https://www.haproxy.com/documentation/haproxy-enterprise/ HAProxy Enterprise changelog en-us Sun, 06 Sep 2026 03:33:37 +0000 HAProxy Enterprise https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog HAProxy Enterprise 2.6r1 (1.0.0-308.1929) (2026-08-26) marketing@haproxy.com (HAProxy Technologies) Wed, 26 Aug 2026 00:00:00 +0000 payload minor config doc lua connection wurfl tools ssl bug conn mux-h2 server resolvers medium spoe http http-act flt-http-comp fcgi-app qpack cache ot http-fetch hlua build auth hpack http-ana sock lb-chash mux-fcgi
  • ๐ŸŸข Minor Don't read next block to detect end of data [bug, flt-http-comp, minor]
  • ๐ŸŸข Minor Allow explicit filter declaration with non-cache/non-compression filters [bug, fcgi-app, minor]
  • ๐ŸŸก Medium Ignore cache on redundant origin/referer [bug, cache, medium]
  • ๐ŸŸข Minor Free user groups on error paths in userlist_postinit() [bug, auth, minor]
  • ๐ŸŸข Minor Fix memory leak in env_expand() error path [bug, tools, minor]
  • ๐ŸŸข Minor Set-status() must check the response message, not the request [bug, http-act, minor]
  • ๐ŸŸข Minor Make http_first_req() check for http first [bug, http-fetch, minor]
  • ๐ŸŸข Minor Removed dead code in flt_ot_parse_cfg_str() [bug, ot, minor]
  • ๐ŸŸข Minor Check buffer pool creation for failures [bug, config, minor]
  • ๐ŸŸข Minor Fix memory leak of information list and patch strings at deinit [bug, wurfl, minor]
  • ๐ŸŸก Medium Check the room left before appending the index [bug, mux-fcgi, medium]
  • ๐ŸŸข Minor Accept fields at the response boundary [bug, resolvers, minor]
  • ๐Ÿ—๏ธ Avoid a potential null-dereference warning on openssl 1.0.2 [build, ssl]
  • ๐ŸŸก Medium Isolate tls session resumption per authentication policy [bug, ssl, medium]
  • ๐ŸŸข Minor Isolate tls session resumption per crt-list filter [bug, ssl, minor]
  • ๐ŸŸก Medium Isolate tls session resumption per x509 server certificate [bug, ssl, medium]
  • ๐ŸŸข Minor Apply tune.ssl.lifetime to tls1.3 sessions on boringssl/aws-lc [bug, ssl, minor]
  • ๐ŸŸข Minor Release the previous client cert reference at depth > 0 [bug, ssl, minor]
  • ๐ŸŸข Minor Do not check 'sess_el' list on frontend connections in __trace_enabled [bug, conn, minor]
  • ๐ŸŸข Minor Missing shift count check in qpack_get_varint() (ub) [bug, qpack, minor]
  • ๐ŸŸข Minor Check snprintf() return value in spoe_set_var/spoe_unset_var [bug, spoe, minor]
  • ๐ŸŸข Minor Fix handshake length off-by-4 in ssl_hello_sni/alpn [bug, payload, minor]
  • ๐ŸŸก Medium Fix authority parsing for absolute-form uri with empty path [bug, http, medium]
  • ๐Ÿ“ Clarify req.ssl_sni [doc, config]
  • ๐ŸŸก Medium Resume channel:send() from the unsent part of the string [bug, lua, medium]
  • ๐ŸŸข Minor Strip the userinfo when deriving :authority for a server [bug, mux-h2, minor]
  • ๐ŸŸข Minor Bound the walk when the saved cursor changed tree [bug, lb-chash, minor]
  • ๐ŸŸข Minor Reserve the whole crc32c tlv before saving its pointer [bug, connection, minor]
  • ๐ŸŸข Minor Reject server certificate names containing a nul byte [bug, ssl, minor]
  • ๐ŸŸข Minor Sanitize the stderr records before logging them [bug, mux-fcgi, minor]
