<?xml version="1.0" ?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<link>https://www.haproxy.com/documentation/haproxy-enterprise/</link>
		<atom:link href="https://www.haproxy.com/documentation/haproxy-enterprise/" rel="self" type="application/rss+xml"/>
		<description>HAProxy Enterprise changelog</description>
		<language>en-us</language>
		<lastBuildDate>Mon, 01 Jun 2026 10:55:47 +0000</lastBuildDate>
		<title>HAProxy Enterprise</title>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</guid>
			<title>HAProxy Enterprise 2.6r1 (1.0.0-304.1819) (2026-05-27)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Wed, 27 May 2026 00:00:00 +0000</pubDate>
			<description><![CDATA[<ul style='list-style-type:none;'></ul><div>Tags: </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</guid>
			<title>HAProxy Enterprise 2.8r1 (1.0.0-336.1403) (2026-05-27)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Wed, 27 May 2026 00:00:00 +0000</pubDate>
			<description><![CDATA[<ul style='list-style-type:none;'></ul><div>Tags: </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</guid>
			<title>HAProxy Enterprise 3.0r1 (1.0.0-355.1131) (2026-05-27)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Wed, 27 May 2026 00:00:00 +0000</pubDate>
			<description><![CDATA[<ul style='list-style-type:none;'></ul><div>Tags: </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</guid>
			<title>HAProxy Enterprise 3.2r1 (1.0.0-372.877) (2026-05-27)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Wed, 27 May 2026 00:00:00 +0000</pubDate>
			<description><![CDATA[<ul style='list-style-type:none;'></ul><div>Tags: </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</guid>
			<title>HAProxy Enterprise 3.3r1 (1.0.0-371.617) (2026-05-27)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Wed, 27 May 2026 00:00:00 +0000</pubDate>
			<category>tcpcheck/spoe</category>
			<category>sample</category>
			<category>log</category>
			<category>h1</category>
			<category>bug</category>
			<category>quic</category>
			<category>http-fetch</category>
			<category>init</category>
			<category>log-forward</category>
			<category>payload</category>
			<category>h1-htx</category>
			<category>auth</category>
			<category>medium</category>
			<category>minor</category>
			<category>mux-spop</category>
			<category>mux_quic</category>
			<category>acme</category>
			<category>ssl-gencert</category>
			<category>resolvers</category>
			<category>cache</category>
			<category>h3</category>
			<category>tcpcheck</category>
			<category>http-ext</category>
			<category>addons/51d</category>
			<category>ssl-hello</category>
			<category>base64</category>
			<category>applet</category>
			<category>hlua</category>
			<category>dict</category>
			<category>tcpchecks</category>
			<category>ocsp</category>
			<category>mux-fcgi</category>
			<category>cpu-topo</category>
			<category>http</category>
			<category>mux-h2</category>
			<category>regex</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Enforce thread-hard-limit on policy</span> [<em>bug</em>, <em>cpu-topo</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Validate sni characters to prevent san certificate injection</span> [<em>bug</em>, <em>ssl-gencert</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Check ldap response to not read more data than available</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Use relative offset to compute contig data in demux buf</span> [<em>bug</em>, <em>mux-spop</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Use relative offset to compute contig data in demux buf</span> [<em>bug</em>, <em>mux-fcgi</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Sanitize parsing to properly handle upgrade requests</span> [<em>bug</em>, <em>h1-htx</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Add  a h1m flag to specify a non-empty 'upgrade:' header was parsed</span> [<em>h1</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add function to remove all occurrences of a value in a header</span> [<em>http</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Reject stream id 0 for application records</span> [<em>bug</em>, <em>mux-fcgi</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Reject packet too short for hp decryption</span> [<em>bug</em>, <em>quic</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Prevent lua from passing cr/lf/nul in http headers</span> [<em>bug</em>, <em>hlua</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add missing break on rcv_buf()</span> [<em>bug</em>, <em>h3</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix unconfigured password null deref</span> [<em>bug</em>, <em>auth</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Reject server max_push_id frame</span> [<em>bug</em>, <em>h3</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Adjust error on push_promise frame reception</span> [<em>bug</em>, <em>h3</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Reject client cancel_push frame</span> [<em>bug</em>, <em>h3</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Reject server push stream</span> [<em>bug</em>, <em>h3</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Reject client push stream</span> [<em>bug</em>, <em>h3</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Nul-terminate headers before passing them to trie api</span> [<em>bug</em>, <em>addons/51d</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Switch to a better prng for query ids</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Make use of the null-terminated servername</span> [<em>bug</em>, <em>ssl-hello</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix the handshake length bounds check smp_client_hello_parse()</span> [<em>bug</em>, <em>payload</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Return empty string for empty input in base64dec()</span> [<em>bug</em>, <em>base64</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Always check remaining data when reading rfc7239 nodeport</span> [<em>bug</em>, <em>http-ext</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Protect against risk of null-deref on connection failure</span> [<em>bug</em>, <em>acme</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Check against the whole token in get_http_auth()</span> [<em>bug</em>, <em>http-fetch</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Relax size checks in authority record parsing</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Also recognize directives in the form "token="</span> [<em>bug</em>, <em>cache</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Always verify the primary hash in get_secondary_entry()</span> [<em>bug</em>, <em>cache</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Limit status codes to 3 digits by default</span> [<em>bug</em>, <em>h1</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Drop headers whose names contain invalid chars</span> [<em>bug</em>, <em>h1</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Limit the be2hex converter's chunk size</span> [<em>bug</em>, <em>sample</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Use more than ha_random64() for the cluster secret</span> [<em>bug</em>, <em>init</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix refcount race on insert collision</span> [<em>bug</em>, <em>dict</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Look for the end of priority before the end of the buffer</span> [<em>bug</em>, <em>log</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Validate headers frame length before reading stream dep</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix risk of appending garbage past the domain name</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix room for trailing zero in resolv_dn_label_to_str()</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix a refcount leak for missed secondary entries</span> [<em>bug</em>, <em>cache</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Bound the spop error code to valid values</span> [<em>bug</em>, <em>tcpcheck/spoe</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Allocate a large enough pcre2 match for all matches</span> [<em>bug</em>, <em>regex</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Make sure the month is unsigned</span> [<em>bug</em>, <em>log-forward</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Fix integer underflow when receiving line from lua cosocket</span> [<em>bug</em>, <em>hlua</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Limit parsing of agent-check reply to the buffer</span> [<em>bug</em>, <em>tcpchecks</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Hold lock while decrementing refcount in dict_entry_unref</span> [<em>bug</em>, <em>dict</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix odcid lookup from derived value</span> [<em>bug</em>, <em>quic</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Unlock lru cache if failing to generate certificate</span> [<em>bug</em>, <em>ssl-gencert</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Fix test on dn label size in resolv_dn_label_to_str()</span> [<em>bug</em>, <em>resolvers</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Properly handle receives of size 0</span> [<em>bug</em>, <em>applet</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Manage date too far away in the future</span> [<em>bug</em>, <em>ocsp</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Do not exceed stream.max-concurrent on backend side</span> [<em>bug</em>, <em>mux_quic</em>, <em>minor</em>]</li></ul><div>Tags: tcpcheck/spoe sample log h1 bug quic http-fetch init log-forward payload h1-htx auth medium minor mux-spop mux_quic acme ssl-gencert resolvers cache h3 tcpcheck http-ext addons/51d ssl-hello base64 applet hlua dict tcpchecks ocsp mux-fcgi cpu-topo http mux-h2 regex </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</guid>
			<title>HAProxy Enterprise 3.2r1 (1.0.0-372.876) (2026-05-22)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Fri, 22 May 2026 00:00:00 +0000</pubDate>
			<category>htx</category>
			<category>httpclient-cli</category>
			<category>config/dns</category>
			<category>h1</category>
			<category>bug</category>
			<category>backend</category>
			<category>cleanup</category>
			<category>51d.c</category>
			<category>medium</category>
			<category>minor</category>
			<category>session/trace</category>
			<category>mux_quic</category>
