BUG/MINOR: quic: reorder fragmented RX CRYPTO frames by their offsets |
2025-10-01 | BUG/MEDIUM: Remove sync sends from streams to applets |
2025-10-01 | BUG/MEDIUM: stconn: Fix conditions to know an applet can get data from stream |
2025-08-26 | BUG/MEDIUM: spoe: Improve error detection in SPOE applet on client abort |
2025-08-26 | BUG/MEDIUM: mux-spop: Reject connection attempts from a non-spop frontend |
2025-08-26 | BUG/MINOR: quic: don't coalesce probing and ACK packet of same type |
2025-08-26 | BUG/MAJOR: quic: fix INITIAL padding with probing packet only |
2025-08-26 | BUG/MINOR: quic: do not emit probe data if CONNECTION_CLOSE requested |
2025-08-26 | BUG/MEDIUM: quic: reset padding when building GSO datagrams |
2025-08-26 | BUG/MEDIUM: mworker: more verbose error upon loading failure |
2025-08-26 | BUG/MINOR: spoe: Properly detect and skip empty NOTIFY frames |
2025-08-26 | BUG/MINOR: mux-h1: fix wrong lock label |
2025-08-26 | BUG/MEDIUM: http-client: Test HTX_FL_EOM flag before commiting the HTX buffer |
2025-08-26 | BUG/MINOR: init: Initialize random seed earlier in the init process |
2025-08-26 | BUG/MEDIUM: ssl: fix build with AWS-LC |
2025-08-26 | BUG/MEDIUM: ssl: Fix 0rtt to the server |
2025-08-26 | BUG/MINOR: stick-table: cap sticky counter idx with tune.nb_stk_ctr instead of MAX_SESS_STKCTR |
2025-08-26 | BUG/MINOR mux-quic: apply correctly timeout on output pending data |
2025-08-26 | BUG/MINOR: hq-interop: fix FIN transmission |
2025-08-26 | BUG/MINOR: logs: fix log-steps extra log origins selection |
2025-08-26 | BUG/MEDIUM: threads: Disable the workaround to load libgcc_s on macOS |
2025-08-26 | BUG/MINOR: halog: exit with error when some output filters are set simultaneosly |
2025-08-26 | BUG/MINOR: applet: Don't trigger BUG_ON if the tid is not on appctx init |
2025-08-26 | BUG/MINOR: quic: Wrong source address use on FreeBSD |
2025-08-26 | BUG/MEDIUM: h3: handle interim response properly on FE side |
2025-08-26 | BUG/MINOR: h3: ensure that invalid status code are not encoded (FE side) |
2025-08-26 | BUG/MINOR: h3: properly realloc buffer after interim response encoding |
2025-08-26 | BUG/MEDIUM: h3: do not overwrite interim with final response |
2025-08-26 | BUG/MEDIUM: http-client: Notify applet has more data to deliver until the EOM |
2025-08-26 | BUG/MEDIUM: http-client: Drain the request if an early response is received |
2025-08-26 | BUG/MINOR: http-client: Reject any 101-switching-protocols response |
2025-08-26 | BUG/MINOR: http-client: Ignore 1XX interim responses in non-HTX mode |
2025-08-26 | BUG/MEDIUM: http-client: Ask for more room when request data cannot be xferred |
2025-08-26 | BUG/MEDIUM: http-client: Properly inc input data when HTX blocks are xferred |
2025-08-26 | BUG/MEDIUM: http-client: Don't wake http-client applet if nothing was xferred |
2025-08-26 | BUG/MINOR: listener: really assign distinct IDs to shards |
2025-08-26 | BUG/MINOR: hlua: take default-path into account with lua-load-per-thread |
2025-08-26 | BUG/MEDIUM: logs: fix sess_build_logline_orig() recursion with options |
2025-08-26 | BUG/MEDIUM: dns: Reset reconnect tempo when connection is finally established |
2025-08-26 | BUG/MEDIUM: hlua: Report to SC when output data are blocked on a lua socket |
2025-08-26 | BUG/MEDIUM: hlua: Report to SC when data were consumed on a lua socket |
2025-08-26 | BUG/MINOR: hlua: Skip headers when a receive is performed on an HTTP applet |
2025-08-26 | BUG/MINOR: httpclient: wrongly named httpproxy flag |
2025-08-26 | BUG/MINOR: jwt: Copy input and parameters in dedicated buffers in jwt_verify converter |
2025-08-26 | BUG/MEDIUM: mux-h2: Properly handle connection error during preface sending |
2025-08-26 | BUG/MEDIUM: hlua: Forbid any L6/L7 sample fetche functions from lua services |
2025-08-26 | BUG/MINOR: tools: use my_unsetenv instead of unsetenv |
2025-08-26 | BUG/MINOR: quic: wrong QUIC_FT_CONNECTION_CLOSE(0x1c) frame encoding |
2025-08-26 | BUG/MINOR: log: Be able to use %ID alias at anytime of the stream's evaluation |
2025-08-26 | BUG/MINOR: stream: Avoid recursive evaluation for unique-id based on itself |
2025-08-26 | BUG/MINOR: mux-quic/h3: properly handle too low peer fctl initial stream |
2025-08-05 | BUG/MEDIUM: hlua_fcn: ensure systematic watcher cleanup for server list iterator |
2025-07-22 | BUG/MEDIUM: ssl/clienthello: ECDSA with ssl-max-ver TLSv1.2 and no ECDSA ciphers |
2025-06-17 | BUG/MEDIUM: check: Set SOCKERR by default when a connection error is reported |
2025-06-17 | BUG/MEDIUM: cli: Don't consume data if outbuf is full or not available |
2025-06-17 | BUG/MINOR: http-ana: Properly handle keep-query redirect option if no QS |