  • ๐ŸŸก Medium Check the cookie rewrite result before moving the offsets [bug, http-ana, medium]
  • ๐ŸŸก Medium Bound the recvmsg() length when receiving old sockets [bug, sock, medium]
  • ๐ŸŸข Minor Don't call fcgi_strm_destroy() on a null stream [bug, mux-fcgi, minor]
  • ๐ŸŸข Minor Use a local buffer to format the socket addresses [bug, hlua, minor]
  • ๐ŸŸก Medium Encode long methods and schemes using the long form [bug, hpack, medium]
  • ๐ŸŸข Minor Check strdup return value on server id [bug, server, minor]
    • Tags: payload minor config doc lua connection wurfl tools ssl bug conn mux-h2 server resolvers medium spoe http http-act flt-http-comp fcgi-app qpack cache ot http-fetch hlua build auth hpack http-ana sock lb-chash mux-fcgi
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog HAProxy Enterprise 2.8r1 (1.0.0-342.1567) (2026-08-26) marketing@haproxy.com (HAProxy Technologies) Wed, 26 Aug 2026 00:00:00 +0000 payload minor config doc lua connection wurfl tools ssl quic bug mux-h2 conn server resolvers medium spoe http cli http-act cfgcond flt-http-comp fcgi-app filter proxy qpack cache ot http-fetch bwlim hlua build auth hpack http-ana sock lb-chash mux-fcgi
  • ๐ŸŸข Minor Don't read next block to detect end of data [bug, flt-http-comp, minor]
  • ๐ŸŸข Minor Allow explicit filter declaration with non-cache/non-compression filters [bug, fcgi-app, minor]
  • ๐ŸŸก Medium Ignore cache on redundant origin/referer [bug, cache, medium]
  • ๐ŸŸก Medium Don't report eom on a short content-length message [mux-h2, medium]
  • ๐ŸŸข Minor Harden h2_dump_h2s_info() against potentially null h2s->sd [bug, mux-h2, minor]
  • ๐ŸŸข Minor Make kqueue check for gtune_use_kqueue not gtune_use_epoll [bug, cfgcond, minor]
  • ๐ŸŸข Minor Free user groups on error paths in userlist_postinit() [bug, auth, minor]
  • ๐ŸŸข Minor Fix memory leak in env_expand() error path [bug, tools, minor]
  • ๐ŸŸข Minor Set-status() must check the response message, not the request [bug, http-act, minor]
  • ๐ŸŸข Minor Make http_first_req() check for http first [bug, http-fetch, minor]
  • ๐ŸŸข Minor Fix smp_fetch_hdr_ip()'s handling of brackets for ipv6 [bug, http-fetch, minor]
  • ๐ŸŸข Minor Removed dead code in flt_ot_parse_cfg_str() [bug, ot, minor]
  • ๐ŸŸข Minor Check buffer pool creation for failures [bug, config, minor]
  • ๐ŸŸข Minor Fix memory leak of information list and patch strings at deinit [bug, wurfl, minor]
  • ๐ŸŸก Medium Check the room left before appending the index [bug, mux-fcgi, medium]
  • ๐ŸŸข Minor Accept fields at the response boundary [bug, resolvers, minor]
  • ๐Ÿ—๏ธ Avoid a potential null-dereference warning on openssl 1.0.2 [build, ssl]
  • ๐ŸŸก Medium Isolate tls session resumption per authentication policy [bug, ssl, medium]
  • ๐ŸŸข Minor Isolate tls session resumption per crt-list filter [bug, ssl, minor]
  • ๐ŸŸก Medium Isolate tls session resumption per x509 server certificate [bug, ssl, medium]
  • ๐Ÿ—๏ธ Disable the tls1.3 session timeout clamp on wolfssl [build, ssl]
  • ๐ŸŸข Minor Apply tune.ssl.lifetime to tls1.3 sessions on boringssl/aws-lc [bug, ssl, minor]