			<category>resolvers</category>
			<category>build</category>
			<category>jwt</category>
			<category>doc</category>
			<category>jws</category>
			<category>servers</category>
			<category>proxy</category>
			<category>applet</category>
			<category>regtests</category>
			<category>dict</category>
			<category>server/cli</category>
			<category>server</category>
			<category>config</category>
			<category>check</category>
			<category>dns</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Properly handle init-state value during haproxy startup</span> [<em>bug</em>, <em>server</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix balance hash calculation when using hash-type none</span> [<em>bug</em>, <em>backend</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Don't mask websocket protocol if multiple protocols used</span> [<em>bug</em>, <em>h1</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Skip all h2c values from upgrade headers during parsing</span> [<em>bug</em>, <em>h1</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Destroy http-client context if failing to start it</span> [<em>bug</em>, <em>httpclient-cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add missing return value check (evp_pkey_get_bn_param)</span> [<em>bug</em>, <em>jws</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix openssl 3.0 version check from > to >=</span> [<em>bug</em>, <em>jws</em>, <em>minor</em>]</li><li>📝 <span>Further clarify that resolvers "default" exists</span> [<em>doc</em>, <em>config</em>]</li><li><strong>🟢 Minor</strong> <span>Fix possible memory leak in convert_ecdsa_sig() error path</span> [<em>bug</em>, <em>jwt</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly report errno in chk_report_conn_err()</span> [<em>bug</em>, <em>check</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Use distinct flags for sess_ev_end and _err</span> [<em>bug</em>, <em>session/trace</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix leaked dgram and dns_ring struct in parse_resolve_conf()</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Report the expression error in the do-resolve() action parser</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix dangling dgram pointer on dns_dgram_init() failure path</span> [<em>bug</em>, <em>dns</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix dangling list pointer in resolvers_new() error paths</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Unlock server lock on failure in cli_parse_set_server</span> [<em>bug</em>, <em>server/cli</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Use proper source of pool_conn_name in srv_settings_cpy()</span> [<em>bug</em>, <em>servers</em>, <em>minor</em>]</li><li>🧹 <span>Fix tiny mistakes in parse error messages</span> [<em>cleanup</em>, <em>proxy</em>]</li><li><strong>🟡 Medium</strong> <span>Fix memory leak of sockaddr in dns_session_init() error path</span> [<em>bug</em>, <em>dns</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Fix name compression pointer validation in resolv_read_name()</span> [<em>bug</em>, <em>resolvers</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Fix long loops in additional records parse on name failure</span> [<em>bug</em>, <em>dns</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Properly fail on duplicate nameserver name detection</span> [<em>bug</em>, <em>config/dns</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Correct parameter value validation in get_server_ph_post()</span> [<em>bug</em>, <em>backend</em>, <em>minor</em>]</li><li>🏗️ <span>Cleanup, fix preprocessor ifdefs</span> [<em>build</em>, <em>51d.c</em>]</li><li><strong>⚪ </strong> <span>Don't try to use real nameservers for testcases</span> [<em>regtests</em>]</li><li><strong>🟡 Medium</strong> <span>Fix transfer of htx data to the applet</span> [<em>bug</em>, <em>applet</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Add htx_move_blks() to move blocks from a message to another</span> [<em>htx</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Hold read lock while incrementing refcount in dict_insert</span> [<em>bug</em>, <em>dict</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Adjust qcc_is_dead() to account detached streams</span> [<em>bug</em>, <em>mux_quic</em>, <em>medium</em>]</li></ul><div>Tags: htx httpclient-cli config/dns h1 bug backend cleanup 51d.c medium minor session/trace mux_quic resolvers build jwt doc jws servers proxy applet regtests dict server/cli server config check dns </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</guid>
			<title>HAProxy Enterprise 3.3r1 (1.0.0-371.565) (2026-05-22)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Fri, 22 May 2026 00:00:00 +0000</pubDate>
			<category>htx</category>
			<category>httpclient-cli</category>
			<category>config/dns</category>
			<category>h1</category>
			<category>bug</category>
			<category>http-client</category>
			<category>backend</category>
			<category>cleanup</category>
			<category>51d.c</category>
			<category>ci</category>
			<category>medium</category>
			<category>minor</category>
			<category>session/trace</category>
			<category>acme</category>
			<category>resolvers</category>
			<category>build</category>
			<category>jwt</category>
			<category>jws</category>
			<category>doc</category>
			<category>servers</category>
			<category>limits</category>
			<category>github</category>
			<category>proxy</category>
			<category>applet</category>
			<category>regtests</category>
			<category>dict</category>
			<category>server/cli</category>
			<category>dns</category>
			<category>ssl</category>
			<category>mux-h1</category>
			<category>server</category>
			<category>config</category>
			<category>check</category>
			<category>stick-tables</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Don't forget to set srv_hash when needed</span> [<em>bug</em>, <em>servers</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Store the connection hash with the parameter cache</span> [<em>bug</em>, <em>servers</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Check delay mux before conn_prepare()</span> [<em>bug</em>, <em>backend</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix x509_name leak when x509_set_issuer_name() fails</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li>🧹 <span>Remove unneeded null check</span> [<em>cleanup</em>, <em>mux-h1</em>]</li><li><strong>🟡 Medium</strong> <span>Ssl backend sessions used after free</span> [<em>bug</em>, <em>ssl</em>, <em>medium</em>]</li><li>🪛 <span>Disable windows.yml by default on unofficials repo</span> [<em>ci</em>, <em>github</em>]</li><li><strong>🟢 Minor</strong> <span>Properly handle init-state value during haproxy startup</span> [<em>bug</em>, <em>server</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Avoid freeing elements while holding a lock</span> [<em>stick-tables</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix balance hash calculation when using hash-type none</span> [<em>bug</em>, <em>backend</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Accept server ids above 2^31 and clarify error message</span> [<em>bug</em>, <em>server</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix uninit variable in error label</span> [<em>bug</em>, <em>httpclient-cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Don't mask websocket protocol if multiple protocols used</span> [<em>bug</em>, <em>h1</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Skip all h2c values from upgrade headers during parsing</span> [<em>bug</em>, <em>h1</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Destroy http-client context if failing to start it</span> [<em>bug</em>, <em>httpclient-cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add missing return value check (evp_pkey_get_bn_param)</span> [<em>bug</em>, <em>jws</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix openssl 3.0 version check from > to >=</span> [<em>bug</em>, <em>jws</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Properly account for global.maxpipes in compute_ideal_maxconn()</span> [<em>bug</em>, <em>limits</em>, <em>medium</em>]</li><li>📝 <span>Further clarify that resolvers "default" exists</span> [<em>doc</em>, <em>config</em>]</li><li><strong>🟢 Minor</strong> <span>Fix possible memory leak in convert_ecdsa_sig() error path</span> [<em>bug</em>, <em>jwt</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly report errno in chk_report_conn_err()</span> [<em>bug</em>, <em>check</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Use distinct flags for sess_ev_end and _err</span> [<em>bug</em>, <em>session/trace</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix leaked dgram and dns_ring struct in parse_resolve_conf()</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Report the expression error in the do-resolve() action parser</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix dangling dgram pointer on dns_dgram_init() failure path</span> [<em>bug</em>, <em>dns</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix dangling list pointer in resolvers_new() error paths</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Unlock server lock on failure in cli_parse_set_server</span> [<em>bug</em>, <em>server/cli</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Use proper source of pool_conn_name in srv_settings_cpy()</span> [<em>bug</em>, <em>servers</em>, <em>minor</em>]</li><li>🧹 <span>Fix tiny mistakes in parse error messages</span> [<em>cleanup</em>, <em>proxy</em>]</li><li><strong>🟡 Medium</strong> <span>Fix memory leak of sockaddr in dns_session_init() error path</span> [<em>bug</em>, <em>dns</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Fix name compression pointer validation in resolv_read_name()</span> [<em>bug</em>, <em>resolvers</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Fix long loops in additional records parse on name failure</span> [<em>bug</em>, <em>dns</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Properly fail on duplicate nameserver name detection</span> [<em>bug</em>, <em>config/dns</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Correct parameter value validation in get_server_ph_post()</span> [<em>bug</em>, <em>backend</em>, <em>minor</em>]</li><li>🏗️ <span>Cleanup, fix preprocessor ifdefs</span> [<em>build</em>, <em>51d.c</em>]</li><li><strong>⚪ </strong> <span>Don't try to use real nameservers for testcases</span> [<em>regtests</em>]</li><li><strong>🟡 Medium</strong> <span>Fix transfer of htx data to the applet</span> [<em>bug</em>, <em>applet</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Add htx_move_blks() to move blocks from a message to another</span> [<em>htx</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Only consume input buffer when hc one is empty</span> [<em>bug</em>, <em>http-client</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Hold read lock while incrementing refcount in dict_insert</span> [<em>bug</em>, <em>dict</em>, <em>medium</em>]</li></ul><div>Tags: htx httpclient-cli config/dns h1 bug http-client backend cleanup 51d.c ci medium minor session/trace acme resolvers build jwt jws doc servers limits github proxy applet regtests dict server/cli dns ssl mux-h1 server config check stick-tables </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</guid>
