HAProxy known bugs for maintenance branch 2.8 :  62 

This is maintenance branch 2.8 whose latest version is 2.8.14. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches. In short, if you are running any 2.8 version other than 2.8.14, you're running with known bugs.

Quick links

Versions available in this branch

This branch contains the following releases :

DateVersionComment
2025-01-292.8.14 ⇐ last
2024-12-122.8.13 
2024-11-082.8.12 
2024-09-192.8.11 
2024-06-142.8.10 
2024-04-052.8.9 
2024-04-052.8.8 
2024-02-262.8.7 
2024-02-152.8.6 
2023-12-072.8.5 
2023-11-172.8.4 
2023-09-072.8.3 
2023-08-092.8.2 
2023-07-032.8.1 
2023-05-312.8.0 

Fixes for known bugs pending in this branch since the last release (2.8.14)

These fixes have already been queued for the next 2.8 release but no version was released with them yet. Note that fixes are backported several at a time from the development branch to maintenance branches, and the absence of a fix here doesn't mean none will be issued soon.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in the latest version of this branch by category :

TotalCRITICALMAJORMEDIUMMINOR
62 0 0 19 43

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2025-04-18BUG/MINOR: mux-quic: fix BUG_ON() crash on init failure after app-ops
2025-04-17BUG/MEDIUM: hlua: fix hlua_applet_{http,tcp}_fct() yield regression (lost data)
2025-04-17BUG/MINOR: h3: reject request URI with invalid characters
2025-04-17BUG/MINOR: h3: reject invalid :path in request
2025-04-17BUG/MINOR: h3: filter upgrade connection header
2025-04-17BUG/MEDIUM: h3: trim whitespaces in header value prior to QPACK encoding
2025-04-17BUG/MEDIUM: h3: trim whitespaces when parsing headers value
2025-04-17BUG/MEDIUM: backend: do not overwrite srv dst address on reuse (2)
2025-04-17BUG/MINOR: backend: fix reuse with set-dst/set-dst-port (2)
2025-04-16BUG/MINOR: sink: add tempo between 2 connection attempts for sft servers (2)
2025-04-16BUG/MINOR: mux-h2: Properly handle full or truncated HTX messages on shut
2025-04-16BUG/MEDIUM: http-ana: Report 502 from req analyzer only during rsp forwarding
2025-04-16BUG/MINOR: http-ana: Properly detect client abort when forwarding the response
2025-04-16BUG/MINOR: hlua: fix invalid errmsg use in hlua_init()
2025-04-16BUG/MINOR: backend: do not use the source port when hashing clientip
2025-04-16BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refs
2025-04-16BUG/MINOR: hlua_fcn: fix potential UAF with Queue:pop_wait()
2025-04-16BUG/MEDIUM: backend: fix reuse with set-dst/set-dst-port
2025-04-16BUG/MINOR: backend: do not overwrite srv dst address on reuse
2025-04-16BUG/MINOR: log: fix gcc warn about truncating NUL terminator while init char arrays
2025-04-16BUG/MINOR: mux-quic: remove extra BUG_ON() in _qcc_send_stream()
2025-04-16BUG/MEDIUM: mux-quic: fix crash on RS/SS emission if already close local
2025-04-16BUG/MEDIUM: peers: prevent learning expiration too far in futur from unsync node
2025-04-16BUG/MINOR: peers: fix expire learned from a peer not converted from ms to ticks
2025-04-16BUG/MEDIUM: hlua/cli: fix cli applet UAF in hlua_applet_wakeup()
2025-04-16BUG/MINOR: namespace: handle a possible strdup() failure
2025-04-16BUG/MINOR: server: dont return immediately from parse_server() when skipping checks
2025-04-16BUG/MINOR: cfgparse/peers: properly handle ignored local peer case
2025-04-16BUG/MINOR: cfgparse/peers: fix inconsistent check for missing peer server
2025-04-16BUG/MEIDUM: startup: return to initial cwd only after check_config_validity()
2025-04-16BUG/MINOR: server: check for either proxy-protocol v1 or v2 to send hedaer
2025-04-16BUG/MINOR: h2: always trim leading and trailing LWS in header values
2025-04-16BUG/MINOR: mux-h1: always make sure h1s->sd exists in h1_dump_h1s_info()
2025-04-16BUG/MINOR: sink: add tempo between 2 connection attempts for sft servers
2025-04-16BUG/MINOR: cfgparse: fix NULL ptr dereference in cfg_parse_peers
2025-04-16BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer
2025-04-16BUG/MINOR: flt-trace: Support only one name option
2025-04-16BUG/MINOR: auth: Fix a leak on error path when parsing user's groups
2025-04-16BUG/MINOR: config/userlist: Support one 'users' option for 'group' directive
2025-04-16BUG/MINOR: cli: Fix a possible infinite loop in _getsocks()
2025-04-16BUG/MINOR: cli: Fix memory leak on error for _getsocks command
2025-04-16BUG/MINOR: tcp-rules: Don't forward close during tcp-response content rules eval
2025-04-16BUG/MINOR: quic: prevent crash on conn access after MUX init failure
2025-04-16BUG/MINOR: fcgi: Don't set the status to 302 if it is already set
2025-04-16BUG/MEDIUM: filters: Handle filters registered on data with no payload callback
2025-04-16BUG/MINOR: cli: Wait for the last ACK when FDs are xferred from the old worker
2025-04-16BUG/MINOR: ssl/cli: "show ssl crt-list" lacks sigals
2025-04-16BUG/MINOR: ssl/cli: "show ssl crt-list" lacks client-sigals
2025-04-16BUG/MINOR: quic: fix CRYPTO payload size calcul for encoding
2025-04-16BUG/MINOR: quic: reserve length field for long header encoding
2025-04-16BUG/MEDIUM: debug: close a possible race between thread dump and panic()
2025-04-16BUG/MINOR: server: fix the "server-template" prefix memory leak
2025-04-16BUG/MEDIUM: thread: use pthread_self() not ha_pthread[tid] in set_affinity
2025-04-16BUG/MEDIUM: htx: wrong count computation in htx_xfer_blks()
2025-04-16BUG/MEDIUM: fd: mark FD transferred to another process as FD_CLONED
2025-04-16BUG/MINOR: mux-quic: handle closure of uni-stream
2025-04-16BUG/MEDIUM: mux-quic: do not attach on already closed stream
2025-02-19BUG/MEDIUM: spoe: Don't wakeup idle applets in loop during stopping
2025-02-19BUG/MINOR: spoe: Allow applet creation when closing the last one during stopping
2025-02-19BUG/MINOR: spoe: Check the shared waiting queue to shut applets during stopping
2025-02-19BUG/MEDIUM: clock: make sure now_ms cannot be TICK_ETERNITY
2025-02-11BUG/MEDIUM: ssl: chosing correct certificate using RSA-PSS with TLSv1.3

Known bugs fixed in the development branch after the last commit in this branch

It is important to understand that not all of these commits are necessarily relevant to this version, but clicking on them will show the bug description. All fixes are made first in the development branch and then backported to the maintenance branches. This ensures no fix is lost when upgrading. If a fix was marked for backporting to this branch and is not there yet, it's likely that it is still missing. Do not hesitate to ask on the haproxy mailing list if you feel like a fix has been skipped.

DateSubject
2025-04-18BUG/MINOR: proxy: always detach a proxy from the names tree on free()
2025-04-18BUG/MINOR: quic: do not crash on CRYPTO ncbuf alloc failure

Back to the list of branches and versions
Back to the HAProxy page