2026-07-02BUG/MEDIUM: mux-h1: Dup connection/upgrade value to parse it when making headers 2026-07-02BUG/MINOR: cache: Fix copy of value when parsing maxage 2026-07-02Revert "BUG/MEDIUM: dns: fix long loops in additional records parse on name failure" 2026-07-02BUG/MINOR: mux-fcgi: Use relative offset to compute contig data in demux buf 2026-07-02BUG/MEDIUM: mux-fcgi: reject stream ID 0 for application records 2026-07-02BUG/MINOR: hlua: prevent Lua from passing CR/LF/NUL in HTTP headers 2026-07-02BUG/MEDIUM: auth: fix unconfigured password NULL deref 2026-07-02BUG/MINOR: payload: fix the handshake length bounds check smp_client_hello_parse() 2026-07-02BUG/MEDIUM: cache: always verify the primary hash in get_secondary_entry() 2026-07-02BUG/MINOR: dict: fix refcount race on insert collision 2026-07-02BUG/MEDIUM: hlua: Fix integer underflow when receiving line from lua cosocket 2026-07-02BUG/MEDIUM: dict: hold lock while decrementing refcount in dict_entry_unref 2026-07-02BUG/MEDIUM: mux-fcgi: fix uint16_t overflow in drl += drp 2026-07-02BUG/MINOR: hpack-tbl: add missing NULL check after hpack_dht_defrag() 2026-05-21BUG/MEDIUM: server: Duplicate healthcheck's alpn inherited from default server 2026-05-21BUG/MINOR: h1: Don't mask websocket protocol if multiple protocols used 2026-05-21BUG/MEDIUM: h1: Skip all h2c values from Upgrade headers during parsing 2026-05-21BUG/MINOR: dns: fix dangling dgram pointer on dns_dgram_init() failure path 2026-05-21BUG/MEDIUM: resolvers: fix name compression pointer validation in resolv_read_name() 2026-05-21BUG/MEDIUM: dns: fix long loops in additional records parse on name failure 2026-05-21BUG/MINOR: backend: correct parameter value validation in get_server_ph_post() 2026-05-21BUG/MEDIUM: dict: hold read lock while incrementing refcount in dict_insert 2026-05-07BUG/MEDIUM: stick-table: properly check permissions on CLI's set/clear cmd 2026-05-07Revert "BUG/MEDIUM: cli: fix master CLI connection slot leak on client disconnect" 2026-05-05BUG/MINOR: tcpcheck: Properly report error for http health-checks 2026-05-04BUG/MEDIUM: cli: fix master CLI connection slot leak on client disconnect 2026-05-04BUG/MINOR: mworker/cli: check ci_insert() return value in pcli_parse_request() 2026-05-04BUG/MINOR: resolvers: Free opts on parse error in resolv_parse_do_resolve() 2026-05-04BUG/MAJOR: mux-h2: preset MSGF_BODY_CL on H2_SF_DATA_CLEN in h2c_dec_hdrs() 2026-05-04BUG/MEDIUM: mux-h2: fix the body_len to check when parsing request trailers 2026-05-04BUG/MINOR: map: do not leak a map descriptor on load error 2026-05-04BUG/MINOR: hpack: validate idx > 0 in hpack_valid_idx() 2026-04-30BUG/MEDIUM: mux-fcgi: Properly handle full buffer for FCGI_PARAM record 2026-04-30BUG/MEDIUM: http-htx: Loop on full host value during scheme based normalization 2026-04-30BUG/MEDIUM: http-htx: Don't use data from HTX message to update authority 2026-04-30BUG/MAJOR: http-htx: Store new host in a chunk for scheme-based normalization 2026-04-23BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as well 2026-04-23BUG/MEDIUM: mux-fcgi: prevent record-length truncation with large bufsize 2026-04-23BUG/MINOR: sample: fix info leak in regsub when exp_replace fails 2026-04-23BUG/MEDIUM: samples: Fix handling of SMP_T_METH samples 2026-04-23BUG/MINOR: spoe: fix pointer arithmetic overflow in spoe_decode_buffer() 2026-04-23BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals 2026-04-23BUG/MINOR: peers: fix OOB heap write in dictionary cache update 2026-04-23BUG/MEDIUM: payload: validate SNI name_len in req.ssl_sni 2026-04-17BUG/MINOR: config: Properly test warnif_misplaced_* return values 2026-04-17BUG/MINOR: sock: adjust accept() error messages for ENFILE and ENOMEM 2026-04-17BUG/MINOR: mux-h2: properly ignore R bit in WINDOW_UPDATE increments 2026-04-17BUG/MINOR: mux-h2: properly ignore R bit in GOAWAY stream ID 2026-04-17BUG/MEDIUM: peers: enforce check on incoming table key type 