			<title>HAProxy Enterprise 2.6r1 (1.0.0-304.1818) (2026-05-21)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Thu, 21 May 2026 00:00:00 +0000</pubDate>
			<category>medium</category>
			<category>minor</category>
			<category>httpclient-cli</category>
			<category>h1</category>
			<category>bug</category>
			<category>resolvers</category>
			<category>jwt</category>
			<category>backend</category>
			<category>dns</category>
			<category>dict</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Don't mask websocket protocol if multiple protocols used</span> [<em>bug</em>, <em>h1</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Skip all h2c values from upgrade headers during parsing</span> [<em>bug</em>, <em>h1</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Destroy http-client context if failing to start it</span> [<em>bug</em>, <em>httpclient-cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix possible memory leak in convert_ecdsa_sig() error path</span> [<em>bug</em>, <em>jwt</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Report the expression error in the do-resolve() action parser</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix dangling dgram pointer on dns_dgram_init() failure path</span> [<em>bug</em>, <em>dns</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix memory leak of sockaddr in dns_session_init() error path</span> [<em>bug</em>, <em>dns</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Fix name compression pointer validation in resolv_read_name()</span> [<em>bug</em>, <em>resolvers</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Fix long loops in additional records parse on name failure</span> [<em>bug</em>, <em>dns</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Correct parameter value validation in get_server_ph_post()</span> [<em>bug</em>, <em>backend</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Hold read lock while incrementing refcount in dict_insert</span> [<em>bug</em>, <em>dict</em>, <em>medium</em>]</li></ul><div>Tags: medium minor httpclient-cli h1 bug resolvers jwt backend dns dict </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</guid>
			<title>HAProxy Enterprise 2.8r1 (1.0.0-336.1402) (2026-05-21)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Thu, 21 May 2026 00:00:00 +0000</pubDate>
			<category>httpclient-cli</category>
			<category>config/dns</category>
			<category>h1</category>
			<category>bug</category>
			<category>backend</category>
			<category>cleanup</category>
			<category>51d.c</category>
			<category>medium</category>
			<category>minor</category>
			<category>mux_quic</category>
			<category>resolvers</category>
			<category>build</category>
			<category>jwt</category>
			<category>doc</category>
			<category>proxy</category>
			<category>regtests</category>
			<category>dict</category>
			<category>config</category>
			<category>check</category>
			<category>dns</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Don't mask websocket protocol if multiple protocols used</span> [<em>bug</em>, <em>h1</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Skip all h2c values from upgrade headers during parsing</span> [<em>bug</em>, <em>h1</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Destroy http-client context if failing to start it</span> [<em>bug</em>, <em>httpclient-cli</em>, <em>minor</em>]</li><li>📝 <span>Further clarify that resolvers "default" exists</span> [<em>doc</em>, <em>config</em>]</li><li><strong>🟢 Minor</strong> <span>Fix possible memory leak in convert_ecdsa_sig() error path</span> [<em>bug</em>, <em>jwt</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly report errno in chk_report_conn_err()</span> [<em>bug</em>, <em>check</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Report the expression error in the do-resolve() action parser</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix dangling dgram pointer on dns_dgram_init() failure path</span> [<em>bug</em>, <em>dns</em>, <em>minor</em>]</li><li>🧹 <span>Fix tiny mistakes in parse error messages</span> [<em>cleanup</em>, <em>proxy</em>]</li><li><strong>🟡 Medium</strong> <span>Fix memory leak of sockaddr in dns_session_init() error path</span> [<em>bug</em>, <em>dns</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Fix name compression pointer validation in resolv_read_name()</span> [<em>bug</em>, <em>resolvers</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Fix long loops in additional records parse on name failure</span> [<em>bug</em>, <em>dns</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Properly fail on duplicate nameserver name detection</span> [<em>bug</em>, <em>config/dns</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Correct parameter value validation in get_server_ph_post()</span> [<em>bug</em>, <em>backend</em>, <em>minor</em>]</li><li>🏗️ <span>Cleanup, fix preprocessor ifdefs</span> [<em>build</em>, <em>51d.c</em>]</li><li><strong>⚪ </strong> <span>Don't try to use real nameservers for testcases</span> [<em>regtests</em>]</li><li><strong>🟡 Medium</strong> <span>Hold read lock while incrementing refcount in dict_insert</span> [<em>bug</em>, <em>dict</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Adjust qcc_is_dead() to account detached streams</span> [<em>bug</em>, <em>mux_quic</em>, <em>medium</em>]</li></ul><div>Tags: httpclient-cli config/dns h1 bug backend cleanup 51d.c medium minor mux_quic resolvers build jwt doc proxy regtests dict config check dns </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</guid>
			<title>HAProxy Enterprise 3.0r1 (1.0.0-355.1130) (2026-05-21)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Thu, 21 May 2026 00:00:00 +0000</pubDate>
			<category>htx</category>
			<category>httpclient-cli</category>
			<category>config/dns</category>
			<category>h1</category>
			<category>bug</category>
			<category>backend</category>
			<category>cleanup</category>
			<category>51d.c</category>
			<category>medium</category>
			<category>minor</category>
			<category>mux_quic</category>
			<category>resolvers</category>
			<category>build</category>
			<category>jwt</category>
			<category>doc</category>
			<category>proxy</category>
			<category>applet</category>
			<category>regtests</category>
			<category>dict</category>
			<category>server/cli</category>
			<category>config</category>
			<category>check</category>
			<category>dns</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Fix balance hash calculation when using hash-type none</span> [<em>bug</em>, <em>backend</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Don't mask websocket protocol if multiple protocols used</span> [<em>bug</em>, <em>h1</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Skip all h2c values from upgrade headers during parsing</span> [<em>bug</em>, <em>h1</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Destroy http-client context if failing to start it</span> [<em>bug</em>, <em>httpclient-cli</em>, <em>minor</em>]</li><li>📝 <span>Further clarify that resolvers "default" exists</span> [<em>doc</em>, <em>config</em>]</li><li><strong>🟢 Minor</strong> <span>Fix possible memory leak in convert_ecdsa_sig() error path</span> [<em>bug</em>, <em>jwt</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly report errno in chk_report_conn_err()</span> [<em>bug</em>, <em>check</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix leaked dgram and dns_ring struct in parse_resolve_conf()</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Report the expression error in the do-resolve() action parser</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix dangling dgram pointer on dns_dgram_init() failure path</span> [<em>bug</em>, <em>dns</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Unlock server lock on failure in cli_parse_set_server</span> [<em>bug</em>, <em>server/cli</em>, <em>medium</em>]</li><li>🧹 <span>Fix tiny mistakes in parse error messages</span> [<em>cleanup</em>, <em>proxy</em>]</li><li><strong>🟡 Medium</strong> <span>Fix memory leak of sockaddr in dns_session_init() error path</span> [<em>bug</em>, <em>dns</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Fix name compression pointer validation in resolv_read_name()</span> [<em>bug</em>, <em>resolvers</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Fix long loops in additional records parse on name failure</span> [<em>bug</em>, <em>dns</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Properly fail on duplicate nameserver name detection</span> [<em>bug</em>, <em>config/dns</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Correct parameter value validation in get_server_ph_post()</span> [<em>bug</em>, <em>backend</em>, <em>minor</em>]</li><li>🏗️ <span>Cleanup, fix preprocessor ifdefs</span> [<em>build</em>, <em>51d.c</em>]</li><li><strong>⚪ </strong> <span>Don't try to use real nameservers for testcases</span> [<em>regtests</em>]</li><li><strong>🟡 Medium</strong> <span>Fix transfer of htx data to the applet</span> [<em>bug</em>, <em>applet</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Add htx_move_blks() to move blocks from a message to another</span> [<em>htx</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Hold read lock while incrementing refcount in dict_insert</span> [<em>bug</em>, <em>dict</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Adjust qcc_is_dead() to account detached streams</span> [<em>bug</em>, <em>mux_quic</em>, <em>medium</em>]</li></ul><div>Tags: htx httpclient-cli config/dns h1 bug backend cleanup 51d.c medium minor mux_quic resolvers build jwt doc proxy applet regtests dict server/cli config check dns </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</guid>
