HAProxy known bugs for version v2.9.7 (maintenance branch 2.9) :  231 

This version (2.9.7) is a release belonging to maintenance branch 2.9 whose latest version is 2.9.13. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches.

Quick links

Other versions in the same branch

This branch contains the following releases :

DateVersionComment
2024-12-122.9.13 ⇐ last
2024-11-082.9.12 
2024-09-192.9.11 
2024-09-032.9.10 
2024-06-142.9.9 
2024-06-112.9.8 
2024-04-052.9.7 ⇐ yours
2024-02-262.9.6 
2024-02-152.9.5 
2024-01-312.9.4 
2024-01-182.9.3 
2024-01-112.9.2 
2023-12-152.9.1 
2023-12-052.9.0 

Known bugs affecting this version, and already fixed in the maintenance branch

These fixes have already been queued for a more recent 2.9 version. Some of them might have already been released in a more recent version than yours, and other ones might still be pending in the maintenance branch for a future release. The list may be empty if you're already on the latest version and no new fix was backported.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in this version by category :

TotalCRITICALMAJORMEDIUMMINOR
231 0 12 96 123

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2024-12-11BUG/MINOR: server-state: Fix expiration date of srvrq_check tasks
2024-12-11BUG/MINOR: quic: remove startup alert if conn socket-owner unsupported
2024-12-11BUG/MINOR: signal: register default handler for SIGINT in signal_init()
2024-12-11BUG/MINOR: h1-htx: Use default reason if not set when formatting the response
2024-12-11BUG/MEDIUM: http-ana: Reset request flag about data sent to perform a L7 retry
2024-12-11BUG/MEDIUM: event_hdl: fix uninitialized value in async mode when no data is provided
2024-11-27BUG/MEDIUM: sock: Remove FD_POLL_HUP during connect() if FD_POLL_ERR is not set
2024-11-27BUG/MEDIUM: http-ana: Don't release too early the L7 buffer
2024-11-27BUG/MAJOR: quic: fix wrong packet building due to already acked frames
2024-11-22BUG/MAJOR: mux-h1: Properly handle wrapping on obuf when dumping the first-line
2024-11-22BUG/MEDIUM: pools/memprofile: always clean stale pool info on pool_destroy()
2024-11-22BUG/MINOR: activity/memprofile: reinitialize the free calls on DSO summary
2024-11-22BUG/MEDIUM: wdt: fix the stuck detection for warnings
2024-11-22BUG/MEDIUM: debug: don't set the STUCK flag from debug_handler()
2024-11-22BUG/MEDIUM: h3: Increase max number of headers when sending headers
2024-11-22BUG/MEDIUM: h3: Properly limit the number of headers received
2024-11-22BUG/MEDIUM: mux-h2: Check the number of headers in HEADERS frame after decoding
2024-11-22BUG/MEDIUM: mux-h2: Increase max number of headers when encoding HEADERS frames
2024-11-22BUG/MINOR: http-ana: Adjust the server status before the L7 retries
2024-11-22BUG/MINOR: http_ana: Report -1 for %Tr for invalid response only
2024-11-22BUG/MINOR: peers: make sure to always apply offsets to now_ms in expiration
2024-11-22BUG/MINOR: mux_quic: make sure to always apply offsets to now_ms in expiration
2024-11-22BUG/MEDIUM: mailers: make sure to always apply offsets to now_ms in expiration
2024-11-22BUG/MEDIUM: checks: make sure to always apply offsets to now_ms in expiration
2024-11-22BUG/MINOR: Don't report early srv aborts on request forwarding in DONE state
2024-11-22BUG/MEDIUM: mux-h2: Don't send RST_STREAM frame for streams with no ID
2024-11-13BUG/MEDIUM: resolvers: Insert a non-executed resulution in front of the wait list
2024-11-13BUG/MINOR: cli: don't show sockpairs in HAPROXY_CLI and HAPROXY_MASTER_CLI
