HAProxy known bugs for version v1.8.25 (maintenance branch 1.8) :  203 

This version (1.8.25) is a release belonging to maintenance branch 1.8 whose latest version is 1.8.31. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches.

Quick links

Other versions in the same branch

This branch contains the following releases :

DateVersionComment
2022-12-091.8.31 ⇐ last
2021-04-121.8.30 
2021-03-191.8.29 
2021-01-131.8.28 
2020-11-061.8.27 
2020-08-031.8.26 
2020-04-021.8.25 ⇐ yours
2020-02-151.8.24 
2019-11-251.8.23 
2019-10-251.8.22 
2019-08-161.8.21 
2019-04-251.8.20 
2019-02-111.8.19 
2019-02-061.8.18 
2019-01-081.8.17 
2018-12-211.8.16 
2018-12-131.8.15 
2018-09-201.8.14 
2018-07-301.8.13 
2018-06-271.8.12 
2018-06-261.8.11 
2018-06-221.8.10 
2018-05-181.8.9 
2018-04-191.8.8 
2018-04-071.8.7 
2018-04-051.8.6 
2018-03-231.8.5 
2018-02-081.8.4 
2017-12-301.8.3 
2017-12-231.8.2 
2017-12-031.8.1 
2017-11-261.8.0 

Known bugs affecting this version, and already fixed in the maintenance branch

These fixes have already been queued for a more recent 1.8 version. Some of them might have already been released in a more recent version than yours, and other ones might still be pending in the maintenance branch for a future release. The list may be empty if you're already on the latest version and no new fix was backported.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in this version by category :