			<title>HAProxy Enterprise 2.6r1 (1.0.0-304.1807) (2026-05-11)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Mon, 11 May 2026 00:00:00 +0000</pubDate>
			<category>bug</category>
			<category>cfgparse-listen</category>
			<category>minor</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Do not emit extraneous line in rule order warnings</span> [<em>bug</em>, <em>cfgparse-listen</em>, <em>minor</em>]</li></ul><div>Tags: bug cfgparse-listen minor </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</guid>
			<title>HAProxy Enterprise 2.8r1 (1.0.0-335.1384) (2026-05-11)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Mon, 11 May 2026 00:00:00 +0000</pubDate>
			<category>tasks</category>
			<category>medium</category>
			<category>minor</category>
			<category>bug</category>
			<category>cfgparse-listen</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Keep the task_running flag until queued</span> [<em>bug</em>, <em>tasks</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Do not emit extraneous line in rule order warnings</span> [<em>bug</em>, <em>cfgparse-listen</em>, <em>minor</em>]</li></ul><div>Tags: tasks medium minor bug cfgparse-listen </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</guid>
			<title>HAProxy Enterprise 3.0r1 (1.0.0-354.1107) (2026-05-11)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Mon, 11 May 2026 00:00:00 +0000</pubDate>
			<category>tasks</category>
			<category>medium</category>
			<category>minor</category>
			<category>bug</category>
			<category>cfgparse-listen</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Keep the task_running flag until queued</span> [<em>bug</em>, <em>tasks</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Do not emit extraneous line in rule order warnings</span> [<em>bug</em>, <em>cfgparse-listen</em>, <em>minor</em>]</li></ul><div>Tags: tasks medium minor bug cfgparse-listen </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</guid>
			<title>HAProxy Enterprise 3.2r1 (1.0.0-369.847) (2026-05-11)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Mon, 11 May 2026 00:00:00 +0000</pubDate>
			<category>tasks</category>
			<category>medium</category>
			<category>minor</category>
			<category>bug</category>
			<category>pattern</category>
			<category>cfgparse-listen</category>
			<category>servers</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Add a counter of added/freed patterns</span> [<em>pattern</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Keep the task_running flag until queued</span> [<em>bug</em>, <em>tasks</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Do not emit extraneous line in rule order warnings</span> [<em>bug</em>, <em>cfgparse-listen</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Only requeue servers if they are up</span> [<em>bug</em>, <em>servers</em>, <em>medium</em>]</li></ul><div>Tags: tasks medium minor bug pattern cfgparse-listen servers </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</guid>
			<title>HAProxy Enterprise 3.3r1 (1.0.0-369.525) (2026-05-11)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Mon, 11 May 2026 00:00:00 +0000</pubDate>
			<category>tasks</category>
			<category>medium</category>
			<category>minor</category>
			<category>bug</category>
			<category>mux_quic</category>
			<category>cfgparse-listen</category>
			<category>servers</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Keep the task_running flag until queued</span> [<em>bug</em>, <em>tasks</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Do not emit extraneous line in rule order warnings</span> [<em>bug</em>, <em>cfgparse-listen</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Only requeue servers if they are up</span> [<em>bug</em>, <em>servers</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Refresh timeout only if i/o performed</span> [<em>bug</em>, <em>mux_quic</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Adjust qcc_is_dead() to account detached streams</span> [<em>bug</em>, <em>mux_quic</em>, <em>medium</em>]</li></ul><div>Tags: tasks medium minor bug mux_quic cfgparse-listen servers </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</guid>
			<title>HAProxy Enterprise 2.6r1 (1.0.0-304.1806) (2026-05-07)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Thu, 07 May 2026 00:00:00 +0000</pubDate>
			<category>medium</category>
			<category>minor</category>
			<category>http-fetch</category>
			<category>bug</category>
			<category>h1_htx</category>
			<category>stick-table</category>
			<category>h2</category>
			<category>mux-h2</category>
			<category>http-messaging</category>
			<category>regtests</category>
			<category>tcpcheck</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Properly check permissions on cli's set/clear cmd</span> [<em>bug</em>, <em>stick-table</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Remove reverved block on error during contig chunks parsing</span> [<em>bug</em>, <em>h1_htx</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix http_auth_bearer() when custom header is used</span> [<em>bug</em>, <em>http-fetch</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix the detection of the ext connect support
- revert "bug/minor: mux-h2: condition the processing of 8441 extension to global setting"</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Only accept :protocol with extended connect</span> [<em>bug</em>, <em>h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add a new message flag to indicate ext connect support</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Condition the processing of 8441 extension to global setting</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add decoding for :protocol in traces</span> [<em>bug</em>, <em>h2</em>, <em>minor</em>]</li><li><strong>⚪ </strong> <span>Always send rfc8441 client settings to use ext connect</span> [<em>regtests</em>, <em>http-messaging</em>]</li><li><strong>🟢 Minor</strong> <span>Properly report error for http health-checks
- revert "bug/medium: cli: fix master cli connection slot leak on client disconnect"</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li></ul><div>Tags: medium minor http-fetch bug h1_htx stick-table h2 mux-h2 http-messaging regtests tcpcheck </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</guid>
			<title>HAProxy Enterprise 2.8r1 (1.0.0-335.1382) (2026-05-07)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Thu, 07 May 2026 00:00:00 +0000</pubDate>
			<category>medium</category>
			<category>minor</category>
			<category>http-fetch</category>
			<category>bug</category>
			<category>h1</category>
			<category>http</category>
			<category>h1_htx</category>
			<category>stick-table</category>
			<category>h2</category>
			<category>mux-h2</category>
			<category>http-messaging</category>
			<category>regtests</category>
			<category>major</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Properly check permissions on cli's set/clear cmd</span> [<em>bug</em>, <em>stick-table</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Forbid comma character in authority value</span> [<em>bug</em>, <em>http</em>, <em>major</em>]</li><li><strong>🟡 Medium</strong> <span>Remove reverved block on error during contig chunks parsing</span> [<em>bug</em>, <em>h1_htx</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix http_auth_bearer() when custom header is used</span> [<em>bug</em>, <em>http-fetch</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix the detection of the ext connect support
- revert "bug/minor: mux-h2: condition the processing of 8441 extension to global setting"</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Only accept :protocol with extended connect</span> [<em>bug</em>, <em>h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add a new message flag to indicate ext connect support</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Condition the processing of 8441 extension to global setting</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add decoding for :protocol in traces</span> [<em>bug</em>, <em>h2</em>, <em>minor</em>]</li><li><strong>⚪ </strong> <span>Always send rfc8441 client settings to use ext connect
- revert "bug/medium: cli: fix master cli connection slot leak on client disconnect"</span> [<em>regtests</em>, <em>http-messaging</em>]</li><li><strong>🟡 Medium</strong> <span>Properly consume padding for data frames</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Enforce the authority validation during h1 request parsing</span> [<em>bug</em>, <em>h1</em>, <em>medium</em>]</li></ul><div>Tags: medium minor http-fetch bug h1 http h1_htx stick-table h2 mux-h2 http-messaging regtests major </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</guid>
			<title>HAProxy Enterprise 3.0r1 (1.0.0-354.1105) (2026-05-07)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Thu, 07 May 2026 00:00:00 +0000</pubDate>
			<category>medium</category>
			<category>minor</category>
			<category>h1</category>
			<category>bug</category>
			<category>http-fetch</category>
			<category>http</category>
			<category>h1_htx</category>
			<category>stick-table</category>
			<category>resolvers</category>
			<category>tools</category>
			<category>h2</category>
			<category>mux-h2</category>
			<category>http-messaging</category>
			<category>regtests</category>
			<category>major</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Fix memory leak on aaaa additional records</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Apply dns-accept-family setting on additional records</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add command-line argument -4 to force ipv4-only dns</span> [<em>resolvers</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Add global "dns-accept-family" directive</span> [<em>resolvers</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Properly check permissions on cli's set/clear cmd</span> [<em>bug</em>, <em>stick-table</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Enforce the authority validation during h1 request parsing</span> [<em>bug</em>, <em>h1</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Forbid comma character in authority value</span> [<em>bug</em>, <em>http</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Read_line_to_trash() handle empty files without \n</span> [<em>bug</em>, <em>tools</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Remove reverved block on error during contig chunks parsing</span> [<em>bug</em>, <em>h1_htx</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix http_auth_bearer() when custom header is used</span> [<em>bug</em>, <em>http-fetch</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix the detection of the ext connect support
