HAProxy known bugs for maintenance branch 2.4 :  0 

This is maintenance branch 2.4 whose latest version is 2.4.31. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches. In short, if you are running any 2.4 version other than 2.4.31, you're running with known bugs.

Quick links

Versions available in this branch

This branch contains the following releases :

DateVersionComment
2026-03-092.4.31 ⇐ last
2025-10-032.4.30 
2025-04-222.4.29 
2024-11-082.4.28 
2024-06-182.4.27 
2024-04-052.4.26 
2023-12-142.4.25 
2023-08-192.4.24 
2023-06-092.4.23 
2023-02-142.4.22 
2023-01-272.4.21 
2022-12-092.4.20 
2022-09-282.4.19 
2022-07-272.4.18 
2022-05-132.4.17 
2022-04-292.4.16 
2022-03-142.4.15 
2022-02-252.4.14 
2022-02-162.4.13 
2022-01-112.4.12 
2022-01-072.4.11 
2021-12-232.4.10 
2021-11-242.4.9 
2021-11-032.4.8 
2021-10-042.4.7 
2021-10-042.4.6 
2021-10-012.4.5 
2021-09-072.4.4 
2021-08-172.4.3 
2021-07-072.4.2 
2021-06-172.4.1 
2021-05-142.4.0 

Fixes for known bugs pending in this branch since the last release (2.4.31)

These fixes have already been queued for the next 2.4 release but no version was released with them yet. Note that fixes are backported several at a time from the development branch to maintenance branches, and the absence of a fix here doesn't mean none will be issued soon.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in the latest version of this branch by category :

TotalCRITICALMAJORMEDIUMMINOR
0 0 0 0 0

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)

Known bugs fixed in the development branch after the last commit in this branch

It is important to understand that not all of these commits are necessarily relevant to this version, but clicking on them will show the bug description. All fixes are made first in the development branch and then backported to the maintenance branches. This ensures no fix is lost when upgrading. If a fix was marked for backporting to this branch and is not there yet, it's likely that it is still missing. Do not hesitate to ask on the haproxy mailing list if you feel like a fix has been skipped.

