HAProxy known bugs for version v3.0.2 (maintenance branch 3.0) :  84 

This version (3.0.2) is a release belonging to maintenance branch 3.0 whose latest version is 3.0.4. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches.

Quick links

Other versions in the same branch

This branch contains the following releases :

DateVersionComment
2024-09-033.0.4 ⇐ last
2024-07-113.0.3 
2024-06-143.0.2 ⇐ yours
2024-06-103.0.1 
2024-05-293.0.0 

Known bugs affecting this version, and already fixed in the maintenance branch

These fixes have already been queued for a more recent 3.0 version. Some of them might have already been released in a more recent version than yours, and other ones might still be pending in the maintenance branch for a future release. The list may be empty if you're already on the latest version and no new fix was backported.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in this version by category :

TotalCRITICALMAJORMEDIUMMINOR
84 0 3 39 42

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2024-09-06BUG/MINOR: quic: Too short datagram during packet building failures (aws-lc only)
2024-09-05BUG/MINOR: quic: Crash from trace dumping SSL eary data status (AWS-LC)
2024-09-05BUG/MEDIUM: quic: always validate sender address on 0-RTT
2024-09-05BUG/MINOR: quic: Missing incrementation in NEW_TOKEN frame builder
2024-09-04BUG/MEDIUM: clock: also update the date offset on time jumps
2024-09-03BUG/MINOR: cfgparse-global: remove tune.fast-forward from common_kw_list
2024-09-03BUG/MINOR: pattern: pat_ref_set: return 0 if err was found
2024-09-03BUG/MINOR: pattern: pat_ref_set: fix UAF reported by coverity
2024-09-03BUG/MINOR: h3: properly reject too long header responses
2024-09-03BUG/MINOR: proto_uxst: delete fd from fdtab if listen() fails
2024-09-03BUG/MINOR: mux-quic: do not send too big MAX_STREAMS ID
2024-09-03BUG/MEDIUM: mworker/cli: fix pipelined modes on master CLI
2024-09-03BUG/MINOR: proto_tcp: keep error msg if listen() fails
2024-09-03BUG/MINOR: proto_tcp: delete fd from fdtab if listen() fails
2024-09-03BUG/MINOR: quic/trace: make quic_conn_enc_level_init() emit NEW not CLOSE
2024-09-03BUG/MINOR: trace/quic: make "qconn" selectable as a lockon criterion
2024-09-03BUG/MINOR: trace: automatically start in waiting mode with "start "
2024-09-03BUG/MEDIUM: trace: fix null deref in lockon mechanism since TRACE_ENABLED()
2024-09-03BUG/MINOR: trace/quic: permit to lock on frontend/connect/session etc
2024-09-03BUG/MINOR: trace/quic: enable conn/session pointer recovery from quic_conn
2024-09-03BUG/MINOR: fcgi-app: handle a possible strdup() failure
2024-09-03BUG/MEDIUM: peer: Notify the applet won't consume data when it waits for sync
2024-09-03BUG/MEDIUM: mux-h2: Propagate term flags to SE on error in h2s_wake_one_stream
2024-09-03BUG/MEDIUM: h2: Only report early HTX EOM for tunneled streams
2024-09-03BUG/MEDIUM: http-ana: Report error on write error waiting for the response
2024-09-03BUG/MEDIUM: quic: prevent conn freeze on 0RTT undeciphered content
2024-09-03BUG/MEDIUM: ssl: 0-RTT initialized at the wrong place for AWS-LC
2024-09-03BUG/MEDIUM: ssl: reactivate 0-RTT for AWS-LC
2024-09-03BUG/MINOR: stconn: bs.id and fs.id had their dependencies incorrect
2024-09-03BUG/MEDIUM: mux-pt/mux-h1: Release the pipe on connection error on sending path
2024-09-03BUG/MEDIUM: stconn: Report error on SC on send if a previous SE error was set
2024-09-03BUG/MEDIUM: server/addr: fix tune.events.max-events-at-once event miss and leak
2024-09-03BUG/MEDIUM: mux-pt: Fix condition to perform a shutdown for writes in mux_pt_shut()
2024-09-03BUG/MINOR: Crash on O-RTT RX packet after dropping Initial pktns
2024-09-03BUG/MINOR: quic: Too shord datagram during O-RTT handshakes (aws-lc only)
2024-09-03BUG/MAJOR: mux-h2: always clear MUX_MFULL and DEM_MROOM when clearing the mbuf