- revert "bug/minor: mux-h2: condition the processing of 8441 extension to global setting"</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Only accept :protocol with extended connect</span> [<em>bug</em>, <em>h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add a new message flag to indicate ext connect support</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Condition the processing of 8441 extension to global setting</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add decoding for :protocol in traces</span> [<em>bug</em>, <em>h2</em>, <em>minor</em>]</li><li><strong>⚪ </strong> <span>Always send rfc8441 client settings to use ext connect
- revert "bug/medium: cli: fix master cli connection slot leak on client disconnect"</span> [<em>regtests</em>, <em>http-messaging</em>]</li><li><strong>🟡 Medium</strong> <span>Properly consume padding for data frames</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li></ul><div>Tags: medium minor h1 bug http-fetch http h1_htx stick-table resolvers tools h2 mux-h2 http-messaging regtests major </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</guid>
			<title>HAProxy Enterprise 3.2r1 (1.0.0-369.843) (2026-05-07)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Thu, 07 May 2026 00:00:00 +0000</pubDate>
			<category>medium</category>
			<category>minor</category>
			<category>hapee/sample</category>
			<category>h1</category>
			<category>bug</category>
			<category>http-fetch</category>
			<category>http</category>
			<category>h1_htx</category>
			<category>mux-h1</category>
			<category>acme</category>
			<category>stick-table</category>
			<category>tools</category>
			<category>h2</category>
			<category>mux-h2</category>
			<category>http-messaging</category>
			<category>regtests</category>
			<category>major</category>
			<category>doc</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Properly check permissions on cli's set/clear cmd</span> [<em>bug</em>, <em>stick-table</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Enforce the authority validation during h1 request parsing</span> [<em>bug</em>, <em>h1</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Forbid comma character in authority value</span> [<em>bug</em>, <em>http</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Read_line_to_trash() handle empty files without \n</span> [<em>bug</em>, <em>tools</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Remove reverved block on error during contig chunks parsing</span> [<em>bug</em>, <em>h1_htx</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix http_auth_bearer() when custom header is used</span> [<em>bug</em>, <em>http-fetch</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Contact mail should be optional, don't pass tos bool</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix the detection of the ext connect support
- revert "bug/minor: mux-h2: condition the processing of 8441 extension to global setting"</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Only accept :protocol with extended connect</span> [<em>bug</em>, <em>h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add a new message flag to indicate ext connect support</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Condition the processing of 8441 extension to global setting</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add decoding for :protocol in traces</span> [<em>bug</em>, <em>h2</em>, <em>minor</em>]</li><li><strong>⚪ </strong> <span>Always send rfc8441 client settings to use ext connect</span> [<em>regtests</em>, <em>http-messaging</em>]</li><li>📝 <span>Document missing acme-vars and provider-name keywords
- revert "bug/medium: cli: fix master cli connection slot leak on client disconnect"</span> [<em>doc</em>, <em>acme</em>]</li><li><strong>⚪ </strong> <span>Fix h1_to_h2_upgrade.vtc to force h2 on first bind line</span> [<em>regtests</em>]</li><li><strong>🟡 Medium</strong> <span>Return an error on h2 upgrade attempts if not allowed</span> [<em>mux-h1</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Properly consume padding for data frames</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Added argc_otel context for otel-scope directive</span> [<em>hapee/sample</em>, <em>minor</em>]</li></ul><div>Tags: medium minor hapee/sample h1 bug http-fetch http h1_htx mux-h1 acme stick-table tools h2 mux-h2 http-messaging regtests major doc </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</guid>
			<title>HAProxy Enterprise 3.3r1 (1.0.0-369.520) (2026-05-07)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Thu, 07 May 2026 00:00:00 +0000</pubDate>
			<category>h1</category>
			<category>bug</category>
			<category>http-fetch</category>
			<category>stick-table</category>
			<category>hapee/sample</category>
			<category>medium</category>
			<category>minor</category>
			<category>mux_quic</category>
			<category>acme</category>
			<category>http-messaging</category>
			<category>doc</category>
			<category>h1_htx</category>
			<category>tools</category>
			<category>h2</category>
			<category>regtests</category>
			<category>ssl</category>
			<category>http</category>
			<category>mux-h1</category>
			<category>mux-h2</category>
			<category>major</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Properly check permissions on cli's set/clear cmd</span> [<em>bug</em>, <em>stick-table</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Enforce the authority validation during h1 request parsing</span> [<em>bug</em>, <em>h1</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Forbid comma character in authority value</span> [<em>bug</em>, <em>http</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Read_line_to_trash() handle empty files without \n</span> [<em>bug</em>, <em>tools</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Remove reverved block on error during contig chunks parsing</span> [<em>bug</em>, <em>h1_htx</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix http_auth_bearer() when custom header is used</span> [<em>bug</em>, <em>http-fetch</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Contact mail should be optional, don't pass tos bool</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix the detection of the ext connect support
- revert "bug/minor: mux-h2: condition the processing of 8441 extension to global setting"</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Only accept :protocol with extended connect</span> [<em>bug</em>, <em>h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add a new message flag to indicate ext connect support</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Condition the processing of 8441 extension to global setting</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add decoding for :protocol in traces</span> [<em>bug</em>, <em>h2</em>, <em>minor</em>]</li><li><strong>⚪ </strong> <span>Always send rfc8441 client settings to use ext connect</span> [<em>regtests</em>, <em>http-messaging</em>]</li><li>📝 <span>Document missing acme-vars and provider-name keywords
- revert "bug/medium: cli: fix master cli connection slot leak on client disconnect"</span> [<em>doc</em>, <em>acme</em>]</li><li><strong>⚪ </strong> <span>Fix h1_to_h2_upgrade.vtc to force h2 on first bind line</span> [<em>regtests</em>]</li><li><strong>🟡 Medium</strong> <span>Return an error on h2 upgrade attempts if not allowed</span> [<em>mux-h1</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Properly consume padding for data frames</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix max stream id reuse estimation</span> [<em>bug</em>, <em>mux_quic</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Use the sequence number with ktls and tls 1.2</span> [<em>bug</em>, <em>ssl</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Added argc_otel context for otel-scope directive</span> [<em>hapee/sample</em>, <em>minor</em>]</li></ul><div>Tags: h1 bug http-fetch stick-table hapee/sample medium minor mux_quic acme http-messaging doc h1_htx tools h2 regtests ssl http mux-h1 mux-h2 major </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</guid>
			<title>HAProxy Enterprise 2.6r1 (1.0.0-304.1794) (2026-05-04)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Mon, 04 May 2026 00:00:00 +0000</pubDate>
			<category>medium</category>
			<category>minor</category>
			<category>bug</category>
			<category>cli</category>
			<category>map</category>
			<category>resolvers</category>
			<category>mworker/cli</category>
			<category>hpack</category>
			<category>mux-h2</category>
			<category>regtests</category>
			<category>major</category>
			<category>map/cli</category>
			<category>cleanup</category>
			<category>vars</category>
			<category>http-htx</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Fix master cli connection slot leak on client disconnect</span> [<em>bug</em>, <em>cli</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Check ci_insert() return value in pcli_parse_request()</span> [<em>bug</em>, <em>mworker/cli</em>, <em>minor</em>]</li><li><strong>⚪ </strong> <span>Add a regtest to validate various ntlm transitions</span> [<em>regtests</em>]</li><li><strong>🟢 Minor</strong> <span>Free opts on parse error in resolv_parse_do_resolve()</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Free new requester on error when linking a resolution</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🔴 Major</strong> <span>Preset msgf_body_cl on h2_sf_data_clen in h2c_dec_hdrs()</span> [<em>bug</em>, <em>mux-h2</em>, <em>major</em>]</li><li><strong>🟡 Medium</strong> <span>Fix the body_len to check when parsing request trailers</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li>🧹 <span>Fix some map-related help messages</span> [<em>cleanup</em>, <em>map/cli</em>]</li><li><strong>🟢 Minor</strong> <span>Do not leak a map descriptor on load error</span> [<em>bug</em>, <em>map</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Validate idx > 0 in hpack_valid_idx()</span> [<em>bug</em>, <em>hpack</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Only print first invalid char in fill_desc()</span> [<em>bug</em>, <em>vars</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Don't store the variable twice with set-var-fmt</span> [<em>bug</em>, <em>vars</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Make parse_store() return error on var_set() failure</span> [<em>bug</em>, <em>vars</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Don't normalize emtpy path for options requests</span> [<em>bug</em>, <em>http-htx</em>, <em>minor</em>]</li></ul><div>Tags: medium minor bug cli map resolvers mworker/cli hpack mux-h2 regtests major map/cli cleanup vars http-htx </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</guid>