TotalCRITICALMAJORMEDIUMMINOR
203 0 7 79 117

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2022-12-09BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
2022-12-09BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
2022-12-09BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
2022-12-09BUG/MAJOR: stick-table: don't process store-response rules for applets
2022-12-09BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
2022-08-30BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
2022-08-30BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
2022-08-30BUG/MEDIUM: mux-h2: do not fiddle with ->dsi to indicate demux is idle
2022-08-25BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
2022-08-25BUG/MINOR: hlua: Don't rely on top of the stack when using Lua buffers
2022-08-25BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
2022-08-25BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
2022-08-25BUG/MINOR: server: do not enable DNS resolution on disabled proxies
2022-08-25BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
2022-08-25BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
2022-08-25BUG/MINOR: map/cli: protect the backref list during "show map" errors
2022-08-25BUG/MEDIUM: cli: make "show cli sockets" really yield
2022-08-25BUG/MINOR: cache: Disable cache if applet creation fails
2022-08-25BUG/MINOR: cache: do not display expired entries in "show cache"
2022-08-25BUG/MINOR: cli: shows correct mode in "show sess"
2022-08-25BUG/MEDIUM: mworker: close unused transferred FDs on load failure
2022-08-25BUG/MAJOR: spoe: properly detach all agents when releasing the applet
2022-08-25BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
2022-08-25BUG/MINOR: cli: fix _getsocks with musl libc
2022-08-25BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
2022-08-25BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
2022-08-25BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
2022-08-25BUG/MAJOR: lua: use task_wakeup() to properly run a task once
2022-08-25BUG/MEDIUM: lua: fix wakeup condition from sleep()
2022-08-25BUG/MINOR: server: allow 'enable health' only if check configured
2022-08-25BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
2022-08-25BUG/MEDIUM: sock: really fix detection of early connection failures in for 2.3-
2022-08-25BUG/MINOR: compat: make sure __WORDSIZE is always defined
2022-08-25BUG/MINOR: tools: Fix loop condition in dump_text()
2022-08-25BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
2022-08-25BUG/MINOR: server: update last_change on maint->ready transitions too
2022-08-25BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
2022-08-25BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
2021-07-29BUG/MEDIUM: tcp-check: Do not dereference inexisting connection
2021-07-08BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
2021-07-08BUG/MINOR: cli: fix server name output in "show fd"
2021-07-08BUG/MEDIUM: sock: make sure to never miss early connection failures
2021-07-08BUG/MINOR: server/cli: Fix locking in function processing "set server" command
2021-07-08BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
2021-07-08BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
2021-07-08BUG/MEDIUM: spoe: Register pre/post analyzers in start_analyze callback function
2021-07-08BUG/MEDIUM: dns: send messages on closed/reused fd if fd was detected broken
2021-07-08BUG/MINOR: ssl: use atomic ops to update global shctx stats
2021-07-08BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
2021-07-08BUG/MEDIUM: dns: reset file descriptor if send returns an error
2021-07-08BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
2021-07-08BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
2021-07-08BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
2021-07-08BUG/MEDIUM: ebtree: Invalid read when looking for dup entry
2021-07-08BUG/MEDIUM: peers: reset tables stage flags stages on new conns
2021-07-08BUG/MEDIUM: peers: re-work updates lookup during the sync on the fly
2021-07-08BUG/MEDIUM: peers: reset commitupdate value in new conns
2021-07-08BUG/MEDIUM: peers: reset starting point if peers appears longly disconnected
2021-07-08BUG/MEDIUM: peers: stop considering ack messages teaching a full resync
2021-07-08BUG/MEDIUM: peers: register last acked value as origin receiving a resync req
2021-07-08BUG/MEDIUM: peers: initialize resync timer to get an initial full resync
2021-07-08BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
2021-07-08BUG/MEDIUM: peers: re-work connection to new process during reload.
2021-07-08BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
2021-07-08BUG/MINOR: logs: Report the true number of retries if there was no connection
2021-07-08BUG/MEDIUM: sample: Fix adjusting size in field converter
2021-07-08BUG/MINOR: tools: fix parsing "us" unit for timers
2021-03-31BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
2021-03-31BUG/MINOR: tcp: fix silent-drop workaround for IPv6
2021-03-31BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