  • ๐ŸŸก Medium Enforce tune.ssl.lifetime across tls1.3 session renewals [bug, ssl, medium]
  • ๐ŸŸข Minor Release the previous client cert reference at depth > 0 [bug, ssl, minor]
  • ๐ŸŸข Minor Do not check 'sess_el' list on frontend connections in __trace_enabled [bug, conn, minor]
  • ๐ŸŸข Minor Missing shift count check in qpack_get_varint() (ub) [bug, qpack, minor]
  • ๐ŸŸข Minor Check snprintf() return value in spoe_set_var/spoe_unset_var [bug, spoe, minor]
  • ๐ŸŸข Minor Fix handshake length off-by-4 in ssl_hello_sni/alpn [bug, payload, minor]
  • ๐ŸŸก Medium Fix a stick-table entry leak in shared mode [bug, bwlim, medium]
  • ๐ŸŸก Medium Fix authority parsing for absolute-form uri with empty path [bug, http, medium]
  • ๐Ÿ“ Clarify req.ssl_sni [doc, config]
  • ๐ŸŸก Medium Resume channel:send() from the unsent part of the string [bug, lua, medium]
  • ๐ŸŸก Medium Prevent out-of-bound read on wrapping crypto content [bug, quic, medium]
  • ๐ŸŸข Minor Strip the userinfo when deriving :authority for a server [bug, mux-h2, minor]
  • ๐ŸŸข Minor Bound the walk when the saved cursor changed tree [bug, lb-chash, minor]
  • ๐ŸŸข Minor Reserve the whole crc32c tlv before saving its pointer [bug, connection, minor]
  • ๐ŸŸข Minor Reject server certificate names containing a nul byte [bug, ssl, minor]
  • ๐ŸŸข Minor Sanitize the stderr records before logging them [bug, mux-fcgi, minor]
  • ๐ŸŸก Medium Check the cookie rewrite result before moving the offsets [bug, http-ana, medium]
  • ๐ŸŸก Medium Bound the recvmsg() length when receiving old sockets [bug, sock, medium]
  • ๐ŸŸข Minor Don't call fcgi_strm_destroy() on a null stream [bug, mux-fcgi, minor]
  • ๐ŸŸข Minor Use a local buffer to format the socket addresses [bug, hlua, minor]
  • ๐ŸŸก Medium Encode long methods and schemes using the long form [bug, hpack, medium]
  • ๐ŸŸข Minor Fix default-server leak on post-parsing cleanup [bug, proxy, minor]
  • ๐ŸŸข Minor Check strdup return value on server id [bug, server, minor]
  • ๐ŸŸก Medium Disable auto-close on channel during tcp payload filtering [bug, filter, medium]
  • ๐ŸŸข Minor Use the current argument to parse the fd spec in "show fd" [bug, cli, minor]
    • Tags: payload minor config doc lua connection wurfl tools ssl quic bug mux-h2 conn server resolvers medium spoe http cli http-act cfgcond flt-http-comp fcgi-app filter proxy qpack cache ot http-fetch bwlim hlua build auth hpack http-ana sock lb-chash mux-fcgi
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog HAProxy Enterprise 3.0r1 (1.0.0-361.1336) (2026-08-26) marketing@haproxy.com (HAProxy Technologies) Wed, 26 Aug 2026 00:00:00 +0000 payload minor config doc lua connection wurfl ssl mqtt quic bug mux-h2 conn log server resolvers medium spoe http cli http-act session cfgcond stick-tables flt-http-comp log/tools fcgi-app filter proxy qpack ring cache ot mux-h1 http-fetch mux-fcgi sink bwlim hlua build debug auth hpack http-ana sock lb-chash tools
  • ๐ŸŸก Medium Do not create one implicit ring per logger copy [bug, sink, medium]
  • ๐ŸŸข Minor Don't read next block to detect end of data [bug, flt-http-comp, minor]