2024-11-06DEBUG: wdt: make the blocked traffic warning delay configurable
2024-11-06DEBUG: cli: make it possible for "debug dev loop" to trigger warnings
2024-11-06DEBUG: wdt: better detect apparently locked up threads and warn about them
2024-11-06BUG/MINOR: http-ana: Report internal error if an action yields on a final eval
2024-11-06BUG/MEDIUM: mux-h1: Fix how timeouts are applied on H1 connections
2024-11-06BUG/MINOR: ssl/cli: 'set ssl cert' does not check the transaction name correctly
2024-11-06BUG/MINOR: trace: stop rewriting argv with -dt
2024-10-24BUG/MEDIUM: server: fix race on servers_list during server deletion
2024-10-24BUG/MINOR: stconn: Don't disable 0-copy FF if EOS was reported on consumer side
2024-10-24BUG/MINOR: http-ana: Fix wrong client abort reports during responses forwarding
2024-10-24BUG/MEDIUM: stconn: Report blocked send if sends are blocked by an error
2024-10-24BUG/MINOR: server: fix dynamic server leak with check on failed init
2024-10-24BUG/MINOR: mux-quic: do not close STREAM with empty FIN if no data sent
2024-10-23BUG/MEDIUM: connection/http-reuse: fix address collision on unhandled address families
2024-10-23BUG/MEDIUM: mux-h2: Remove H2S from send list if data are sent via 0-copy FF
2024-10-23BUG/MINOR: mworker: fix mworker-max-reloads parser
2024-10-23BUG/MEDIUM: quic: avoid freezing 0RTT connections
2024-10-23BUG/MINOR: quic: avoid leaking post handshake frames
2024-10-23BUG/MAJOR: filters/htx: Add a flag to state the payload is altered by a filter
2024-10-23BUG/MEDIUM: stconn: Check FF data of SC to perform a shutdown in sc_notify()
2024-10-23BUG/MINOR: http-ana: Don't report a server abort if response payload is invalid
2024-10-23BUG/MEDIUM: stconn: Wait iobuf is empty to shut SE down during a check send
2024-10-23BUG/MINOR: httpclient: return NULL when no proxy available during httpclient_new()
2024-10-23BUG/MEDIUM: queue: make sure never to queue when there's no more served conns
2024-10-23BUG/MEDIUM: mux-quic: ensure timeout server is active for short requests
2024-10-23BUG/MEDIUM: hlua: properly handle sample func errors in hlua_run_sample_{fetch,conv}()
2024-10-23BUG/MEDIUM: hlua: make hlua_ctx_renew() safe
2024-10-21BUG/MEDIUM: server: server stuck in maintenance after FQDN change
2024-10-02BUG/MINOR: http-ana: Disable fast-fwd for unfinished req waiting for upgrade
2024-10-02BUG/MINOR: mux-h1: Fix condition to set EOI on SE during zero-copy forwarding
2024-10-02BUG/MEDIUM: queue: always dequeue the backend when redistributing the last server
2024-10-02BUG/MINOR: queue: make sure that maintenance redispatches server queue
2024-10-02BUG/MEDIUM: stream: make stream_shutdown() async-safe
2024-10-01BUG/MINOR: quic: prevent freeze after early QCS closure
2024-10-01BUG/MEDIUM: quic: handle retransmit for standalone FIN STREAM
2024-10-01BUG/MINOR: cfgparse-global: fix allowed args number for setenv
2024-10-01BUG/MINOR: server: make sure the HMAINT state is part of MAINT
2024-10-01BUG/MEDIUM: cli: Deadlock when setting frontend maxconn
2024-10-01BUG/MEDIUM: mux-h1/mux-h2: Reject upgrades with payload on H2 side only
2024-10-01BUG/MINOR: h2: reject extended connect for h2c protocol
2024-10-01BUG/MINOR: h1: do not forward h2c upgrade header token
2024-09-19BUG/MINOR: ssl_sock: fix xprt_set_used() to properly clear the TASK_F_USR1 bit
2024-09-18BUG/MINOR: cfgparse-listen: fix option httpslog override warning message
2024-09-17BUG/MEDIUM: promex: Wait to have the request before sending the response
