HAProxy known bugs for version v2.6.16 (maintenance branch 2.6) :  193 

This version (2.6.16) is a release belonging to maintenance branch 2.6 whose latest version is 2.6.20. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches.

Quick links

Other versions in the same branch

This branch contains the following releases :

DateVersionComment
2024-11-082.6.20 ⇐ last
2024-09-192.6.19 
2024-06-182.6.18 
2024-04-052.6.17 
2023-12-132.6.16 ⇐ yours
2023-08-092.6.15 
2023-06-092.6.14 
2023-05-022.6.13 
2023-03-282.6.12 
2023-03-172.6.11 
2023-03-102.6.10 
2023-02-142.6.9 
2023-01-242.6.8 
2022-12-022.6.7 
2022-09-222.6.6 
2022-09-032.6.5 
2022-08-222.6.4 
2022-08-192.6.3 
2022-07-222.6.2 
2022-06-212.6.1 
2022-05-312.6.0 

Known bugs affecting this version, and already fixed in the maintenance branch

These fixes have already been queued for a more recent 2.6 version. Some of them might have already been released in a more recent version than yours, and other ones might still be pending in the maintenance branch for a future release. The list may be empty if you're already on the latest version and no new fix was backported.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in this version by category :

TotalCRITICALMAJORMEDIUMMINOR
193 0 7 70 116

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2024-11-08BUG/MEDIUM: mux-pt: Never fully close the connection on shutdown
2024-11-06BUG/MINOR: http-ana: Report internal error if an action yields on a final eval
2024-11-06BUG/MINOR: ssl/cli: 'set ssl cert' does not check the transaction name correctly
2024-11-06BUG/MEDIUM: server: fix race on servers_list during server deletion
2024-11-06BUG/MINOR: server: fix dynamic server leak with check on failed init
2024-11-06BUG/MEDIUM: connection/http-reuse: fix address collision on unhandled address families
2024-11-06BUG/MINOR: mworker: fix mworker-max-reloads parser
2024-11-06BUG/MINOR: http-ana: Don't report a server abort if response payload is invalid
2024-11-06BUG/MEDIUM: hlua: properly handle sample func errors in hlua_run_sample_{fetch,conv}()
2024-11-06BUG/MEDIUM: hlua: make hlua_ctx_renew() safe
2024-11-06BUG/MEDIUM: server: server stuck in maintenance after FQDN change
2024-11-06BUG/MINOR: cfgparse-global: fix allowed args number for setenv
2024-11-06BUG/MEDIUM: cli: Deadlock when setting frontend maxconn
2024-09-18BUG/MINOR: cfgparse-listen: fix option httpslog override warning message
2024-09-17BUG/MEDIUM: promex: Wait to have the request before sending the response
2024-09-17BUG/MEDIUM: cache/stats: Wait to have the request before sending the response
2024-09-17BUG/MEDIUM: queue: implement a flag to check for the dequeuing
2024-09-17BUG/MINOR: polling: fix time reporting when using busy polling
2024-09-17BUG/MEDIUM: pattern: prevent UAF on reused pattern expr
2024-09-17BUG/MINOR: pattern: prevent const sample from being tampered in pat_match_beg()
2024-09-17BUG/MINOR: pattern: do not leave a leading comma on "set" error messages
2024-09-17BUG/MINOR: pattern: pat_ref_set: return 0 if err was found
2024-09-17BUG/MINOR: pattern: pat_ref_set: fix UAF reported by coverity
2024-09-17BUG/MINOR: h3: properly reject too long header responses