  • ๐ŸŸข Minor Allow explicit filter declaration with non-cache/non-compression filters [bug, fcgi-app, minor]
  • ๐ŸŸก Medium Ignore cache on redundant origin/referer [bug, cache, medium]
  • ๐ŸŸก Medium Attach readers under the tail lock instead of isolating [ring, medium]
  • ๐ŸŸก Medium Fix an infinite loop in the fc_pp_tlv() fetch [bug, connection, medium]
  • ๐ŸŸก Medium Don't report eom on a short content-length message [mux-h2, medium]
  • ๐ŸŸก Medium Close the connection on a short content-length [bug, mux-h1, medium]
  • ๐ŸŸข Minor Harden h2_dump_h2s_info() against potentially null h2s->sd [bug, mux-h2, minor]
  • ๐ŸŸข Minor Fix publish flags validation that want all bits to be set [bug, mqtt, minor]
  • ๐ŸŸข Minor Connack parser uses wrong bit for subscription_identifiers_available [bug, mqtt, minor]
  • ๐ŸŸข Minor Connect parser uses wrong bit field for topic_alias_maximum [bug, mqtt, minor]
  • ๐ŸŸข Minor Connack parser returns mqtt_need_more_data on unknown property [bug, mqtt, minor]
  • ๐ŸŸข Minor Make kqueue check for gtune_use_kqueue not gtune_use_epoll [bug, cfgcond, minor]
  • ๐ŸŸข Minor Free user groups on error paths in userlist_postinit() [bug, auth, minor]
  • ๐ŸŸข Minor Fix memory leak in env_expand() error path [bug, tools, minor]
  • ๐ŸŸข Minor Set-status() must check the response message, not the request [bug, http-act, minor]
  • ๐ŸŸข Minor Make http_first_req() check for http first [bug, http-fetch, minor]
  • ๐ŸŸข Minor Fix smp_fetch_hdr_ip()'s handling of brackets for ipv6 [bug, http-fetch, minor]
  • ๐ŸŸข Minor Removed dead code in flt_ot_parse_cfg_str() [bug, ot, minor]
  • ๐ŸŸข Minor Check buffer pool creation for failures [bug, config, minor]
  • ๐ŸŸข Minor Fix memory leak of information list and patch strings at deinit [bug, wurfl, minor]
  • ๐ŸŸก Medium Check the room left before appending the index [bug, mux-fcgi, medium]
  • ๐ŸŸข Minor Accept fields at the response boundary [bug, resolvers, minor]
  • ๐Ÿ—๏ธ Avoid a potential null-dereference warning on openssl 1.0.2 [build, ssl]
  • ๐ŸŸก Medium Isolate tls session resumption per authentication policy [bug, ssl, medium]
  • ๐ŸŸข Minor Isolate tls session resumption per crt-list filter [bug, ssl, minor]
  • ๐ŸŸก Medium Isolate tls session resumption per x509 server certificate [bug, ssl, medium]
  • ๐Ÿ—๏ธ Disable the tls1.3 session timeout clamp on wolfssl [build, ssl]
  • ๐ŸŸข Minor Apply tune.ssl.lifetime to tls1.3 sessions on boringssl/aws-lc [bug, ssl, minor]
  • ๐ŸŸก Medium Enforce tune.ssl.lifetime across tls1.3 session renewals [bug, ssl, medium]
  • ๐ŸŸก Medium Fix unprotected 'ssl_sock_choose_sni_ctx' calls [bug, ssl, medium]
  • ๐ŸŸข Minor Release the previous client cert reference at depth > 0 [bug, ssl, minor]
  • ๐ŸŸข Minor Do not check 'sess_el' list on frontend connections in __trace_enabled [bug, conn, minor]
  • ๐ŸŸข Minor Fix double-free error when error in parse_loger occurs [bug, log, minor]
  • ๐ŸŸข Minor Missing shift count check in qpack_get_varint() (ub) [bug, qpack, minor]
  • ๐ŸŸข Minor Check snprintf() return value in spoe_set_var/spoe_unset_var [bug, spoe, minor]
  • ๐ŸŸข Minor Fix handshake length off-by-4 in ssl_hello_sni/alpn [bug, payload, minor]