2024-09-17BUG/MEDIUM: cache/stats: Wait to have the request before sending the response
2024-09-17BUG/MEDIUM: queue: implement a flag to check for the dequeuing
2024-09-17BUG/MINOR: clock: validate that now_offset still applies to the current date
2024-09-17BUG/MINOR: clock: make time jump corrections a bit more accurate
2024-09-17BUG/MINOR: polling: fix time reporting when using busy polling
2024-09-10BUG/MINOR: pattern: do not leave a leading comma on "set" error messages
2024-09-09BUG/MINOR: h1-htx: Don't flag response as bodyless when a tunnel is established
2024-09-09BUG/MAJOR: mux-h1: Wake SC to perform 0-copy forwarding in CLOSING state
2024-09-09BUG/MEDIUM: pattern: prevent UAF on reused pattern expr
2024-09-09BUG/MINOR: pattern: prevent const sample from being tampered in pat_match_beg()
2024-09-09BUG/MEDIUM: clock: detect and cover jumps during execution
2024-09-06BUG/MINOR: quic: Too short datagram during packet building failures (aws-lc only)
2024-09-06BUG/MINOR: quic: Crash from trace dumping SSL eary data status (AWS-LC)
2024-09-06BUG/MEDIUM: quic: always validate sender address on 0-RTT
2024-09-06BUG/MINOR: quic: Missing incrementation in NEW_TOKEN frame builder
2024-09-05BUG/MEDIUM: clock: also update the date offset on time jumps
2024-09-04BUG/MINOR: cfgparse-global: remove tune.fast-forward from common_kw_list
2024-09-04BUG/MINOR: pattern: pat_ref_set: return 0 if err was found
2024-09-04BUG/MINOR: pattern: pat_ref_set: fix UAF reported by coverity
2024-09-04BUG/MINOR: h3: properly reject too long header responses
2024-09-04BUG/MINOR: proto_uxst: delete fd from fdtab if listen() fails
2024-09-04BUG/MINOR: mux-quic: do not send too big MAX_STREAMS ID
2024-09-04BUG/MEDIUM: mworker/cli: fix pipelined modes on master CLI
2024-09-04BUG/MINOR: proto_tcp: keep error msg if listen() fails
2024-09-04BUG/MINOR: proto_tcp: delete fd from fdtab if listen() fails
2024-09-04BUG/MINOR: quic/trace: make quic_conn_enc_level_init() emit NEW not CLOSE
2024-09-04BUG/MINOR: trace/quic: make "qconn" selectable as a lockon criterion
2024-09-04BUG/MINOR: trace: automatically start in waiting mode with "start "
2024-09-04BUG/MEDIUM: trace: fix null deref in lockon mechanism since TRACE_ENABLED()
2024-09-04BUG/MINOR: trace/quic: permit to lock on frontend/connect/session etc
2024-09-04BUG/MINOR: trace/quic: enable conn/session pointer recovery from quic_conn
2024-09-04BUG/MINOR: fcgi-app: handle a possible strdup() failure
2024-09-04BUG/MEDIUM: mux-h2: Propagate term flags to SE on error in h2s_wake_one_stream
2024-09-04BUG/MEDIUM: h2: Only report early HTX EOM for tunneled streams
2024-09-04BUG/MEDIUM: http-ana: Report error on write error waiting for the response
2024-09-04BUG/MEDIUM: quic: prevent conn freeze on 0RTT undeciphered content
2024-09-04BUG/MINOR: stconn: bs.id and fs.id had their dependencies incorrect
2024-09-04BUG/MEDIUM: mux-pt/mux-h1: Release the pipe on connection error on sending path
2024-09-04BUG/MEDIUM: stconn: Report error on SC on send if a previous SE error was set
2024-09-04BUG/MEDIUM: server/addr: fix tune.events.max-events-at-once event miss and leak
2024-09-03BUG/MINOR: Crash on O-RTT RX packet after dropping Initial pktns
2024-09-03BUG/MINOR: quic: Too shord datagram during O-RTT handshakes (aws-lc only)
2024-09-03BUG/MAJOR: mux-h2: always clear MUX_MFULL and DEM_MROOM when clearing the mbuf
2024-09-03BUG/MEDIUM: mux-h1: Properly handle empty message when an error is triggered
2024-09-03BUG/MINOR: quic: unexploited retransmission cases for Initial pktns.