2021-03-31BUG/MEDIUM: time: make sure to always initialize the global tick
2021-03-24BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
2021-03-19BUG/MINOR: freq_ctr/threads: make use of the last updated global time
2021-03-18BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
2021-03-18BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
2021-03-18BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
2021-03-18BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
2021-03-18BUG/MEDIUM: session: NULL dereference possible when accessing the listener
2021-03-18BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
2021-03-18BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
2021-03-03BUG/MEDIUM: dns: Consider the fact that dns answers are case-insensitive
2021-03-02BUG/MEDIUM: spoe: Explicitly wakeup SPOE stream if waiting for more data
2021-03-02BUG/MAJOR: spoe: Be sure to remove all references on a released spoe applet
2021-03-02BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread > 1
2021-03-02BUG/MINOR: connection: Use the client's dst family for adressless servers
2021-03-02BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
2021-03-02BUG/MINOR: http-ana: Only consider dst address to process originalto option
2021-03-02BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
2021-03-02BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
2021-03-02BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
2021-03-02BUG/MINOR: server: Init params before parsing a new server-state line
2021-03-02BUG/MINOR: sample: Always consider zero size string samples as unsafe
2021-03-02BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
2021-03-02BUG/MINOR: session: atomically increment the tracked sessions counter
2021-03-02BUG/MINOR: server: Remove RMAINT from admin state when loading server state
2021-03-02BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
2021-03-02BUG/MEDIUM: config: don't pick unset values from last defaults section
2021-03-02BUG/MINOR: server: Fix server-state-file-name directive
2021-03-02BUG/MINOR: server: re-align state file fields number
2021-02-05BUG/MINOR: xxhash: make sure armv6 uses memcpy()
2021-02-05BUG/MINOR: stick-table: Always call smp_fetch_src() with a valid arg list
2021-02-05BUG/MINOR: config: fix leak on proxy.conn_src.bind_hdr_name
2021-02-05BUG/MINOR: sample: Memory leak of sample_expr structure in case of error
2021-01-12BUG/MINOR: srv: do not init address if backend is disabled
2021-01-12BUG/MINOR: cfgparse: Fail if the strdup() for `rule->be.name` for `use_backend` fails
2020-12-17BUG/MEDIUM: mworker: fix again copy_argv()
2020-12-14BUG/MEDIUM: lb-leastconn: Reposition a server using the right eweight
2020-12-14BUG/MINOR: tools: Reject size format not starting by a digit
2020-12-14BUG/MINOR: tools: make parse_time_err() more strict on the timer validity
2020-12-14BUG/MINOR: lua: warn when registering action, conv, sf, cli or applet multiple times
2020-12-14BUG/MINOR: lua: Some lua init operation are processed unsafe
2020-12-14BUG/MINOR: lua: Post init register function are not executed beyond the first one
2020-12-14BUG/MINOR: lua: lua-load doesn't check its parameters
2020-12-14BUG/MINOR: http-fetch: Fix calls w/o parentheses of the cookie sample fetches
2020-12-14BUG/MINOR: http-fetch: Extract cookie value even when no cookie name
2020-12-14BUG/MINOR: config: copy extra cookie attributes from dfl proxy
2020-11-04BUG/MINOR: filters: Skip disabled proxies during startup only
2020-11-04BUG/MINOR: server: Set server without addr but with dns in RMAINT on startup
2020-11-04BUG/MEDIUM: filters: Don't try to init filters for disabled proxies
2020-11-04BUG/MINOR: cache: Inverted variables in http_calc_maxage function
2020-11-04BUG/MINOR: lua: initialize sample before using it
2020-11-04BUG/MINOR: server: fix down_time report for stats
2020-11-04BUG/MINOR: server: fix srv downtime calcul on starting
2020-11-04BUG/MINOR: extcheck: add missing checks on extchk_setenv()
2020-11-04BUG/MAJOR: mux-h2: Don't try to send data if we know it is no longer possible
2020-11-04BUG/MEDIUM: server: support changing the slowstart value from state-file
2020-11-04BUG/MINOR: queue: properly report redistributed connections
2020-10-19BUG/MEDIUM: lb: Always lock the server when calling server_{take,drop}_conn
2020-10-19BUG/MEDIUM: spoe: Unset variable instead of set it if no data provided
2020-10-09BUG/MINOR: stats: fix validity of the json schema
2020-10-05BUG/MEDIUM: listeners: do not pause foreign listeners
2020-10-05BUG/MINOR: config: Fix memory leak on config parse listen
2020-10-05BUG/MEDIUM: h2: report frame bits only for handled types
2020-09-28BUG/MINOR: ssl: verifyhost is case sensitive
2020-09-28BUG/MEDIUM: ssl: does not look for all SNIs before chosing a certificate
2020-09-23BUG/MEDIUM: pattern: fix memory leak in regex pattern functions
2020-09-11BUG/MEDIUM: pattern: Renew the pattern expression revision when it is pruned
2020-09-11BUG/MINOR: threads: work around a libgcc_s issue with chrooting
2020-09-11BUG/MEDIUM: ssl: check OCSP calloc in ssl_sock_load_ocsp()