  • ๐ŸŸก Medium Fix a stick-table entry leak in shared mode [bug, bwlim, medium]
  • ๐ŸŸก Medium Fix authority parsing for absolute-form uri with empty path [bug, http, medium]
  • ๐ŸŸข Minor Fix off-by-one error when parsing and copying source port range [bug, server, minor]
  • ๐ŸŸข Minor Reject an embedded nul in the full-dn ssl_*_dn() fetches [bug, ssl, minor]
  • ๐ŸŸข Minor Reject an embedded nul in the ssl_*_dn(entry) fetches [bug, ssl, minor]
  • ๐ŸŸก Medium Do not release an entry under the cache read lock [bug, cache, medium]
  • ๐ŸŸก Medium Retain the primary or secondary entry only when detaching its row [bug, cache, medium]
  • ๐Ÿ“ Clarify req.ssl_sni [doc, config]
  • ๐ŸŸก Medium Resume channel:send() from the unsent part of the string [bug, lua, medium]
  • ๐ŸŸก Medium Prevent out-of-bound read on wrapping crypto content [bug, quic, medium]
  • ๐ŸŸข Minor Strip the userinfo when deriving :authority for a server [bug, mux-h2, minor]
  • ๐ŸŸข Minor Only dump the trace once in __bug_on_once() [bug, debug, minor]
  • ๐ŸŸข Minor Bound the walk when the saved cursor changed tree [bug, lb-chash, minor]
  • ๐ŸŸก Medium Don't release a reversed connection twice on error [bug, session, medium]
  • ๐ŸŸข Minor Reserve the whole crc32c tlv before saving its pointer [bug, connection, minor]
  • ๐ŸŸก Medium Require a full-length aead tag when decrypting with aes-gcm [bug, ssl, medium]
  • ๐ŸŸข Minor Reject server certificate names containing a nul byte [bug, ssl, minor]
  • ๐ŸŸก Medium Always reserve room for trailing 0 when using cbor encoding helpers [bug, log, medium]
  • ๐ŸŸข Minor Fix ambiguous comments for some log encoding helpers [log/tools, minor]
  • ๐ŸŸข Minor Sanitize the stderr records before logging them [bug, mux-fcgi, minor]
  • ๐ŸŸก Medium Check the cookie rewrite result before moving the offsets [bug, http-ana, medium]
  • ๐ŸŸก Medium Bound the recvmsg() length when receiving old sockets [bug, sock, medium]
  • ๐ŸŸก Medium Use the same bucket for string keys with a nul [bug, stick-tables, medium]
  • ๐ŸŸข Minor Add strnlen2() helper [tools, minor]
  • ๐ŸŸข Minor Don't call fcgi_strm_destroy() on a null stream [bug, mux-fcgi, minor]
  • ๐ŸŸข Minor Use a local buffer to format the socket addresses [bug, hlua, minor]
  • ๐ŸŸก Medium Encode long methods and schemes using the long form [bug, hpack, medium]
  • ๐ŸŸข Minor Fix default-server leak on post-parsing cleanup [bug, proxy, minor]
  • ๐ŸŸข Minor Check strdup return value on server id [bug, server, minor]
  • ๐ŸŸก Medium Disable auto-close on channel during tcp payload filtering [bug, filter, medium]
  • ๐ŸŸข Minor Use the current argument to parse the fd spec in "show fd" [bug, cli, minor]
    • Tags: payload minor config doc lua connection wurfl ssl mqtt quic bug mux-h2 conn log server resolvers medium spoe http cli http-act session cfgcond stick-tables flt-http-comp log/tools fcgi-app filter proxy qpack ring cache ot mux-h1 http-fetch mux-fcgi sink bwlim hlua build debug auth hpack http-ana sock lb-chash tools