2025-06-17 | BUG/MINOR: config/server: reject QUIC addresses |
2025-06-17 | BUG/MINIR: h1: Fix doc of 'accept-unsafe-...-request' about URI parsing |
2025-06-17 | BUG/MEDIUM: fd: Use the provided tgid in fd_insert() to get tgroup_info |
2025-06-17 | BUG/MINOR: quic: Missing SSL session object freeing |
2025-06-17 | BUG/MINOR: mux-spop: Fix null-pointer deref on SPOP stream allocation failure |
2025-06-17 | BUG/MEDIUM: check: Requeue healthchecks on I/O events to handle check timeout |
2025-06-02 | BUG/MEDIUM: h1/h2/h3: reject forbidden chars in the Host header field |
2025-06-02 | BUG/MEDIUM: h2/h3: reject some forbidden chars in :authority before reassembly |
2025-05-28 | BUG/MEDIUM: httpclient: Throw an error if an lua httpclient instance is reused |
2025-05-27 | BUG/MEDIUM: hlua: Fix getline() for TCP applets to work with applet's buffers |
2025-05-27 | BUG/MEDIUM: hlua: Properly detect shudowns for TCP applets based on the new API |
2025-05-27 | BUG/MINOR: h3: Set HTX flags corresponding to the scheme found in the request |
2025-05-27 | BUG/MAJOR: cache: Crash because of wrong cache entry deleted |
2025-05-27 | BUG/MEDIUM: server: fix potential null-deref after previous fix |
2025-05-27 | BUG/MEDIUM: server: fix crash after duplicate GUID insertion |
2025-05-20 | BUG/MEDIUM: stconn: Disable 0-copy forwarding for filters altering the payload |
2025-05-20 | BUG/MEDIUM: wdt: always ignore the first watchdog wakeup |
2025-05-20 | BUG/MINOR: h3: don't insert more than one Host header |
2025-05-20 | BUG/MEDIUM: mux-spop: Properly detect truncated frames on demux to report error |
2025-05-20 | BUG/MINOR: quic: ensure cwnd limits are always enforced |
2025-05-20 | BUG/MINOR: mux-quic: do not decode if conn in error |
2025-05-15 | BUG/MEDIUM: peers: also limit the number of incoming updates |
2025-05-15 | BUG/MINOR: sink: detect and warn when using "send-proxy" options with ring servers |
2025-05-15 | DEBUG: mux-spop: Review some trace messages to adjust the message or the level |
2025-05-15 | BUG/MEDIUM: mux-spop; Don't report a read error if there are pending data |
2025-05-15 | BUG/MEDIUM: spop-conn: Report short read for partial frames payload |
2025-05-15 | BUG/MEDIUM: mux-spop: Properly handle CLOSING state |
2025-05-15 | BUG/MEDIUM: mux-spop: Remove frame parsing states from the SPOP connection state |
2025-05-15 | BUG/MINOR: mux-spop: Don't open new streams for SPOP connection on error |
2025-05-15 | BUG/MINOR: mux-spop: Make the demux stream ID a signed integer |
2025-05-15 | BUG/MINOR: mux-spop: Don't report error for stream if ACK was already received |
2025-05-15 | BUG/MINOR: mux-spop: Use the right bitwise operator in spop_ctl() |
2025-05-15 | BUG/MEDIUM: mux-spop: Wait end of handshake to declare a spop connection ready |
2025-05-15 | BUG/MEDIUM: mux-spop: Respect the negociated max-frame-size value to send frames |
2025-05-15 | BUG/MINOR: spoe: Don't report error on applet release if filter is in DONE state |
2025-05-15 | BUG/MINOR: hlua: Fix Channel:data() and Channel:line() to respect documentation |
2025-05-15 | BUG/MINOR: threads: fix soft-stop without multithreading support |
2025-05-15 | BUG/MINOR: ssl/ckch: always free() the previous entry during parsing |
2025-05-15 | BUG/MEDIUM: quic: free stream_desc on all data acked |
2025-05-15 | BUG/MINOR: cli: fix too many args detection for commands |
2025-05-15 | BUG/MEDIUM: peers: hold the refcnt until updating ts->seen |
2025-05-15 | BUG/MINOR: quic: reject invalid max_udp_payload size |
2025-05-15 | BUG/MINOR: quic: fix TP reject on invalid max-ack-delay |
2025-05-15 | BUG/MINOR: quic: use proper error code on invalid received TP value |
2025-05-15 | BUG/MINOR: quic: reject retry_source_cid TP on server side |
2025-05-15 | BUG/MINOR: quic: use proper error code on invalid server TP |
2025-05-15 | BUG/MINOR: quic: use proper error code on missing CID in TPs |
2025-05-15 | BUG/MINOR: proxy: only use proxy_inc_fe_cum_sess_ver_ctr() with frontends |
2025-05-15 | BUG/MEDIUM: connections: Report connection closing in conn_create_mux() |
2025-05-15 | BUG/MINOR: mux-h1: Fix trace message in h1_detroy() to not relay on connection |
2025-05-15 | BUG/MINOR: mux-h1: Don't pretend connection was released for TCP>H1>H2 upgrade |
2025-05-15 | BUG/MINOR: dns: prevent ds accumulation within dss |
2025-05-15 | BUG/MINOR: dns: add tempo between 2 connection attempts for dns servers |
2025-05-15 | BUG/MAJOR: listeners: transfer connection accounting when switching listeners |
2025-05-15 | BUG/MINOR: cli: Issue an error when too many args are passed for a command |
2025-04-22 | BUG/MINOR: quic: do not crash on CRYPTO ncbuf alloc failure |