			<title>HAProxy Enterprise 2.8r1 (1.0.0-335.1368) (2026-05-04)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Mon, 04 May 2026 00:00:00 +0000</pubDate>
			<category>medium</category>
			<category>minor</category>
			<category>bug</category>
			<category>vars</category>
			<category>cli</category>
			<category>map</category>
			<category>resolvers</category>
			<category>mworker/cli</category>
			<category>hpack</category>
			<category>mux-h2</category>
			<category>regtests</category>
			<category>major</category>
			<category>map/cli</category>
			<category>tcpcheck</category>
			<category>cleanup</category>
			<category>http-htx</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>⚪ </strong> <span>Mark the master cli socket leak test as valid</span> [<em>regtests</em>]</li><li><strong>🟡 Medium</strong> <span>Fix master cli connection slot leak on client disconnect</span> [<em>bug</em>, <em>cli</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Check ci_insert() return value in pcli_parse_request()</span> [<em>bug</em>, <em>mworker/cli</em>, <em>minor</em>]</li><li><strong>⚪ </strong> <span>Add a regtest to validate various ntlm transitions</span> [<em>regtests</em>]</li><li><strong>🟢 Minor</strong> <span>Free opts on parse error in resolv_parse_do_resolve()</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Free new requester on error when linking a resolution</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly report error for http health-checks</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li><strong>🔴 Major</strong> <span>Preset msgf_body_cl on h2_sf_data_clen in h2c_dec_hdrs()</span> [<em>bug</em>, <em>mux-h2</em>, <em>major</em>]</li><li><strong>🟡 Medium</strong> <span>Fix the body_len to check when parsing request trailers</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li>🧹 <span>Fix some map-related help messages</span> [<em>cleanup</em>, <em>map/cli</em>]</li><li><strong>🟢 Minor</strong> <span>Do not leak a map descriptor on load error</span> [<em>bug</em>, <em>map</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Validate idx > 0 in hpack_valid_idx()</span> [<em>bug</em>, <em>hpack</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Only print first invalid char in fill_desc()</span> [<em>bug</em>, <em>vars</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Don't store the variable twice with set-var-fmt</span> [<em>bug</em>, <em>vars</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Make parse_store() return error on var_set() failure</span> [<em>bug</em>, <em>vars</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Don't normalize emtpy path for options requests</span> [<em>bug</em>, <em>http-htx</em>, <em>minor</em>]</li></ul><div>Tags: medium minor bug vars cli map resolvers mworker/cli hpack mux-h2 regtests major map/cli tcpcheck cleanup http-htx </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</guid>
			<title>HAProxy Enterprise 3.0r1 (1.0.0-354.1086) (2026-05-04)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Mon, 04 May 2026 00:00:00 +0000</pubDate>
			<category>medium</category>
			<category>minor</category>
			<category>bug</category>
			<category>vars</category>
			<category>pattern</category>
			<category>cli</category>
			<category>map</category>
			<category>resolvers</category>
			<category>mworker/cli</category>
			<category>acl</category>
			<category>hpack</category>
			<category>mux-h2</category>
			<category>regtests</category>
			<category>major</category>
			<category>map/cli</category>
			<category>tcpcheck</category>
			<category>cleanup</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Check ci_insert() return value in pcli_parse_request()</span> [<em>bug</em>, <em>mworker/cli</em>, <em>minor</em>]</li><li><strong>⚪ </strong> <span>Add a regtest to validate various ntlm transitions</span> [<em>regtests</em>]</li><li><strong>🟢 Minor</strong> <span>Free opts on parse error in resolv_parse_do_resolve()</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Free new requester on error when linking a resolution</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly report error for http health-checks</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li><strong>🔴 Major</strong> <span>Preset msgf_body_cl on h2_sf_data_clen in h2c_dec_hdrs()</span> [<em>bug</em>, <em>mux-h2</em>, <em>major</em>]</li><li><strong>🟡 Medium</strong> <span>Fix the body_len to check when parsing request trailers</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Release the reference on failure to load from file</span> [<em>bug</em>, <em>pattern</em>, <em>minor</em>]</li><li>🧹 <span>Fix some map-related help messages</span> [<em>cleanup</em>, <em>map/cli</em>]</li><li><strong>🟢 Minor</strong> <span>Do not leak a map descriptor on load error</span> [<em>bug</em>, <em>map</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix a possible arg corruption in smp_fetch_acl_parse()</span> [<em>bug</em>, <em>acl</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix master cli connection slot leak on client disconnect</span> [<em>bug</em>, <em>cli</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Validate idx > 0 in hpack_valid_idx()</span> [<em>bug</em>, <em>hpack</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Only print first invalid char in fill_desc()</span> [<em>bug</em>, <em>vars</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Don't store the variable twice with set-var-fmt</span> [<em>bug</em>, <em>vars</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Make parse_store() return error on var_set() failure</span> [<em>bug</em>, <em>vars</em>, <em>minor</em>]</li></ul><div>Tags: medium minor bug vars pattern cli map resolvers mworker/cli acl hpack mux-h2 regtests major map/cli tcpcheck cleanup </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</guid>
			<title>HAProxy Enterprise 3.2r1 (1.0.0-368.823) (2026-05-04)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Mon, 04 May 2026 00:00:00 +0000</pubDate>
			<category>bug</category>
			<category>pattern</category>
			<category>sink</category>
			<category>acl</category>
			<category>net_helper</category>
			<category>cleanup</category>
			<category>medium</category>
			<category>minor</category>
			<category>acme</category>
			<category>resolvers</category>
			<category>mworker/cli</category>
			<category>tcpcheck</category>
			<category>cli</category>
			<category>regtests</category>
			<category>map/cli</category>
			<category>hpack</category>
			<category>map</category>
			<category>mux-h2</category>
			<category>major</category>
			<category>dns</category>
			<category>vars</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🔴 Major</strong> <span>Also fix tcp_options_list for oob write loop</span> [<em>bug</em>, <em>net_helper</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Fix incomplete decoding in sample_conv_eth_vlan</span> [<em>bug</em>, <em>net_helper</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix out-of-bounds read in sample_conv_tcp_options_list</span> [<em>bug</em>, <em>net_helper</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix out-of-bounds read in tcp_fullhdr_find_opt</span> [<em>bug</em>, <em>net_helper</em>, <em>minor</em>]</li><li><strong>🔴 Major</strong> <span>Ip.fp infinite loop on malformed tcp options</span> [<em>bug</em>, <em>net_helper</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Check ci_insert() return value in pcli_parse_request()</span> [<em>bug</em>, <em>mworker/cli</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix user and operator permission via @@<pid> in master cli</span> [<em>bug</em>, <em>mworker/cli</em>, <em>medium</em>]</li><li><strong>⚪ </strong> <span>Add a regtest to validate various ntlm transitions</span> [<em>regtests</em>]</li><li><strong>🟢 Minor</strong> <span>Free opts on parse error in resolv_parse_do_resolve()</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Free new requester on error when linking a resolution</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly report error for http health-checks</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Always validate the source address in responses</span> [<em>bug</em>, <em>dns</em>, <em>minor</em>]</li><li><strong>🔴 Major</strong> <span>Preset msgf_body_cl on h2_sf_data_clen in h2c_dec_hdrs()</span> [<em>bug</em>, <em>mux-h2</em>, <em>major</em>]</li><li><strong>🟡 Medium</strong> <span>Fix the body_len to check when parsing request trailers</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Release the reference on failure to load from file</span> [<em>bug</em>, <em>pattern</em>, <em>minor</em>]</li><li>🧹 <span>Fix some map-related help messages</span> [<em>cleanup</em>, <em>map/cli</em>]</li><li><strong>🟢 Minor</strong> <span>Do not leak a map descriptor on load error</span> [<em>bug</em>, <em>map</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix a possible arg corruption in smp_fetch_acl_parse()</span> [<em>bug</em>, <em>acl</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix master cli connection slot leak on client disconnect</span> [<em>bug</em>, <em>cli</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Validate idx > 0 in hpack_valid_idx()</span> [<em>bug</em>, <em>hpack</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Only print first invalid char in fill_desc()</span> [<em>bug</em>, <em>vars</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Don't store the variable twice with set-var-fmt</span> [<em>bug</em>, <em>vars</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Make parse_store() return error on var_set() failure</span> [<em>bug</em>, <em>vars</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Do not free existing sinks on allocation error</span> [<em>bug</em>, <em>sink</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Skip auth/challenge steps when neworder returns a certificate</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix segfault on neworder with empty authorizations</span> [<em>bug</em>, <em>acme</em>, <em>medium</em>]</li></ul><div>Tags: bug pattern sink acl net_helper cleanup medium minor acme resolvers mworker/cli tcpcheck cli regtests map/cli hpack map mux-h2 major dns vars </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</guid>
