HAProxy known bugs for maintenance branch 2.9 :  0 

This is maintenance branch 2.9 whose latest version is 2.9.15. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches. In short, if you are running any 2.9 version other than 2.9.15, you're running with known bugs.

Quick links

Versions available in this branch

This branch contains the following releases :

DateVersionComment
2025-03-212.9.15 ⇐ last
2025-01-292.9.14 
2024-12-122.9.13 
2024-11-082.9.12 
2024-09-192.9.11 
2024-09-032.9.10 
2024-06-142.9.9 
2024-06-112.9.8 
2024-04-052.9.7 
2024-02-262.9.6 
2024-02-152.9.5 
2024-01-312.9.4 
2024-01-182.9.3 
2024-01-112.9.2 
2023-12-152.9.1 
2023-12-052.9.0 

Fixes for known bugs pending in this branch since the last release (2.9.15)

These fixes have already been queued for the next 2.9 release but no version was released with them yet. Note that fixes are backported several at a time from the development branch to maintenance branches, and the absence of a fix here doesn't mean none will be issued soon.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in the latest version of this branch by category :

TotalCRITICALMAJORMEDIUMMINOR
0 0 0 0 0

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)

Known bugs fixed in the development branch after the last commit in this branch

It is important to understand that not all of these commits are necessarily relevant to this version, but clicking on them will show the bug description. All fixes are made first in the development branch and then backported to the maintenance branches. This ensures no fix is lost when upgrading. If a fix was marked for backporting to this branch and is not there yet, it's likely that it is still missing. Do not hesitate to ask on the haproxy mailing list if you feel like a fix has been skipped.

DateSubject
2025-04-18BUG/MINOR: proxy: always detach a proxy from the names tree on free()
2025-04-18BUG/MINOR: quic: do not crash on CRYPTO ncbuf alloc failure
2025-04-17BUG/MINOR: debug: detect and prevent re-entrance in ha_thread_dump_fill()
2025-04-17BUG/MINOR: wdt/debug: avoid signal re-entrance between debugger and watchdog
2025-04-17BUG/MINOR debug: fix !USE_THREAD_DUMP in ha_thread_dump_fill()
2025-04-17BUG/MINOR: threads: set threads_idle and threads_harmless even with no threads
2025-04-17BUG/MINOR: mux-h2: do not apply timer on idle backend connection
2025-04-17BUG/MINOR: rhttp: ensure GOAWAY can be emitted after reversal
2025-04-17BUG/MINOR: rhttp: fix reconnect if timeout connect unset
2025-04-17BUG/MINOR: mux-h2: prevent past scheduling with idle connections
2025-04-17BUG/MEDIUM: hlua: fix hlua_applet_{http,tcp}_fct() yield regression (lost data)
2025-04-16BUG/MINOR: h3: reject request URI with invalid characters
2025-04-16BUG/MINOR: h3: reject invalid :path in request
2025-04-16BUG/MINOR: h3: filter upgrade connection header
2025-04-16BUG/MEDIUM: h3: trim whitespaces in header value prior to QPACK encoding
2025-04-16BUG/MEDIUM: h3: trim whitespaces when parsing headers value
2025-04-16BUG/MINOR: acme/cli: fix certificate name in error message
2025-04-16BUG/MINOR: acme: fix the exponential backoff of retries
2025-04-16BUG/MINOR: acme: key not restored upon error in acme_res_certificate() V2
2025-04-16Revert "BUG/MINOR: acme: key not restored upon error in acme_res_certificate()"
2025-04-15BUG/MEDIUM: http-ana: Report 502 from req analyzer only during rsp forwarding
2025-04-15BUG/MINOR: http-ana: Properly detect client abort when forwarding the response
2025-04-15BUILD: incompatible pointer type suspected with -DDEBUG_UNIT
2025-04-15BUG/MINOR: acme: fix possible NULL deref
2025-04-14DEBUG: counters: add the ability to enable/disable updating the COUNT_IF counters
2025-04-14DEBUG: counters: make COUNT_IF() only appear at DEBUG_COUNTERS>=1
2025-04-14DEBUG: rename DEBUG_GLITCHES to DEBUG_COUNTERS and enable it by default
2025-04-14DEBUG: init: report invalid characters in debug description strings
2025-04-14BUG/MINOR: debug: remove the trailing \n from BUG_ON() statements
2025-04-14BUG/MINOR: thread: protect thread_cpus_enabled_at_boot with USE_THREAD
2025-04-14BUG/MINOR: acme: key not restored upon error in acme_res_certificate()
2025-04-12BUG/MINOR: cpu-topo: check the correct variable for NULL after malloc()
2025-04-12BUG/MINOR: acme: ckch_conf_acme_init() when no filename
2025-04-10BUG/MINOR: hlua: fix invalid errmsg use in hlua_init()
2025-04-09BUG/MINOR: backend: do not use the source port when hashing clientip
2025-04-07BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refs
2025-04-07BUG/MINOR: log: fix CBOR encoding with LOG_VARTEXT_START() + lf_encode_chunk()
2025-04-03BUG/MINOR: hlua_fcn: fix potential UAF with Queue:pop_wait()
2025-04-03BUG/MINOR: server: ensure check-reuse-pool is copied from default-server
2025-04-03BUG/MEDIUM: peers: prevent learning expiration too far in futur from unsync node
2025-04-03BUG/MINOR: peers: fix expire learned from a peer not converted from ms to ticks
2025-04-03BUG/MEDIUM: stream: Fix a possible freeze during a forced shut on a stream
2025-04-02BUG/MEDIUM: backend: fix reuse with set-dst/set-dst-port
2025-04-02BUG/MINOR: backend: do not overwrite srv dst address on reuse
2025-04-02BUG/MINOR: rhttp: fix incorrect dst/dst_port values
2025-04-02BUG/MEDIUM: leastconn: Don't try to reposition if the server is down
2025-04-02BUG/MINOR: ssl/ckch: leak in error path
2025-04-01BUG/MINOR: config: silence .notice/.warning/.alert in discovery mode
2025-03-27BUG/MINOR: log: fix gcc warn about truncating NUL terminator while init char arrays

Back to the list of branches and versions
Back to the HAProxy page