HAProxy known bugs for version v2.6.20 (maintenance branch 2.6) :  84 

This version (2.6.20) is a release belonging to maintenance branch 2.6 whose latest version is 2.6.21. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches.

Quick links

Other versions in the same branch

This branch contains the following releases :

DateVersionComment
2025-01-292.6.21 ⇐ last
2024-11-082.6.20 ⇐ yours
2024-09-192.6.19 
2024-06-182.6.18 
2024-04-052.6.17 
2023-12-132.6.16 
2023-08-092.6.15 
2023-06-092.6.14 
2023-05-022.6.13 
2023-03-282.6.12 
2023-03-172.6.11 
2023-03-102.6.10 
2023-02-142.6.9 
2023-01-242.6.8 
2022-12-022.6.7 
2022-09-222.6.6 
2022-09-032.6.5 
2022-08-222.6.4 
2022-08-192.6.3 
2022-07-222.6.2 
2022-06-212.6.1 
2022-05-312.6.0 

Known bugs affecting this version, and already fixed in the maintenance branch

These fixes have already been queued for a more recent 2.6 version. Some of them might have already been released in a more recent version than yours, and other ones might still be pending in the maintenance branch for a future release. The list may be empty if you're already on the latest version and no new fix was backported.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in this version by category :

TotalCRITICALMAJORMEDIUMMINOR
84 0 2 34 48

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2025-04-17BUG/MINOR: sink: add tempo between 2 connection attempts for sft servers (2)
2025-04-17BUG/MINOR: hlua: fix invalid errmsg use in hlua_init()
2025-04-17BUG/MINOR: backend: do not use the source port when hashing clientip
2025-04-17BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refs
2025-04-17BUG/MEDIUM: backend: fix reuse with set-dst/set-dst-port
2025-04-17BUG/MINOR: backend: do not overwrite srv dst address on reuse
2025-04-17BUG/MINOR: log: fix gcc warn about truncating NUL terminator while init char arrays
2025-04-17BUG/MEDIUM: peers: prevent learning expiration too far in futur from unsync node
2025-04-17BUG/MINOR: peers: fix expire learned from a peer not converted from ms to ticks
2025-04-17BUG/MEDIUM: hlua/cli: fix cli applet UAF in hlua_applet_wakeup()
2025-04-17BUG/MINOR: namespace: handle a possible strdup() failure
2025-04-17BUG/MINOR: server: dont return immediately from parse_server() when skipping checks
2025-04-17BUG/MINOR: cfgparse/peers: properly handle ignored local peer case
2025-04-17BUG/MINOR: cfgparse/peers: fix inconsistent check for missing peer server
2025-04-17BUG/MEIDUM: startup: return to initial cwd only after check_config_validity()
2025-04-17BUG/MINOR: server: check for either proxy-protocol v1 or v2 to send hedaer
2025-04-17BUG/MINOR: h2: always trim leading and trailing LWS in header values
2025-04-17BUG/MINOR: sink: add tempo between 2 connection attempts for sft servers
2025-04-17BUG/MINOR: cfgparse: fix NULL ptr dereference in cfg_parse_peers
2025-04-17BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer
2025-04-17BUG/MINOR: flt-trace: Support only one name option
2025-04-17BUG/MINOR: auth: Fix a leak on error path when parsing user's groups
2025-04-17BUG/MINOR: config/userlist: Support one 'users' option for 'group' directive
2025-04-17BUG/MINOR: cli: Fix a possible infinite loop in _getsocks()
2025-04-17BUG/MINOR: cli: Fix memory leak on error for _getsocks command
2025-04-17BUG/MINOR: tcp-rules: Don't forward close during tcp-response content rules eval
2025-04-17BUG/MINOR: quic: prevent crash on conn access after MUX init failure
2025-04-17BUG/MINOR: fcgi: Don't set the status to 302 if it is already set
2025-04-17BUG/MEDIUM: filters: Handle filters registered on data with no payload callback
2025-04-17BUG/MINOR: cli: Wait for the last ACK when FDs are xferred from the old worker
2025-04-17BUG/MINOR: quic: fix CRYPTO payload size calcul for encoding
2025-04-17BUG/MINOR: quic: reserve length field for long header encoding
2025-04-17BUG/MINOR: server: fix the "server-template" prefix memory leak
2025-04-16BUG/MEDIUM: thread: use pthread_self() not ha_pthread[tid] in set_affinity
2025-04-16BUG/MEDIUM: htx: wrong count computation in htx_xfer_blks()