2024-09-17BUG/MINOR: proto_uxst: delete fd from fdtab if listen() fails
2024-09-17BUG/MINOR: mux-quic: do not send too big MAX_STREAMS ID
2024-09-17BUG/MINOR: proto_tcp: keep error msg if listen() fails
2024-09-17BUG/MINOR: proto_tcp: delete fd from fdtab if listen() fails
2024-09-17BUG/MINOR: quic/trace: make quic_conn_enc_level_init() emit NEW not CLOSE
2024-09-17BUG/MINOR: trace/quic: make "qconn" selectable as a lockon criterion
2024-09-17BUG/MINOR: trace: automatically start in waiting mode with "start "
2024-09-17BUG/MINOR: trace/quic: permit to lock on frontend/connect/session etc
2024-09-17BUG/MINOR: trace/quic: enable conn/session pointer recovery from quic_conn
2024-09-17BUG/MINOR: fcgi-app: handle a possible strdup() failure
2024-09-17BUG/MEDIUM: h2: Only report early HTX EOM for tunneled streams
2024-09-17BUG/MEDIUM: quic: prevent conn freeze on 0RTT undeciphered content
2024-09-17BUG/MEDIUM: cli: Always release back endpoint between two commands on the mcli
2024-09-17BUG/MEDIUM: stream: Prevent mux upgrades if client connection is no longer ready
2024-07-31BUG/MEDIUM: init: fix fd_hard_limit default in compute_ideal_maxconn
2024-07-31BUG/MEDIUM: queue: deal with a rare TOCTOU in assign_server_and_queue()
2024-07-31BUG/MINOR: cli: Atomically inc the global request counter between CLI commands
2024-07-31BUG/MINOR: server: Don't warn fallback IP is used during init-addr resolution
2024-07-31BUG/MINOR: stick-table: fix crash for src_inc_gpc() without stkcounter
2024-07-31BUG/MEDIUM: spoe: Be sure to create a SPOE applet if none on the current thread
2024-07-31BUG/MEDIUM: h1: Reject empty Transfer-encoding header
2024-07-31BUG/MINOR: h1: Reject empty coding name as last transfer-encoding value
2024-07-31BUG/MINOR: h1: Fail to parse empty transfer coding names
2024-07-31BUG/MEDIUM: jwt: Clear SSL error queue on error when checking the signature
2024-07-31BUG/MINOR: jwt: fix variable initialisation
2024-07-31BUG/MINOR: jwt: don't try to load files with HMAC algorithm
2024-07-31BUG/MINOR: quic: Lack of precision when computing K (cubic only cc)
2024-07-03BUG/MEDIUM: h3: ensure the ":scheme" pseudo header is totally valid
2024-07-03BUG/MEDIUM: h3: ensure the ":method" pseudo header is totally valid
2024-07-03BUG/MINOR: hlua: report proper context upon error in hlua_cli_io_handler_fct()
2024-07-03BUG/MINOR: quic: fix BUG_ON() on Tx pkt alloc failure
2024-07-03BUG/MINOR: mux-quic: fix crash on qcs SD alloc failure
2024-07-03BUG/MINOR: quic: fix computed length of emitted STREAM frames
2024-06-19BUG/MEDIUM: cli: fix cli_output_msg() regression
2024-06-07BUG/MINOR: haproxy: only tid 0 must not sleep if got signal
2024-06-07BUG/MEDIUM: quic: don't blindly rely on unaligned accesses
2024-06-07BUG/MAJOR: connection: fix server used_conns with H2 + reuse safe
2024-06-07BUG/MEDIUM: http_ana: ignore NTLM for reuse aggressive/always and no H1
2024-06-07BUG/MAJOR: server: do not delete srv referenced by session
2024-06-07BUG/MEDIUM: quic: fix connection freeze on post handshake
2024-06-07BUG/MEDIUM: server: fix dynamic servers initial settings
2024-06-07BUG/MEDIUM: ssl: wrong priority whem limiting ECDSA ciphers in ECDSA+RSA configuration
2024-06-07BUG/MINOR: hlua: fix leak in hlua_ckch_set() error path