DateSubject
2026-04-15BUG/MINOR: threads: properly set the number of tgroups when non using policy
2026-04-15BUG/MINOR: acme: fix fallback state after failed initial DNS check
2026-04-15BUG/MEDIUM: peers: trash of expired entries delayed after fullresync
2026-04-14BUG/MEDIUM: htx: Don't count delta twice when block value is replaced
2026-04-14BUG/MEDIUM: htx: Properly handle block modification during defragmentation
2026-04-13BUG/MINOR: haterm: don't apply the default pipe size margin twice
2026-04-13BUG/MINOR: acme: don't pass NULL into format string
2026-04-13BUG/MINOR: acme: read the wildcard flag from the authorization response
2026-04-13BUG/MINOR: haterm: preserve the pipe size margin for splicing
2026-04-13BUG/MEDIUM: cli: Properly handle too big payload on a command line
2026-04-13BUG/MINOR: log: Fix error message when using unavailable fetch in logfmt
2026-04-13BUG/MINOR: quic: do not use hardcoded values in QMux TP frame builder
2026-04-13BUG/MINOR: ot: fixed wrong NULL check in flt_ot_parse_cfg_group()
2026-04-13BUG/MINOR: ot: removed dead code in flt_ot_parse_cfg_str()
2026-04-13BUG/MINOR: xprt_qstrm: do not parse record length on read again
2026-04-13BUG/MINOR: mux_quic: prevent QMux crash on qcc_io_send() error path
2026-04-10BUG/MEDIUM: haterm: Properly initialize the splicing support for haterm
2026-04-10Revert "BUG/MEDIUM: haterm: Move all init functions of haterm in haterm_init.c"
2026-04-10BUG/MINOR: do not crash on QMux reception of BLOCKED frames
2026-04-10BUG/MINOR: quic: increment pos pointer on QMux transport params parsing
2026-04-10BUG/MINOR: mux-quic: fix potential NULL deref on qcc_release()
2026-04-10BUG/MINOR: hlua: fix use-after-free of HTTP reason string
2026-04-10BUG/MEDIUM: mux-fcgi: prevent record-length truncation with large bufsize
2026-04-10BUG/MINOR: sample: fix info leak in regsub when exp_replace fails
2026-04-09BUG/MEDIUM: samples: Fix handling of SMP_T_METH samples
2026-04-09BUG/MINOR: haterm: Return the good start-line for 100-continue interim message
2026-04-09BUG/MINOR: http-act: validate decoded lengths in *-headers-bin
2026-04-09BUG/MINOR: spoe: fix pointer arithmetic overflow in spoe_decode_buffer()
2026-04-09BUG/MINOR: resolvers: fix memory leak on AAAA additional records
2026-04-08BUG/MAJOR: slz: always make sure to limit fixed output to less than worst case literals
2026-04-08Revert "BUG: hlua: fix stack overflow in httpclient headers conversion"
2026-04-08BUG/MEDIUM: connection: Wake the stconn on error when failing to create mux
2026-04-07BUG/MINOR: peers: fix OOB heap write in dictionary cache update
2026-04-07BUG/MEDIUM: chunk: fix infinite loop in get_larger_trash_chunk()
2026-04-07BUG/MEDIUM: chunk: fix typo allocating small trash with bufsize_large
2026-04-07BUG/MINOR: hlua: fix format-string vulnerability in Patref error path
2026-04-07BUG/MINOR: hlua: fix stack overflow in httpclient headers conversion
2026-04-07BUG: hlua: fix stack overflow in httpclient headers conversion
2026-04-07BUG/MEDIUM: jwe: fix memory leak in jwt_decrypt_secret with var argument
2026-04-07BUG/MEDIUM: jwt: fix heap overflow in ECDSA signature DER conversion
2026-04-07BUG/MEDIUM: jwe: fix NULL deref crash with empty CEK and non-dir alg
2026-04-07BUG/MEDIUM: payload: validate SNI name_len in req.ssl_sni
2026-04-05BUG/MEDIUM: tcpcheck: Properly retrieve tcpcheck type to install the best mux
2026-04-04BUG/MINOR: counters: fix unexpected 127 char GUID truncation for shm-stats-file objects
2026-04-03BUG/MEDIUM: tcpcheck/server: Fix parsing of healthcheck param for dynamic servers
2026-04-03BUG/MINOR: http-act: fix a typo in the "pause" action error message
2026-04-03BUG/MEDIUM: mux-h1: Disable 0-copy forwarding when draining the request
2026-04-03BUG/MEDIUM: haterm: Move all init functions of haterm in haterm_init.c
2026-04-03BUG/MINOR: ssl: fix memory leak in ssl_fc_crtname by using SSL_CTX ex_data index
2026-04-03BUG/MINOR: cfgcond: fail cleanly on missing argument for "feature"
2026-04-03BUG/MINOR: cfgcond: always set the error string on awslc_api checks
2026-04-03BUG/MINOR: cfgcond: always set the error string on openssl_version checks
2026-04-03BUG/MINOR: cfgcond: properly set the error pointer on evaluation error
2026-04-02BUG/MINOR: mux_quic: fix uninit for QMux emission
2026-04-02DEBUG: connection/flags: add QSTRM flags for the decoder
2026-04-02BUG/MINOR: quic: fix documentation for transport params decoding
2026-04-01BUG/MINOR: tcpcheck: Use tcpcheck context for expressions parsing
2026-04-01BUG/MINOR: tcpcheck: Don't enable http_needed when parsing HTTP samples
2026-04-01BUG/MINOR: tcpcheck: Remove unexpected flag on tcpcheck rules for httchck option
2026-04-01BUG/MINOR: http_act: Make set/add-headers-bin compatible with ACL conditions
2026-04-01BUG/MINOR: http_act: Properly handle decoding errors in *-headers-bin actions