			<title>HAProxy Enterprise 3.3r1 (1.0.0-368.498) (2026-05-04)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Mon, 04 May 2026 00:00:00 +0000</pubDate>
			<category>bug</category>
			<category>pattern</category>
			<category>sink</category>
			<category>acl</category>
			<category>net_helper</category>
			<category>cleanup</category>
			<category>ci</category>
			<category>medium</category>
			<category>minor</category>
			<category>acme</category>
			<category>resolvers</category>
			<category>mworker/cli</category>
			<category>tcpcheck</category>
			<category>github</category>
			<category>cli</category>
			<category>regtests</category>
			<category>map/cli</category>
			<category>hpack</category>
			<category>map</category>
			<category>mux-h2</category>
			<category>major</category>
			<category>dns</category>
			<category>vars</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🔴 Major</strong> <span>Also fix tcp_options_list for oob write loop</span> [<em>bug</em>, <em>net_helper</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Fix incomplete decoding in sample_conv_eth_vlan</span> [<em>bug</em>, <em>net_helper</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix out-of-bounds read in sample_conv_tcp_options_list</span> [<em>bug</em>, <em>net_helper</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix out-of-bounds read in tcp_fullhdr_find_opt</span> [<em>bug</em>, <em>net_helper</em>, <em>minor</em>]</li><li><strong>🔴 Major</strong> <span>Ip.fp infinite loop on malformed tcp options</span> [<em>bug</em>, <em>net_helper</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Check ci_insert() return value in pcli_parse_request()</span> [<em>bug</em>, <em>mworker/cli</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix user and operator permission via @@<pid> in master cli</span> [<em>bug</em>, <em>mworker/cli</em>, <em>medium</em>]</li><li><strong>⚪ </strong> <span>Add a regtest to validate various ntlm transitions</span> [<em>regtests</em>]</li><li><strong>🟢 Minor</strong> <span>Free opts on parse error in resolv_parse_do_resolve()</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix lookup for a hostname in the state-file tree</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Free new requester on error when linking a resolution</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly report error for http health-checks</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Always validate the source address in responses</span> [<em>bug</em>, <em>dns</em>, <em>minor</em>]</li><li><strong>🔴 Major</strong> <span>Preset msgf_body_cl on h2_sf_data_clen in h2c_dec_hdrs()</span> [<em>bug</em>, <em>mux-h2</em>, <em>major</em>]</li><li><strong>🟡 Medium</strong> <span>Fix the body_len to check when parsing request trailers</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li>🪛 <span>Add debug_strict=2 to asan jobs</span> [<em>ci</em>, <em>github</em>]</li><li><strong>🟢 Minor</strong> <span>Release the reference on failure to load from file</span> [<em>bug</em>, <em>pattern</em>, <em>minor</em>]</li><li>🧹 <span>Fix some map-related help messages</span> [<em>cleanup</em>, <em>map/cli</em>]</li><li><strong>🟢 Minor</strong> <span>Do not leak a map descriptor on load error</span> [<em>bug</em>, <em>map</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix a possible arg corruption in smp_fetch_acl_parse()</span> [<em>bug</em>, <em>acl</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix master cli connection slot leak on client disconnect</span> [<em>bug</em>, <em>cli</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Validate idx > 0 in hpack_valid_idx()</span> [<em>bug</em>, <em>hpack</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Only print first invalid char in fill_desc()</span> [<em>bug</em>, <em>vars</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Don't store the variable twice with set-var-fmt</span> [<em>bug</em>, <em>vars</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Make parse_store() return error on var_set() failure</span> [<em>bug</em>, <em>vars</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Do not free existing sinks on allocation error</span> [<em>bug</em>, <em>sink</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Skip auth/challenge steps when neworder returns a certificate</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix segfault on neworder with empty authorizations</span> [<em>bug</em>, <em>acme</em>, <em>medium</em>]</li></ul><div>Tags: bug pattern sink acl net_helper cleanup ci medium minor acme resolvers mworker/cli tcpcheck github cli regtests map/cli hpack map mux-h2 major dns vars </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</guid>
			<title>HAProxy Enterprise 2.6r1 (1.0.0-304.1780) (2026-04-29)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Wed, 29 Apr 2026 00:00:00 +0000</pubDate>
			<category>medium</category>
			<category>minor</category>
			<category>bug</category>
			<category>ssl</category>
			<category>mux-fcgi</category>
			<category>tools</category>
			<category>regtests</category>
			<category>payload</category>
			<category>major</category>
			<category>http-htx</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>⚪ </strong> <span>Fix reg-tests curve check</span> [<em>regtests</em>, <em>ssl</em>]</li><li><strong>⚪ </strong> <span>Mark ssl_dh.vtc as broken</span> [<em>regtests</em>, <em>ssl</em>]</li><li><strong>🟡 Medium</strong> <span>Properly handle full buffer for fcgi_param record</span> [<em>bug</em>, <em>mux-fcgi</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Prevent integer overflow in distcc token parsing</span> [<em>bug</em>, <em>payload</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Loop on full host value during scheme based normalization</span> [<em>bug</em>, <em>http-htx</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Don't use data from htx message to update authority</span> [<em>bug</em>, <em>http-htx</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Store new host in a chunk for scheme-based normalization</span> [<em>bug</em>, <em>http-htx</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>My_memspn/my_memcspn wrong cast causing incorrect byte reading</span> [<em>bug</em>, <em>tools</em>, <em>minor</em>]</li></ul><div>Tags: medium minor bug ssl mux-fcgi tools regtests payload major http-htx </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</guid>
			<title>HAProxy Enterprise 2.8r1 (1.0.0-335.1352) (2026-04-29)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Wed, 29 Apr 2026 00:00:00 +0000</pubDate>
			<category>tasks</category>
			<category>medium</category>
			<category>minor</category>
			<category>51d</category>
			<category>bug</category>
			<category>mux-fcgi</category>
			<category>tools</category>
			<category>build</category>
			<category>config</category>
			<category>payload</category>
			<category>major</category>
			<category>doc</category>
			<category>http-htx</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Properly handle full buffer for fcgi_param record</span> [<em>bug</em>, <em>mux-fcgi</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Prevent integer overflow in distcc token parsing</span> [<em>bug</em>, <em>payload</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Do not loop in task_schedule() if a task is running</span> [<em>bug</em>, <em>tasks</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Loop on full host value during scheme based normalization</span> [<em>bug</em>, <em>http-htx</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Don't use data from htx message to update authority</span> [<em>bug</em>, <em>http-htx</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Store new host in a chunk for scheme-based normalization</span> [<em>bug</em>, <em>http-htx</em>, <em>major</em>]</li><li>🏗️ <span>Fix bool definition on dummy lib v4</span> [<em>build</em>, <em>51d</em>]</li><li><strong>🟢 Minor</strong> <span>Fix memory leak in indent_msg() on out of memory</span> [<em>bug</em>, <em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>My_memspn/my_memcspn wrong cast causing incorrect byte reading</span> [<em>bug</em>, <em>tools</em>, <em>minor</em>]</li><li>📝 <span>Fix log-format example with last rule expressions</span> [<em>doc</em>, <em>config</em>]</li></ul><div>Tags: tasks medium minor 51d bug mux-fcgi tools build config payload major doc http-htx </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</guid>
			<title>HAProxy Enterprise 3.0r1 (1.0.0-354.1070) (2026-04-29)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Wed, 29 Apr 2026 00:00:00 +0000</pubDate>
			<category>tasks</category>
			<category>medium</category>
			<category>minor</category>
			<category>sample</category>
			<category>51d</category>
			<category>bug</category>
			<category>mux-fcgi</category>
			<category>mux_h1</category>
			<category>mux-h1</category>
			<category>peers</category>
			<category>tools</category>
			<category>build</category>
			<category>config</category>
			<category>payload</category>
			<category>major</category>
			<category>doc</category>