2024-06-07BUG/MINOR: hlua: prevent LJMP in hlua_traceback()
2024-06-07BUG/MINOR: hlua: fix unsafe hlua_pusherror() usage
2024-06-07BUG/MINOR: hlua: don't use lua_pushfstring() when we don't expect LJMP
2024-06-07BUG/MINOR: quic: prevent crash on qc_kill_conn()
2024-06-07BUG/MINOR: hlua: use CertCache.set() from various hlua contexts
2024-06-07BUG/MINOR: tools: fix possible null-deref in env_expand() on out-of-memory
2024-06-07BUG/MINOR: tcpcheck: report correct error in tcp-check rule parser
2024-06-07BUG/MINOR: cfgparse: remove the correct option on httpcheck send-state warning
2024-06-07BUG/MINOR: activity: fix Delta_calls and Delta_bytes count
2024-06-07BUG/MINOR: ssl/ocsp: init callback func ptr as NULL
2024-06-07BUG/MINOR: server: Don't reset resolver options on a new default-server line
2024-06-07BUG/MINOR: http-htx: Support default path during scheme based normalization
2024-06-07BUG/MINOR: quic: adjust restriction for stateless reset emission
2024-06-07BUG/MEDIUM: mux-quic: Create sedesc in same time of the QUIC stream
2024-06-07BUG/MEDIUM: quic_tls: prevent LibreSSL < 4.0 from negotiating CHACHA20_POLY1305
2024-06-07BUG/MAJOR: quic: Crash with TLS_AES_128_CCM_SHA256 (libressl only)
2024-06-07BUG/MINOR: connection: parse PROXY TLV for LOCAL mode
2024-06-07BUG/MINOR: stats: Don't state the 303 redirect response is chunked
2024-06-07BUG/MINOR: htpp-ana/stats: Specify that HTX redirect messages have a C-L header
2024-06-07BUG/MEDIUM: fd: prevent memory waste in fdtab array
2024-06-07BUG/MEDIUM: h1: Reject CONNECT request if the target has a scheme
2024-06-07BUG/MINOR: h1: Check authority for non-CONNECT methods only if a scheme is found
2024-06-07BUG/MEDIUM: stick-tables: properly mark stktable_data as packed
2024-06-07BUG/MEDIUM: htx: mark htx_sl as packed since it may be realigned
2024-06-07BUG/MINOR: qpack: fix error code reported on QPACK decoding failure
2024-06-07BUG/MINOR: mux-quic: fix error code on shutdown for non HTTP/3
2024-06-07BUG/MINOR: log: smp_rgs array issues with inherited global log directives
2024-06-07BUG/MINOR: log: keep the ref in dup_logger()
2024-06-07BUG/MINOR: mworker: reintroduce way to disable seamless reload with -x /dev/null
2024-06-07BUG/MINOR: h1: fix detection of upper bytes in the URI
2024-06-07BUG/MINOR: backend: use cum_sess counters instead of cum_conn
2024-06-07BUG/MINOR: fd: my_closefrom() on Linux could skip contiguous series of sockets
2024-06-07BUG/MINOR: sock: handle a weird condition with connect()
2024-06-07BUG/MINOR: stconn: Fix sc_mux_strm() return value
2024-06-07BUG/MEDIUM: cache: Vary not working properly on anything other than accept-encoding
2024-04-19BUG/MINOR: server: fix slowstart behavior
2024-04-19BUG/MEDIUM: peers: Fix exit condition when max-updates-at-once is reached
2024-04-19BUG/MEDIUM: evports: do not clear returned events list on signal
2024-04-19BUG/MEDIUM: stconn: Don't forward channel data if input data must be filtered
2024-04-19BUG/MEDIUM: grpc: Fix several unaligned 32/64 bits accesses
2024-04-19BUG/MEDIUM: peers/trace: fix crash when listing event types
2024-04-19BUG/MINOR: debug: make sure DEBUG_STRICT=0 does work as documented