2026-03-31BUG/MEDIUM: mux-h1: Don't set MSG_MORE on bodyless responses forwarded to client
2026-03-31BUG/MEDIUM: map/cli: CLI commands lack admin permission checks
2026-03-31BUG/MEDIUM: ssl/ocsp: ocsp commands are missing permission checks
2026-03-31BUG/MEDIUM: ssl/cli: tls-keys commands are missing permission checks
2026-03-31BUG/MEDIUM: map/cli: map/acl commands warn when accessed without admin level
2026-03-31BUG/MEDIUM: ssl/ocsp: ocsp commands warn when accessed without admin level
2026-03-31BUG/MEDIUM: ssl/cli: tls-keys commands warn when accessed without admin level
2026-03-30BUG/MINOR: net_helper: fix length controls on ip.fp tcp options parsing
2026-03-30BUG/MINOR: stconn: Always declare the SC created from healthchecks as a back SC
2026-03-30BUG/MINOR: quic: close conn on packet reception with incompatible frame
2026-03-27BUG/MEDIUM: htx: Fix htx_xfer() to consume more data than expected
2026-03-27BUG/MINOR: acme: fix task allocation leaked upon error
2026-03-27BUG/MEDIUM: acme: skip doing challenge if it is already valid
2026-03-27BUG/MINOR: http-ana: Only consider client abort for abortonclose
2026-03-27BUG/MINOR: config: Properly test warnif_misplaced_* return values
2026-03-27BUG/MINOR: config: Warn only if warnif_cond_conflicts report a conflict
2026-03-26BUG/MEDIUM: check: Don't reuse the server xprt if we should not
2026-03-25BUG/MINOR: acme: permission checks on the CLI
2026-03-25BUG/MINOR: ech: permission checks on the CLI
2026-03-23BUG/MINOR: acme/cli: fix argument check and error in 'acme challenge_ready'
2026-03-23BUG/MINOR: acme: replace atol with len-bounded __strl2uic() for retry-after
2026-03-23BUG/MINOR: acme: free() DER buffer on a2base64url error path
2026-03-23BUG/MINOR: acme: NULL check on my_strndup()
2026-03-23Revert "BUG/MEDIUM: mux-h2: make sure to always report pending errors to the stream"
2026-03-23BUG/MINOR: http_htx: fix null deref in http-errors config check
2026-03-23BUG/MINOR: acme/cli: wrong argument check in 'acme renew'
2026-03-23BUG/MINOR: acme: wrong error when checking for duplicate section
2026-03-23BUG/MINOR: acme: leak of ext_san upon insertion error
2026-03-23BUG/MEDIUM: acme: fix multiple resource leaks in acme_x509_req()
2026-03-20BUG/MINOR: qpack: fix 62-bit overflow and 1-byte OOB reads in decoding
2026-03-20BUG/MINOR: sock: adjust accept() error messages for ENFILE and ENOMEM
2026-03-19BUG/MINOR: mworker: fix sort order of mworker_proc in 'show proc'
2026-03-19BUG/MINOR: mworker/cli: fix show proc pagination losing entries on resume
2026-03-19BUG/MEDIUM: h3: reject unaligned frames except DATA
2026-03-19BUG/MAJOR: h3: check body size with content-length on empty FIN
2026-03-19BUG/MINOR: mux-h2: properly ignore R bit in WINDOW_UPDATE increments
2026-03-19BUG/MINOR: mux-h2: properly ignore R bit in GOAWAY stream ID
2026-03-19BUG/MEDIUM: peers: enforce check on incoming table key type
2026-03-18BUG/MINOR: mworker: don't try to access an initializing process
2026-03-18BUG/MINOR: spoe: Fix condition to abort processing on client abort
2026-03-17BUG/MINOR: mjson: make mystrtod() length-aware to prevent out-of-bounds reads
2026-03-17BUG/MINOR: stream: Fix crash in stream dump if the current rule has no keyword
2026-03-17BUG/MINOR: http-ana: Swap L7 buffer with request buffer by hand
2026-03-17BUG/MINOR: h2/h3: Never insert partial headers/trailers in an HTX message
2026-03-17BUG/MINOR: h2/h3: Only test number of trailers inserted in HTX message
2026-03-17BUG/MEDIUM: stconn: Don't perform L7 retries with large buffer
2026-03-17BUG/MEDIUM: stconn: Fix abort on close when a large buffer is used
2026-03-17BUG/MEDIUM: spoe: Properly abort processing on client abort
2026-03-17BUG/MINOR: spoe: Properly switch SPOE filter to WAITING_ACK state
2026-03-17BUG/MEDIUM: stconn: Don't forget to wakeup applets on shutdown
2026-03-16BUG/MINOR: sockpair: set FD_CLOEXEC on fd received via SCM_RIGHTS
2026-03-13BUG/MINOR: mworker: avoid passing NULL version in proc list serialization
2026-03-13BUG/MINOR: mworker: set a timeout on the worker socketpair read at startup
2026-03-13BUG/MINOR: mworker: fix typo &= instead of & in proc list serialization
2026-03-13BUG/MINOR: mworker: only match worker processes when looking for unspawned proc
2026-03-12BUG/MINOR: proxy: do not forget to validate quic-initial rules
2026-03-12BUG/MINOR: memprof: avoid a small memory leak in "show profiling"
2026-03-12BUG/MEDIUM: ssl: Don't report read data as early data with AWS-LC
2026-03-12BUG/MINOR: mworker: always stop the receiving listener
2026-03-12BUG/MEDIUM: ssl: Handle receiving early data with BoringSSL/AWS-LC
2026-03-12BUG/MINOR: jws: fix memory leak in jws_b64_signature
2026-03-12BUG/MINOR: tcpcheck: Fix typo in error error message for `http-check expect`
2026-03-10DEBUG: stconn: Add a CHECK_IF() when I/O are performed on a orphan SC

Back to the list of branches and versions
Back to the HAProxy page