2024-09-03BUG/MEDIUM: mux-h1: Properly handle empty message when an error is triggered
2024-09-03BUG/MINOR: quic: unexploited retransmission cases for Initial pktns.
2024-09-03BUG/MEDIUM: cli: Always release back endpoint between two commands on the mcli
2024-09-03BUG/MEDIUM: mux-pt: Never fully close the connection on shutdown
2024-09-02BUG/MINIR: proxy: Match on 429 status when trying to perform a L7 retry
2024-09-02BUG/MEDIUM: stream: Prevent mux upgrades if client connection is no longer ready
2024-09-02BUG/MEDIUM: mux-h2: Set ES flag when necessary on 0-copy data forwarding
2024-07-29BUG/MEDIUM: init: fix fd_hard_limit default in compute_ideal_maxconn
2024-07-29BUG/MEDIUM: queue: deal with a rare TOCTOU in assign_server_and_queue()
2024-07-29BUG/MEDIUM: jwt: Clear SSL error queue on error when checking the signature
2024-07-29BUG/MINOR: quic: Lack of precision when computing K (cubic only cc)
2024-07-29BUG/MINOR: quic: Non optimal first datagram.
2024-07-29BUG/MINOR: cli: Atomically inc the global request counter between CLI commands
2024-07-29BUG/MINOR: server: Don't warn fallback IP is used during init-addr resolution
2024-07-29BUG/MINOR: stick-table: fix crash for src_inc_gpc() without stkcounter
2024-07-29BUG/MAJOR: mux-h2: force a hard error upon short read with pending error
2024-07-29BUG/MEDIUM: ssl_sock: fix deadlock in ssl_sock_load_ocsp() on error path
2024-07-29BUG/MEDIUM: debug/cli: fix "show threads" crashing with low thread counts
2024-07-29BUG/MINOR: session: Eval L4/L5 rules defined in the default section
2024-07-29BUG/MEDIUM: quic: prevent crash on accept queue full
2024-07-11BUG/MEDIUM: bwlim: Be sure to never set the analyze expiration date in past
2024-07-11BUG/MEDIUM: spoe: Be sure to create a SPOE applet if none on the current thread
2024-07-11BUG/MEDIUM: h1: Reject empty Transfer-encoding header
2024-07-11BUG/MINOR: h1: Reject empty coding name as last transfer-encoding value
2024-07-11BUG/MINOR: h1: Fail to parse empty transfer coding names
2024-07-11BUG/MINOR: jwt: fix variable initialisation
2024-07-05BUG/MEDIUM: peers: Fix crash when syncing learn state of a peer without appctx
2024-07-05BUG/MINOR: jwt: don't try to load files with HMAC algorithm
2024-07-05BUG/MEDIUM: server: fix race on server_atomic_sync()
2024-07-03BUG/MEDIUM: hlua/cli: Fix lua CLI commands to work with applet's buffers
2024-07-03BUG/MINOR: promex: Remove Help prefix repeated twice for each metric
2024-07-03BUG/MEDIUM: quic: fix possible exit from qc_check_dcid() without unlocking
2024-07-03BUG/MINOR: quic: fix race-condition on trace for CID retrieval
2024-07-03BUG/MINOR: quic: fix race condition in qc_check_dcid()
2024-07-03BUG/MEDIUM: quic: fix race-condition in quic_get_cid_tid()
2024-07-03BUG/MEDIUM: h3: ensure the ":scheme" pseudo header is totally valid
2024-07-03BUG/MEDIUM: h3: ensure the ":method" pseudo header is totally valid
2024-07-03BUG/MEDIUM: server/dns: prevent DOWN/UP flap upon resolution timeout or error
2024-07-03BUG/MINOR: server: fix first server template name lookup UAF
2024-06-26BUG/MEDIUM: stick-table: Decrement the ref count inside lock to kill a session
2024-06-26BUG/MINOR: hlua: report proper context upon error in hlua_cli_io_handler_fct()
2024-06-26BUG/MINOR: quic: fix BUG_ON() on Tx pkt alloc failure
2024-06-26BUG/MINOR: h3: fix BUG_ON() crash on control stream alloc failure
2024-06-26BUG/MINOR: mux-quic: fix crash on qcs SD alloc failure
2024-06-26BUG/MINOR: h3: fix crash on STOP_SENDING receive after GOAWAY emission
2024-06-26BUG/MAJOR: quic: fix padding with short packets
2024-06-26BUG/MEDIUM: proxy: fix email-alert invalid free
2024-06-26DEBUG: hlua: distinguish burst timeout errors from exec timeout errors
2024-06-26BUG/MINOR: log: fix broken '+bin' logformat node option

Back to the list of branches and versions
Back to the HAProxy page