2024-04-19BUG/MINOR: http-ana: Fix TX_L7_RETRY and TX_D_L7_RETRY values
2024-04-19BUG/MEDIUM: http-ana: Deliver 502 on keep-alive for fressh server connection
2024-04-19BUG/MINOR: log: invalid snprintf() usage in sess_build_logline()
2024-04-19BUG/MINOR: tools/log: invalid encode_{chunk,string} usage
2024-04-19BUG/MINOR: log: fix lf_text_len() truncate inconsistency
2024-04-08BUG/MEDIUM: cli: Warn if pipelined commands are delimited by a \n
2024-04-08BUG/MINOR: ext-check: cannot use without preserve-env
2024-04-08BUG/MEDIUM: quic: remove unsent data from qc_stream_desc buf
2024-04-08BUG/MEDIUM: mux-quic: report early error on stream
2024-04-08BUG/MEDIUM: cli: fix once for all the problem of missing trailing LFs
2024-04-05BUG/MINOR: proxy: fix logformat expression leak in use_backend rules
2024-04-05BUG/MEDIUM: hlua: streams don't support mixing lua-load with lua-load-per-thread (2nd try)
2024-04-05DEBUG: lua: precisely identify if stream is stuck inside lua or not
2024-04-03BUG/MINOR: backend: properly handle redispatch 0
2024-04-03BUG/MINOR: server: ignore 'enabled' for dynamic servers
2024-04-03BUG/MINOR: server: 'source' interface ignored from 'default-server' directive
2024-04-03BUG/MEDIUM: mux-fcgi: Properly handle EOM flag on end-of-trailers HTX block
2024-04-03BUG/MINOR: mux-quic: close all QCS before freeing QCC tasklet
2024-04-03BUG/MINOR: session: ensure conn owner is set after insert into session
2024-04-03BUG/MEDIUM: spoe: Return an invalid frame on recv if size is too small
2024-04-03BUG/MINOR: spoe: Be sure to be able to quickly close IDLE applets on soft-stop
2024-04-03BUG/MEDIUM: spoe: Don't rely on stream's expiration to detect processing timeout
2024-04-03BUG/MINOR: listener: Don't schedule frontend without task in listener_release()
2024-04-03BUG/MINOR: listener: Wake proxy's mngmt task up if necessary on session release
2024-04-03BUG/MINOR: hlua: fix missing lock in hlua_filter_delete()
2024-04-03BUG/MINOR: hlua: missing lock in hlua_filter_new()
2024-04-03BUG/MINOR: hlua: segfault when loading the same filter from different contexts
2024-04-03BUG/MINOR: ssl: fix possible ctx memory leak in sample_conv_aes_gcm()
2024-04-03BUG/MINOR: cfgparse: report proper location for log-format-sd errors
2024-04-03BUG/MINOR: ssl/cli: typo in new ssl crl-file CLI description
2024-04-03BUG/MAJOR: hlua: improper lock usage with hlua_ctx_resume()
2024-04-03BUG/MEDIUM: hlua: improper lock usage with SET_SAFE_LJMP()
2024-04-03BUG/MINOR: hlua: improper lock usage in hlua_filter_new()
2024-04-03BUG/MINOR: hlua: improper lock usage in hlua_filter_callback()
2024-04-03BUG/MINOR: hlua: fix possible crash in hlua_filter_new() under load
2024-04-03BUG/MINOR: hlua: don't use lua_tostring() from unprotected contexts
2024-04-03BUG/MINOR: hlua: fix unsafe lua_tostring() usage with empty stack
2024-04-03BUG/MINOR: tools: seed the statistical PRNG slightly better
2024-04-03BUG/MINOR: hlua: Fix log level to the right value when set via TXN:set_loglevel
2024-04-03BUG/MINOR: ssl/cli: duplicate cleaning code in cli_parse_del_crtlist
2024-04-03BUG/MINOR: ist: only store NUL byte on succeeded alloc
2024-04-03BUG/MAJOR: server: fix stream crash due to deleted server