2024-09-03BUG/MEDIUM: cli: Always release back endpoint between two commands on the mcli
2024-09-03BUG/MEDIUM: mux-pt: Never fully close the connection on shutdown
2024-09-03BUG/MEDIUM: stream: Prevent mux upgrades if client connection is no longer ready
2024-09-03BUG/MEDIUM: mux-h2: Set ES flag when necessary on 0-copy data forwarding
2024-07-29BUG/MEDIUM: init: fix fd_hard_limit default in compute_ideal_maxconn
2024-07-29BUG/MEDIUM: queue: deal with a rare TOCTOU in assign_server_and_queue()
2024-07-29BUG/MEDIUM: jwt: Clear SSL error queue on error when checking the signature
2024-07-29BUG/MINOR: quic: Lack of precision when computing K (cubic only cc)
2024-07-29BUG/MINOR: cli: Atomically inc the global request counter between CLI commands
2024-07-29BUG/MINOR: server: Don't warn fallback IP is used during init-addr resolution
2024-07-29BUG/MINOR: stick-table: fix crash for src_inc_gpc() without stkcounter
2024-07-29BUG/MAJOR: mux-h2: force a hard error upon short read with pending error
2024-07-29BUG/MEDIUM: ssl_sock: fix deadlock in ssl_sock_load_ocsp() on error path
2024-07-29BUG/MEDIUM: debug/cli: fix "show threads" crashing with low thread counts
2024-07-29BUG/MINOR: session: Eval L4/L5 rules defined in the default section
2024-07-29BUG/MEDIUM: bwlim: Be sure to never set the analyze expiration date in past
2024-07-29BUG/MEDIUM: spoe: Be sure to create a SPOE applet if none on the current thread
2024-07-29BUG/MEDIUM: h1: Reject empty Transfer-encoding header
2024-07-29BUG/MINOR: h1: Reject empty coding name as last transfer-encoding value
2024-07-29BUG/MINOR: h1: Fail to parse empty transfer coding names
2024-07-29BUG/MINOR: jwt: fix variable initialisation
2024-07-29BUG/MINOR: jwt: don't try to load files with HMAC algorithm
2024-07-03BUG/MEDIUM: quic: fix possible exit from qc_check_dcid() without unlocking
2024-07-03BUG/MINOR: quic: fix race-condition on trace for CID retrieval
2024-07-03BUG/MINOR: quic: fix race condition in qc_check_dcid()
2024-07-03BUG/MEDIUM: quic: fix race-condition in quic_get_cid_tid()
2024-07-03BUG/MEDIUM: h3: ensure the ":scheme" pseudo header is totally valid
2024-07-03BUG/MEDIUM: h3: ensure the ":method" pseudo header is totally valid
2024-07-02BUG/MEDIUM: stick-table: Decrement the ref count inside lock to kill a session
2024-07-02BUG/MINOR: hlua: report proper context upon error in hlua_cli_io_handler_fct()
2024-07-02BUG/MINOR: quic: fix BUG_ON() on Tx pkt alloc failure
2024-07-02BUG/MINOR: mux-quic: fix crash on qcs SD alloc failure
2024-07-02BUG/MINOR: h3: fix crash on STOP_SENDING receive after GOAWAY emission
2024-07-02BUG/MEDIUM: proxy: fix email-alert invalid free
2024-06-14BUG/MAJOR: mux-h1: Prevent any UAF on H1 connection after draining a request
2024-06-14BUG/MINOR: proxy: fix header_unique_id leak on deinit()
2024-06-14BUG/MINOR: proxy: fix source interface and usesrc leaks on deinit()
2024-06-14BUG/MINOR: proxy: fix dyncookie_key leak on deinit()