2025-04-16BUG/MEDIUM: fd: mark FD transferred to another process as FD_CLONED
2025-04-16BUG/MEDIUM: clock: make sure now_ms cannot be TICK_ETERNITY
2025-02-19BUG/MEDIUM: spoe: Don't wakeup idle applets in loop during stopping
2025-02-19BUG/MINOR: spoe: Allow applet creation when closing the last one during stopping
2025-02-19BUG/MINOR: spoe: Check the shared waiting queue to shut applets during stopping
2025-02-19BUG/MINOR: http-ana: Disable fast-fwd for unfinished req waiting for upgrade
2025-02-19BUG/MEDIUM: mux-h1/mux-h2: Reject upgrades with payload on H2 side only
2025-02-19BUG/MINOR: h2: reject extended connect for h2c protocol
2025-02-19BUG/MINOR: h1: do not forward h2c upgrade header token
2025-02-19BUG/MINOR: ssl_sock: fix xprt_set_used() to properly clear the TASK_F_USR1 bit
2025-02-11BUG/MEDIUM: ssl: chosing correct certificate using RSA-PSS with TLSv1.3
2025-01-28BUG/MINOR: stream: Properly handle "on-marked-up shutdown-backup-sessions"
2025-01-28BUG/MINOR: ssl: put ssl_sock_load_ca under SSL_NO_GENERATE_CERTIFICATES
2025-01-28BUG/MINOR: quic: do not increase congestion window if app limited
2025-01-23MINOR: quic: Add a BUG_ON() on quic_tx_packet refcount
2025-01-23BUG/MINOR: quic: ensure a detached coalesced packet can't access its neighbours
2025-01-23BUG/MAJOR: quic: reject too large CRYPTO frames
2025-01-23BUG/MEDIUM: stktable: fix missing lock on some table converters
2025-01-23BUG/MINOR: quic: reject NEW_TOKEN frames from clients
2025-01-23BUG/MINOR: stktable: fix big-endian compatiblity in smp_to_stkey()
2025-01-09BUG/MEDIUM: queue: Make process_srv_queue return the number of streams
2025-01-09BUG/MEDIUM: queues: Do not use pendconn_grab_from_px().
2025-01-09BUG/MEDIUM: queues: Make sure we call process_srv_queue() when leaving
2025-01-09BUG/MEDIUM: stconn: Don't forward shut for SC in connecting state
2025-01-09BUG/MINOR: stream: unblock stream on wait-for-handshake completion
2025-01-09BUG/MEDIUM: pattern: prevent uninitialized reads in pat_match_{str,beg}
2025-01-09BUG/MEDIUM: mux-h1: Fix how timeouts are applied on H1 connections
2025-01-09BUG/MINOR: server-state: Fix expiration date of srvrq_check tasks
2025-01-09BUG/MINOR: signal: register default handler for SIGINT in signal_init()
2025-01-09BUG/MINOR: h1-htx: Use default reason if not set when formatting the response
2025-01-09BUG/MEDIUM: http-ana: Reset request flag about data sent to perform a L7 retry
2025-01-09BUG/MEDIUM: sock: Remove FD_POLL_HUP during connect() if FD_POLL_ERR is not set
2025-01-09BUG/MEDIUM: http-ana: Don't release too early the L7 buffer
2025-01-09BUG/MAJOR: quic: fix wrong packet building due to already acked frames
2025-01-09BUG/MEDIUM: h3: Increase max number of headers when sending headers
2025-01-09BUG/MEDIUM: h3: Properly limit the number of headers received
2025-01-09BUG/MEDIUM: mux-h2: Check the number of headers in HEADERS frame after decoding
2025-01-09BUG/MEDIUM: mux-h2: Increase max number of headers when encoding HEADERS frames
2025-01-09BUG/MINOR: http-ana: Adjust the server status before the L7 retries
2025-01-09BUG/MINOR: http_ana: Report -1 for %Tr for invalid response only
2025-01-09BUG/MINOR: peers: make sure to always apply offsets to now_ms in expiration
2025-01-09BUG/MEDIUM: mailers: make sure to always apply offsets to now_ms in expiration
2025-01-09BUG/MEDIUM: checks: make sure to always apply offsets to now_ms in expiration
2025-01-09BUG/MEDIUM: mux-h2: Don't send RST_STREAM frame for streams with no ID
2025-01-09BUG/MEDIUM: resolvers: Insert a non-executed resulution in front of the wait list
2025-01-09BUG/MINOR: cli: don't show sockpairs in HAPROXY_CLI and HAPROXY_MASTER_CLI
2025-01-09BUG/MEDIUM: queue: make sure never to queue when there's no more served conns
2025-01-09BUG/MEDIUM: queue: always dequeue the backend when redistributing the last server
2025-01-09BUG/MEDIUM: stream: make stream_shutdown() async-safe
2024-11-08BUG/MEDIUM: mux-pt: Never fully close the connection on shutdown

Back to the list of branches and versions
Back to the HAProxy page