2024-04-03BUG/MINOR: stats: drop srv refcount on early release
2024-04-03BUG/MINOR: ist: allocate nul byte on istdup
2024-04-03BUG/MEDIUM: hlua: Don't loop if a lua socket does not consume received data
2024-04-03BUG/MEDIUM: hlua: Be able to garbage collect uninitialized lua sockets
2024-04-03BUG/MEDIUM: applet: Immediately free appctx on early error
2024-04-03BUG/MINOR: qpack: reject invalid dynamic table capacity
2024-04-03BUG/MINOR: qpack: reject invalid increment count decoding
2024-04-03BUG/MINOR: quic: reject HANDSHAKE_DONE as server
2024-04-03BUG/MINOR: quic: reject unknown frame type
2024-04-03BUG/MAJOR: promex: fix crash on deleted server
2024-04-03BUG/MINOR: diag: run the final diags before quitting when using -c
2024-04-03BUG/MEDIUM: quic: Wrong K CUBIC calculation.
2024-04-03BUG/MINOR: quic: fix possible integer wrap around in cubic window calculation
2024-04-03BUG/MINOR: quic: Wrong ack ranges handling when reaching the limit.
2024-04-03BUG/MEDIUM: quic: fix crash on invalid qc_stream_buf_free() BUG_ON
2024-04-03BUG/MEDIUM: qpack: allow 6xx..9xx status codes
2024-04-03BUG/MEDIUM: h3: do not crash on invalid response status code
2024-04-03BUG/MINOR: h3: fix checking on NULL Tx buffer
2024-04-03BUG/MINOR: ssl: Clear the ckch instance when deleting a crt-list line
2024-04-03BUG/MAJOR: ssl_sock: Always clear retry flags in read/write functions
2024-04-03BUG/MEDIUM: h1: always reject the NUL character in header values
2024-04-03BUG/MEDIUM: h1: Don't support LF only to mark the end of a chunk size
2024-04-03BUG/MINOR: h1: Don't support LF only at the end of chunks
2024-04-03BUG/MINOR: h1-htx: properly initialize the err_pos field
2024-04-03BUG/MEDIUM: pool: fix rare risk of deadlock in pool_flush()
2024-04-03BUG/MINOR: jwt: fix jwt_verify crash on 32-bit archs
2024-04-03BUG/MINOR: vars/cli: fix missing LF after "get var" output
2024-04-03BUG/MEDIUM: cli: some err/warn msg dumps add LR into CSV output on stat's CLI
2024-04-03MINOR: debug: make BUG_ON() catch build errors even without DEBUG_STRICT
2024-01-19BUG/MINOR: mux-quic: do not prevent non-STREAM sending on flow control
2024-01-19BUG/MEDIUM: h3: fix regression which completely prevents any send
2024-01-17BUG/MEDIUM: spoe: Never create new spoe applet if there is no server up
2024-01-17BUG/MEDIUM: stconn: Forward shutdown on write timeout only if it is forwardable
2024-01-17BUG/MEDIUM: h3: fix incorrect snd_buf return value
2024-01-17BUG/MINOR: h3: close connection on sending alloc errors
2024-01-17BUG/MINOR: h3: properly handle alloc failure on finalize
2024-01-17BUG/MINOR: h3: close connection on header list too big
2024-01-17BUG/MEDIUM: stats: unhandled switching rules with TCP frontend
2024-01-17BUG/MINOR: resolvers: default resolvers fails when network not configured
2024-01-17BUG/MEDIUM: mux-h2: Report too large HEADERS frame only when rxbuf is empty
2024-01-17BUG/MINOR: mworker/cli: fix set severity-output support
2024-01-17BUG/MEDIUM: proxy: always initialize the default settings after init
2024-01-17BUG/MEDIUM: mworker: set the master variable earlier
2024-01-17BUG/MEDIUM: connection: report connection errors even when no mux is installed

Back to the list of branches and versions
Back to the HAProxy page