2024-06-14BUG/MINOR: proxy: fix check_{command,path} leak on deinit()
2024-06-14BUG/MINOR: proxy: fix email-alert leak on deinit()
2024-06-14BUG/MINOR: proxy: fix log_tag leak on deinit()
2024-06-14BUG/MINOR: proxy: fix server_id_hdr_name leak on deinit()
2024-06-14BUG/MINOR: quic: fix computed length of emitted STREAM frames
2024-06-11BUG/MEDIUM: ssl: bad auth selection with TLS1.2 and WolfSSL
2024-06-06BUG/MEDIUM: stick-tables: Fix locking of updt_lock when trashing oldest entries
2024-06-06BUG/MEDIUM: ssl: wrong priority whem limiting ECDSA ciphers in ECDSA+RSA configuration
2024-06-06BUG/MINOR: hlua: fix leak in hlua_ckch_set() error path
2024-06-06BUG/MINOR: hlua: prevent LJMP in hlua_traceback()
2024-06-06BUG/MINOR: hlua: fix unsafe hlua_pusherror() usage
2024-06-06BUG/MINOR: hlua: don't use lua_pushfstring() when we don't expect LJMP
2024-06-06BUG/MINOR: quic: prevent crash on qc_kill_conn()
2024-06-06BUG/MEDIUM: h1-htx: Don't state interim responses are bodyless
2024-06-06BUG/MINOR: hlua: use CertCache.set() from various hlua contexts
2024-06-06BUG/MINOR: tools: fix possible null-deref in env_expand() on out-of-memory
2024-06-06BUG/MINOR: tcpcheck: report correct error in tcp-check rule parser
2024-06-06BUG/MINOR: cfgparse: remove the correct option on httpcheck send-state warning
2024-06-06BUG/MINOR: activity: fix Delta_calls and Delta_bytes count
2024-06-06BUG/MINOR: ssl/ocsp: init callback func ptr as NULL
2024-06-06BUG/MINOR: server: Don't reset resolver options on a new default-server line
2024-06-06BUG/MINOR: http-htx: Support default path during scheme based normalization
2024-06-06BUG/MINOR: quic: adjust restriction for stateless reset emission
2024-06-06BUG/MEDIUM: stick-tables: make sure never to create two same remote entries
2024-06-06BUG/MEDIUM: stick-tables: Fix race with peers when killing a sticky session
2024-06-06BUG/MEDIUM: stick-tables: Fix race with peers when trashing oldest entries
2024-06-06BUG/MEDIUM: mux-quic: Create sedesc in same time of the QUIC stream
2024-06-06BUG/MEDIUM: quic_tls: prevent LibreSSL < 4.0 from negotiating CHACHA20_POLY1305
2024-06-06BUG/MAJOR: quic: Crash with TLS_AES_128_CCM_SHA256 (libressl only)
2024-06-06BUG/MINOR: rhttp: fix task_wakeup state
2024-06-06BUG/MINOR: rhttp: prevent listener suspend
2024-06-06BUG/MEDIUM: rhttp: fix preconnect on single-thread
2024-06-06BUG/MINOR: server: free PROXY v2 TLVs on srv drop
2024-06-06BUG/MINOR: connection: parse PROXY TLV for LOCAL mode
2024-06-06BUG/MINOR: http-ana: Don't crush stream termination condition on internal error
2024-06-06BUG/MINOR: stats: Don't state the 303 redirect response is chunked
2024-06-06BUG/MEDIUM: fd: prevent memory waste in fdtab array
2024-06-06BUG/MEDIUM: h1: Reject CONNECT request if the target has a scheme
2024-06-06BUG/MINOR: h1: Check authority for non-CONNECT methods only if a scheme is found
2024-06-06BUG/MEDIUM: stick-tables: properly mark stktable_data as packed