2026-04-17BUG/MINOR: mjson: make mystrtod() length-aware to prevent out-of-bounds reads 2026-04-17BUG/MINOR: h2/h3: Never insert partial headers/trailers in an HTX message 2026-04-17BUG/MINOR: h2/h3: Only test number of trailers inserted in HTX message 2026-04-17BUG/MINOR: mworker: fix typo &= instead of & in proc list serialization 2026-04-17BUG/MINOR: tcpcheck: Fix typo in error error message for `http-check expect` 2026-03-09BUG/MINOR: backend: Don't get proto to use for webscoket if there is no server 2026-03-05BUG/MEDIUM: mux-fcgi: Use a safe loop to resume each stream eligible for sending 2026-03-05BUG/MAJOR: resolvers: Properly lowered the names found in DNS response 2026-03-05BUG/MINOR: resolvers: always normalize FQDN from response 2026-03-05BUG/MAJOR: fcgi: Fix param decoding by properly checking its size 2026-03-05BUG/MINOR: h1-htx: Be sure that H1 response version starts by "HTTP/" 2026-03-05BUG/MEDIUM: hpack: correctly deal with too large decoded numbers 2025-10-10BUG/MINOR: ssl: always clear the remains of the first hello for the second one 2025-10-10BUG/MEDIUM: ssl: take care of second client hello 2025-10-02BUG/MINOR: h2: forbid 'Z' as well in header field names checks 2025-10-02BUG/CRITICAL: mjson: fix possible DoS when parsing numbers 2025-04-22BUG/MINOR: server: check for either proxy-protocol v1 or v2 to send hedaer 2025-04-17BUG/MINOR: h2: always trim leading and trailing LWS in header values 2025-04-17BUG/MINOR: h2: reject extended connect for h2c protocol 2025-04-17BUG/MINOR: h1: do not forward h2c upgrade header token 2025-04-17BUG/MINOR: hlua: fix invalid errmsg use in hlua_init() 2025-04-17BUG/MINOR: backend: do not use the source port when hashing clientip 2025-04-17BUG/MEDIUM: sample: fix risk of overflow when replacing multiple regex back-refs 2025-04-17BUG/MINOR: backend: do not overwrite srv dst address on reuse 2025-04-17BUG/MINOR: log: fix gcc warn about truncating NUL terminator while init char arrays 2025-04-17BUG/MEDIUM: peers: prevent learning expiration too far in futur from unsync node 2025-04-17BUG/MINOR: peers: fix expire learned from a peer not converted from ms to ticks 2025-04-17BUG/MEDIUM: hlua/cli: fix cli applet UAF in hlua_applet_wakeup() 2025-04-17BUG/MINOR: namespace: handle a possible strdup() failure 2025-04-17BUG/MINOR: cfgparse/peers: properly handle ignored local peer case 2025-04-17BUG/MINOR: cfgparse/peers: fix inconsistent check for missing peer server 2025-04-17BUG/MEIDUM: startup: return to initial cwd only after check_config_validity() 2025-04-17BUG/MINOR: cfgparse: fix NULL ptr dereference in cfg_parse_peers 2025-04-17BUG/MINOR: stats-json: Define JSON_INT_MAX as a signed integer 2025-04-17BUG/MINOR: cli: Fix a possible infinite loop in _getsocks() 2025-04-17BUG/MINOR: cli: Fix memory leak on error for _getsocks command 2025-04-17BUG/MINOR: server: fix the "server-template" prefix memory leak 2025-04-17BUG/MINOR: tcp-rules: Don't forward close during tcp-response content rules eval 2025-04-17BUG/MINOR: fcgi: Don't set the status to 302 if it is already set 2025-04-17BUG/MEDIUM: filters: Handle filters registered on data with no payload callback 2025-04-17BUG/MINOR: cli: Wait for the last ACK when FDs are xferred from the old worker 2025-04-17BUG/MEDIUM: htx: wrong count computation in htx_xfer_blks() 2025-04-17BUG/MEDIUM: fd: mark FD transferred to another process as FD_CLONED 2025-04-17BUG/MEDIUM: clock: make sure now_ms cannot be TICK_ETERNITY 2025-04-17BUG/MEDIUM: spoe: Don't wakeup idle applets in loop during stopping 2025-04-17BUG/MINOR: spoe: Allow applet creation when closing the last one during stopping 2025-04-17BUG/MINOR: spoe: Check the shared waiting queue to shut applets during stopping 2025-04-17BUG/MEDIUM: ssl: chosing correct certificate using RSA-PSS with TLSv1.3 2025-04-17BUG/MINOR: ssl: put ssl_sock_load_ca under SSL_NO_GENERATE_CERTIFICATES 2025-04-17BUG/MINOR: stktable: fix big-endian compatiblity in