2020-09-07BUG/MINOR: startup: haproxy -s cause 100% cpu
2020-09-07BUG/MINOR: reload: do not fail when no socket is sent
2020-08-11BUG/MINOR: stats: use strncmp() instead of memcmp() on health states
2020-08-11BUG/MINOR: lua: Check argument type to convert it to IP mask in arg validation
2020-08-11BUG/MINOR: lua: Check argument type to convert it to IPv4/IPv6 arg validation
2020-08-11BUG/MEDIUM: map/lua: Return an error if a map is loaded during runtime
2020-08-05BUG/MEDIUM: mux-h2: Don't fail if nothing is parsed for a legacy chunk response
2020-08-03BUG/MINOR: dns: ignore trailing dot
2020-08-03BUG/MINOR: server: Fix server_finalize_init() to avoid unused variable
2020-08-03BUG/MINOR: checks: Respect check-ssl param when a port or an addr is specified
2020-08-03BUG/MEDIUM: checks: Always initialize checks before starting them
2020-08-03BUG/MEDIUM: server/checks: Init server check during config validity check
2020-08-03BUG/MINOR: pools: use %u not %d to report pool stats in "show pools"
2020-08-03BUG/MINOR: threads: fix multiple use of argument inside HA_ATOMIC_UPDATE_{MIN,MAX}()
2020-08-03BUG/MINOR: threads: fix multiple use of argument inside HA_ATOMIC_CAS()
2020-08-03BUG/MINOR: checks: Remove a warning about http health checks
2020-08-03BUG/MINOR: checks: Compute the right HTTP request length for HTTP health checks
2020-08-03BUG/MINOR: http: make url_decode() optionally convert '+' to SP
2020-07-31BUG/MINOR: tcp-rules: Set the inspect-delay when a tcp-response action yields
2020-07-31BUG/MEDIUM: dns: Release answer items when a DNS resolution is freed
2020-07-31BUG/MEDIUM: mux-h2: Emit an error if the response chunk formatting is incomplete
2020-07-31BUG/MINOR: cfgparse: don't increment linenum on incomplete lines
2020-07-31BUG/MEDIUM: channel: Be aware of SHUTW_NOW flag when output data are peeked
2020-07-31BUG/MINOR: sample: Free str.area in smp_check_const_meth
2020-07-31BUG/MINOR: sample: Free str.area in smp_check_const_bool
2020-07-31BUG/MINOR: http_act: don't check capture id in backend (2)
2020-07-31BUG/MINOR: proxy: always initialize the trash in show servers state
2020-07-31BUG/MINOR: proxy: fix dump_server_state()'s misuse of the trash
2020-07-31BUG/MEDIUM: pattern: Add a trailing \0 to match strings only if possible
2020-07-31BUG/MEDIUM: fetch: Fix hdr_ip misparsing IPv4 addresses due to missing NUL
2020-07-31BUG/MINOR: spoe: correction of setting bits for analyzer
2020-07-31BUG/MINOR: systemd: Wait for network to be online
2020-07-31BUG/MINOR: spoe: add missing key length check before checking key names
2020-07-31BUG/MEDIUM: ebtree: use a byte-per-byte memcmp() to compare memory blocks
2020-07-31BUG/MINOR: tcp-rules: tcp-response must check the buffer's fullness
2020-07-31BUG/MINOR: ssl: fix ssl-{min,max}-ver with openssl < 1.1.0
2020-07-31BUG/MEDIUM: pattern: fix thread safety of pattern matching
2020-07-31BUG/MINOR: mworker: fix a memleak when execvp() failed
2020-07-31BUG/MEDIUM: mworker: fix the reload with an -- option
2020-07-31BUG/MINOR: init: -x can have a parameter starting with a dash
2020-07-31BUG/MEDIUM: mworker: fix the copy of options in copy_argv()
2020-07-31BUG/MINOR: proto-http: Fix detection of NTLM for the legacy HTTP version
2020-07-31BUG/MEDIUM: logs: fix trailing zeros on log message.
2020-07-31BUG/MINOR: logs: prevent double line returns in some events.
2020-07-31BUG/MEDIUM: hlua: Lock pattern references to perform set/add/del operations
2020-07-31BUG/MEDIUM: lua: Reset analyse expiration timeout before executing a lua action
2020-07-31BUG/MINOR: peers: fix internal/network key type mapping.
2020-07-31BUG/MINOR: pollers: remove uneeded free in global init
2020-07-31BUG/MINOR: cfgparse: Abort parsing the current line if an invalid \x sequence is encountered
2020-07-31BUG/MEDIUM: http_ana: make the detection of NTLM variants safer
2020-07-31BUG/MINOR: config: Make use_backend and use-server post-parsing less obscur
2020-07-31BUG/MINOR: sample: Set the correct type when a binary is converted to a string
2020-07-31BUG/MEDIUM: shctx: bound the number of loops that can happen around the lock
2020-07-31BUG/MEDIUM: shctx: really check the lock's value while waiting
2020-07-31BUG/MEDIUM: http: the "unique-id" sample fetch could crash without a steeam
2020-07-31BUG/MEDIUM: http: the "http_first_req" sample fetch could crash without a steeam
2020-07-31BUG/MEDIUM: capture: capture.{req,res}.* crash without a stream
2020-07-31BUG/MEDIUM: capture: capture-req/capture-res converters crash without a stream
2020-07-31BUG/MINOR: checks: chained expect will not properly wait for enough data
2020-07-31BUG/MINOR: checks/server: use_ssl member must be signed
2020-07-31BUG/MINOR: checks: Respect the no-check-ssl option
2020-07-31BUG/MINOR: check: Update server address and port to execute an external check
2020-07-31BUG/MINOR: tools: fix the i386 version of the div64_32 function
2020-07-31BUG/MINOR: ssl: default settings for ssl server options are not used

Back to the list of branches and versions
Back to the HAProxy page