2024-06-06BUG/MEDIUM: htx: mark htx_sl as packed since it may be realigned
2024-06-06BUG/MINOR: qpack: fix error code reported on QPACK decoding failure
2024-06-06BUG/MINOR: mux-quic: fix error code on shutdown for non HTTP/3
2024-06-06BUG/MINOR: log: smp_rgs array issues with inherited global log directives
2024-06-06BUG/MINOR: cfgparse: use curproxy global var from config post validation
2024-06-06BUG/MINOR: acl: support built-in ACLs with acl() sample
2024-06-06BUG/MINOR: haproxy: only tid 0 must not sleep if got signal
2024-06-06BUG/MINOR: mworker: reintroduce way to disable seamless reload with -x /dev/null
2024-06-06BUG/MINOR: h1: fix detection of upper bytes in the URI
2024-06-06BUG/MINOR: backend: use cum_sess counters instead of cum_conn
2024-06-06BUG/MINOR: fd: my_closefrom() on Linux could skip contiguous series of sockets
2024-06-06BUG/MINOR: sock: handle a weird condition with connect()
2024-06-06BUG/MINOR: stconn: Fix sc_mux_strm() return value
2024-04-29BUG/MEDIUM: cache: Vary not working properly on anything other than accept-encoding
2024-04-18BUG/MINOR: server: fix slowstart behavior
2024-04-18BUG/MEDIUM: peers: Fix exit condition when max-updates-at-once is reached
2024-04-18BUG/MEDIUM: spoe: Always retry when an applet fails to send a frame
2024-04-18BUG/MEDIUM: applet: Fix applet API to put input data in a buffer
2024-04-18BUG/MEDIUM: evports: do not clear returned events list on signal
2024-04-18BUG/MEDIUM: stconn: Don't forward channel data if input data must be filtered
2024-04-18BUG/MEDIUM: grpc: Fix several unaligned 32/64 bits accesses
2024-04-18BUG/MAJOR: stick-tables: fix race with peers in entry expiration
2024-04-18BUG/MEDIUM: peers/trace: fix crash when listing event types
2024-04-18BUG/MINOR: debug: make sure DEBUG_STRICT=0 does work as documented
2024-04-18BUG/MINOR: http-ana: Fix TX_L7_RETRY and TX_D_L7_RETRY values
2024-04-18BUG/MEDIUM: http-ana: Deliver 502 on keep-alive for fressh server connection
2024-04-18BUG/MINOR: log: invalid snprintf() usage in sess_build_logline()
2024-04-18BUG/MINOR: tools/log: invalid encode_{chunk,string} usage
2024-04-18BUG/MINOR: log: fix lf_text_len() truncate inconsistency
2024-04-18BUG/MINOR: listener: always assign distinct IDs to shards
2024-04-18BUG/MEDIUM: quic: don't blindly rely on unaligned accesses
2024-04-08BUG/MINOR: cli: Report an error to user if command or payload is too big
2024-04-08BUG/MAJOR: connection: fix server used_conns with H2 + reuse safe
2024-04-08BUG/MEDIUM: http_ana: ignore NTLM for reuse aggressive/always and no H1
2024-04-08BUG/MAJOR: server: do not delete srv referenced by session
2024-04-08BUG/MEDIUM: ssl: Fix crash when calling "update ssl ocsp-response" when an update is ongoing
2024-04-08BUG/MAJOR: ocsp: Separate refcount per instance and per store
2024-04-08BUG/MEDIUM: quic: fix connection freeze on post handshake
2024-04-08BUG/MEDIUM: server: fix dynamic servers initial settings

Back to the list of branches and versions
Back to the HAProxy page