smp_to_stkey() 2025-04-17BUG/MEDIUM: pattern: prevent uninitialized reads in pat_match_{str,beg} 2025-04-17BUG/MEDIUM: mux-h1: Fix how timeouts are applied on H1 connections 2025-04-17BUG/MINOR: server-state: Fix expiration date of srvrq_check tasks 2025-04-17BUG/MINOR: signal: register default handler for SIGINT in signal_init() 2025-04-17BUG/MINOR: h1-htx: Use default reason if not set when formatting the response 2025-04-17BUG/MEDIUM: http-ana: Reset request flag about data sent to perform a L7 retry 2025-04-17BUG/MEDIUM: sock: Remove FD_POLL_HUP during connect() if FD_POLL_ERR is not set 2025-04-17BUG/MEDIUM: http-ana: Don't release too early the L7 buffer 2025-04-17BUG/MEDIUM: mux-h2: Check the number of headers in HEADERS frame after decoding 2025-04-17BUG/MEDIUM: mux-h2: Increase max number of headers when encoding HEADERS frames 2025-04-17BUG/MINOR: http-ana: Adjust the server status before the L7 retries 2025-04-17BUG/MINOR: http_ana: Report -1 for %Tr for invalid response only 2025-04-17BUG/MINOR: peers: make sure to always apply offsets to now_ms in expiration 2025-04-17BUG/MEDIUM: mailers: make sure to always apply offsets to now_ms in expiration 2025-04-17BUG/MEDIUM: checks: make sure to always apply offsets to now_ms in expiration 2025-04-17BUG/MEDIUM: mux-h2: Don't send RST_STREAM frame for streams with no ID 2025-04-17BUG/MEDIUM: resolvers: Insert a non-executed resulution in front of the wait list 2025-04-17BUG/MINOR: cli: don't show sockpairs in HAPROXY_CLI and HAPROXY_MASTER_CLI 2024-12-02BUG/MINOR: ssl: can't load a separated key file with openssl > 3.0 2024-11-06BUG/MINOR: http-ana: Report internal error if an action yields on a final eval 2024-11-06BUG/MINOR: ssl/cli: 'set ssl cert' does not check the transaction name correctly 2024-11-06BUG/MEDIUM: connection/http-reuse: fix address collision on unhandled address families 2024-11-06BUG/MINOR: mworker: fix mworker-max-reloads parser 2024-11-06BUG/MINOR: http-ana: Don't report a server abort if response payload is invalid 2024-11-06BUG/MEDIUM: hlua: properly handle sample func errors in hlua_run_sample_{fetch,conv}() 2024-11-06BUG/MEDIUM: hlua: make hlua_ctx_renew() safe 2024-11-06BUG/MEDIUM: server: server stuck in maintenance after FQDN change 2024-11-06BUG/MINOR: cfgparse-global: fix allowed args number for setenv 2024-11-06BUG/MEDIUM: cli: Deadlock when setting frontend maxconn 2024-09-17BUG/MINOR: server: Don't warn fallback IP is used during init-addr resolution 2024-09-17BUG/MINOR: polling: fix time reporting when using busy polling 2024-09-17BUG/MEDIUM: pattern: prevent UAF on reused pattern expr 2024-09-17BUG/MINOR: pattern: prevent const sample from being tampered in pat_match_beg() 2024-09-17BUG/MINOR: pattern: do not leave a leading comma on "set" error messages 2024-09-17BUG/MINOR: pattern: pat_ref_set: return 0 if err was found 2024-09-17BUG/MINOR: pattern: pat_ref_set: fix UAF reported by coverity 2024-09-17BUG/MINOR: proto_uxst: delete fd from fdtab if listen() fails 2024-09-17BUG/MINOR: proto_tcp: delete fd from fdtab if listen() fails 2024-09-17BUG/MINOR: trace: automatically start in waiting mode with "start " 2024-09-17BUG/MINOR: fcgi-app: handle a possible strdup() failure 2024-09-17BUG/MEDIUM: h2: Only report early HTX EOM for tunneled streams 2024-09-17BUG/MEDIUM: cli: Always release back endpoint between two commands on the mcli 2024-09-17BUG/MEDIUM: stream: Prevent mux upgrades if client connection is no longer ready 2024-09-17BUG/MINOR: cli: Atomically inc the global request counter between CLI commands 2024-09-17BUG/MEDIUM: spoe: Be sure to create a SPOE applet if none on the current thread 2024-07-03BUG/MAJOR: server: do not delete srv referenced by session 2024-07-03BUG/MINOR: hlua: report proper context upon error in hlua_cli_io_handler_fct() 2024-07-03BUG/MINOR: cfgparse: remove the correct option on httpcheck send-state warning 2024-06-19BUG/MEDIUM: cli: fix cli_output_msg() regression