			<category>http-htx</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Don't normalize emtpy path for options requests</span> [<em>bug</em>, <em>http-htx</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Properly handle full buffer for fcgi_param record</span> [<em>bug</em>, <em>mux-fcgi</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Prevent integer overflow in distcc token parsing</span> [<em>bug</em>, <em>payload</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix various typos and spelling mistakes in user-visible messages</span> [<em>bug</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Do not loop in task_schedule() if a task is running</span> [<em>bug</em>, <em>tasks</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Deal with true 64-bits integer to emit chunks size</span> [<em>bug</em>, <em>mux-h1</em>, <em>major</em>]</li><li><strong>🟡 Medium</strong> <span>Loop on full host value during scheme based normalization</span> [<em>bug</em>, <em>http-htx</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Don't use data from htx message to update authority</span> [<em>bug</em>, <em>http-htx</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Store new host in a chunk for scheme-based normalization</span> [<em>bug</em>, <em>http-htx</em>, <em>major</em>]</li><li>🏗️ <span>Fix bool definition on dummy lib v4</span> [<em>build</em>, <em>51d</em>]</li><li><strong>🟡 Medium</strong> <span>Fix stack buffer overflow in h1_append_chunk_size()</span> [<em>bug</em>, <em>mux_h1</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix wrong flag reported twice for dump_flags</span> [<em>bug</em>, <em>peers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix logical "and" when checking for local in peer_app_st_starting</span> [<em>bug</em>, <em>peers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix memory leak in check_when_cond() when acl is not found</span> [<em>bug</em>, <em>sample</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix memory leak in indent_msg() on out of memory</span> [<em>bug</em>, <em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>My_memspn/my_memcspn wrong cast causing incorrect byte reading</span> [<em>bug</em>, <em>tools</em>, <em>minor</em>]</li><li>📝 <span>Fix log-format example with last rule expressions</span> [<em>doc</em>, <em>config</em>]</li></ul><div>Tags: tasks medium minor sample 51d bug mux-fcgi mux_h1 mux-h1 peers tools build config payload major doc http-htx </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</guid>
			<title>HAProxy Enterprise 3.2r1 (1.0.0-368.797) (2026-04-29)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Wed, 29 Apr 2026 00:00:00 +0000</pubDate>
			<category>tasks</category>
			<category>sample</category>
			<category>51d</category>
			<category>bug</category>
			<category>payload</category>
			<category>medium</category>
			<category>minor</category>
			<category>build</category>
			<category>doc</category>
			<category>tcpcheck</category>
			<category>tools</category>
			<category>http-htx</category>
			<category>mux-fcgi</category>
			<category>ssl</category>
			<category>mux_h1</category>
			<category>mux-h1</category>
			<category>peers</category>
			<category>config</category>
			<category>major</category>
			<category>http_ana</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Don't normalize emtpy path for options requests</span> [<em>bug</em>, <em>http-htx</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Properly handle full buffer for fcgi_param record</span> [<em>bug</em>, <em>mux-fcgi</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Prevent integer overflow in distcc token parsing</span> [<em>bug</em>, <em>payload</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Validate minimum keyshare_len in smp_fetch_ssl_keyshare_groups</span> [<em>bug</em>, <em>payload</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix various typos and spelling mistakes in user-visible messages</span> [<em>bug</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Do not loop in task_schedule() if a task is running</span> [<em>bug</em>, <em>tasks</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Deal with true 64-bits integer to emit chunks size</span> [<em>bug</em>, <em>mux-h1</em>, <em>major</em>]</li><li><strong>🟡 Medium</strong> <span>Loop on full host value during scheme based normalization</span> [<em>bug</em>, <em>http-htx</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Don't use data from htx message to update authority</span> [<em>bug</em>, <em>http-htx</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Store new host in a chunk for scheme-based normalization</span> [<em>bug</em>, <em>http-htx</em>, <em>major</em>]</li><li>🏗️ <span>Fix bool definition on dummy lib v4</span> [<em>build</em>, <em>51d</em>]</li><li><strong>🟢 Minor</strong> <span>Use scf to report term_evts in http_wait_for_request()</span> [<em>bug</em>, <em>http_ana</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix stack buffer overflow in h1_append_chunk_size()</span> [<em>bug</em>, <em>mux_h1</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix wrong flag reported twice for dump_flags</span> [<em>bug</em>, <em>peers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix logical "and" when checking for local in peer_app_st_starting</span> [<em>bug</em>, <em>peers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix null strm dereference in sample_conv_when</span> [<em>bug</em>, <em>sample</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix memory leak in check_when_cond() when acl is not found</span> [<em>bug</em>, <em>sample</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Free previously allocated strings on strdup failure in backup_env()</span> [<em>bug</em>, <em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix memory leak in indent_msg() on out of memory</span> [<em>bug</em>, <em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>My_memspn/my_memcspn wrong cast causing incorrect byte reading</span> [<em>bug</em>, <em>tools</em>, <em>minor</em>]</li><li>📝 <span>Fix log-format example with last rule expressions</span> [<em>doc</em>, <em>config</em>]</li><li><strong>🟢 Minor</strong> <span>Fix memory leaks on realloc failure in ssl_ckch.c</span> [<em>bug</em>, <em>ssl</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Allow connection reuse without prior traffic</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li></ul><div>Tags: tasks sample 51d bug payload medium minor build doc tcpcheck tools http-htx mux-fcgi ssl mux_h1 mux-h1 peers config major http_ana </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</guid>
			<title>HAProxy Enterprise 3.3r1 (1.0.0-368.470) (2026-04-29)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Wed, 29 Apr 2026 00:00:00 +0000</pubDate>
			<category>tasks</category>
			<category>sample</category>
			<category>51d</category>
			<category>bug</category>
			<category>payload</category>
			<category>cleanup</category>
			<category>medium</category>
			<category>minor</category>
			<category>build</category>
			<category>doc</category>
			<category>tcpcheck</category>
			<category>tools</category>
			<category>http-htx</category>
			<category>mux-fcgi</category>
			<category>ssl</category>
			<category>mux_h1</category>
			<category>mux-h1</category>
			<category>peers</category>
			<category>config</category>
			<category>major</category>
			<category>http_ana</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Don't normalize emtpy path for options requests</span> [<em>bug</em>, <em>http-htx</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Properly handle full buffer for fcgi_param record</span> [<em>bug</em>, <em>mux-fcgi</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Prevent integer overflow in distcc token parsing</span> [<em>bug</em>, <em>payload</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Validate minimum keyshare_len in smp_fetch_ssl_keyshare_groups</span> [<em>bug</em>, <em>payload</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix various typos and spelling mistakes in user-visible messages</span> [<em>bug</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Do not loop in task_schedule() if a task is running</span> [<em>bug</em>, <em>tasks</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Deal with true 64-bits integer to emit chunks size</span> [<em>bug</em>, <em>mux-h1</em>, <em>major</em>]</li><li><strong>🟡 Medium</strong> <span>Loop on full host value during scheme based normalization</span> [<em>bug</em>, <em>http-htx</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Don't use data from htx message to update authority</span> [<em>bug</em>, <em>http-htx</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Store new host in a chunk for scheme-based normalization</span> [<em>bug</em>, <em>http-htx</em>, <em>major</em>]</li><li>🏗️ <span>Fix bool definition on dummy lib v4</span> [<em>build</em>, <em>51d</em>]</li><li><strong>🟢 Minor</strong> <span>Use scf to report term_evts in http_wait_for_request()</span> [<em>bug</em>, <em>http_ana</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix stack buffer overflow in h1_append_chunk_size()</span> [<em>bug</em>, <em>mux_h1</em>, <em>medium</em>]</li><li>🧹 <span>Fix a few user-visible spelling mistakes</span> [<em>cleanup</em>, <em>peers</em>]</li><li><strong>🟢 Minor</strong> <span>Fix wrong flag reported twice for dump_flags</span> [<em>bug</em>, <em>peers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix logical "and" when checking for local in peer_app_st_starting</span> [<em>bug</em>, <em>peers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix null strm dereference in sample_conv_when</span> [<em>bug</em>, <em>sample</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix memory leak in check_when_cond() when acl is not found</span> [<em>bug</em>, <em>sample</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Free previously allocated strings on strdup failure in backup_env()</span> [<em>bug</em>, <em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix memory leak in indent_msg() on out of memory</span> [<em>bug</em>, <em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>My_memspn/my_memcspn wrong cast causing incorrect byte reading</span> [<em>bug</em>, <em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix double-free on failed realloc in ssl_sock.c</span> [<em>bug</em>, <em>ssl</em>, <em>minor</em>]</li><li>📝 <span>Fix log-format example with last rule expressions</span> [<em>doc</em>, <em>config</em>]</li><li><strong>🟢 Minor</strong> <span>Fix memory leaks on realloc failure in ssl_sock.c</span> [<em>bug</em>, <em>ssl</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix memory leaks on realloc failure in ssl_ckch.c</span> [<em>bug</em>, <em>ssl</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Allow connection reuse without prior traffic</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li></ul><div>Tags: tasks sample 51d bug payload cleanup medium minor build doc tcpcheck tools http-htx mux-fcgi ssl mux_h1 mux-h1 peers config major http_ana </div>]]></description>
		</item>
	</channel>
</rss>