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog HAProxy Enterprise 3.2r1 (1.0.0-376.1134) (2026-08-26) marketing@haproxy.com (HAProxy Technologies) Wed, 26 Aug 2026 00:00:00 +0000 sample minor config payload doc lua connection wurfl ssl mqtt quic bug mux-h2 conn http-ana log server resolvers medium spoe http cli http-act session cfgcond regtests stick-tables flt-http-comp log/tools fcgi-app filter acme proxy qpack cache ot mux-h1 http-fetch mux-fcgi sink bwlim hlua_fcn converters build hlua debug auth hpack ssl/cli sock lb-chash tools
  • ๐ŸŸก Medium Do not create one implicit ring per logger copy [bug, sink, medium]
  • ๐ŸŸก Medium Initialize the settings of the implicit log server [bug, sink, medium]
  • ๐ŸŸข Minor Don't read next block to detect end of data [bug, flt-http-comp, minor]
  • ๐ŸŸข Minor Allow explicit filter declaration with non-cache/non-compression filters [bug, fcgi-app, minor]
  • ๐ŸŸก Medium Ignore cache on redundant origin/referer [bug, cache, medium]
  • โšช Use connection: close in the has_ctl() test [regtests, converters]
  • ๐ŸŸข Minor Add new converter has_ctl() to detect control characters [sample, minor]
  • ๐ŸŸก Medium Do not hold the sft lock around ring_dispatch_messages() [bug, sink, medium]
  • ๐ŸŸก Medium Fix an infinite loop in the fc_pp_tlv() fetch [bug, connection, medium]
  • ๐ŸŸก Medium Don't report eom on a short content-length message [mux-h2, medium]
  • ๐ŸŸก Medium Close the connection on a short content-length [bug, mux-h1, medium]
  • ๐ŸŸข Minor Harden h2_dump_h2s_info() against potentially null h2s->sd [bug, mux-h2, minor]
  • ๐ŸŸข Minor Fix publish flags validation that want all bits to be set [bug, mqtt, minor]
  • ๐ŸŸข Minor Connack parser uses wrong bit for subscription_identifiers_available [bug, mqtt, minor]
  • ๐ŸŸข Minor Connect parser uses wrong bit field for topic_alias_maximum [bug, mqtt, minor]
  • ๐ŸŸข Minor Connack parser returns mqtt_need_more_data on unknown property [bug, mqtt, minor]
  • ๐ŸŸข Minor Make kqueue check for gtune_use_kqueue not gtune_use_epoll [bug, cfgcond, minor]
  • ๐ŸŸก Medium Make string encoding possible to fail instead of truncating [bug, tools, medium]
  • ๐ŸŸข Minor Free user groups on error paths in userlist_postinit() [bug, auth, minor]
  • ๐ŸŸข Minor Fix memory leak in env_expand() error path [bug, tools, minor]
  • ๐ŸŸข Minor Set-status() must check the response message, not the request [bug, http-act, minor]
  • ๐ŸŸข Minor Make http_first_req() check for http first [bug, http-fetch, minor]
  • ๐ŸŸข Minor Fix smp_fetch_hdr_ip()'s handling of brackets for ipv6 [bug, http-fetch, minor]
  • ๐ŸŸข Minor Removed dead code in flt_ot_parse_cfg_str() [bug, ot, minor]
  • ๐ŸŸข Minor Null check on my_strndup() [bug, acme, minor]
  • ๐ŸŸข Minor Check buffer pool creation for failures [bug, config, minor]
  • ๐ŸŸข Minor Fix memory leak of information list and patch strings at deinit [bug, wurfl, minor]
  • ๐ŸŸก Medium Check the room left before appending the index [bug, mux-fcgi, medium]
  • ๐ŸŸข Minor Accept fields at the response boundary [bug, resolvers, minor]
  • ๐ŸŸข Minor Fix frontend-not-found detection in 'show ssl sni -f' [bug, ssl/cli, minor]
  • ๐Ÿ—๏ธ Avoid a potential null-dereference warning on openssl 1.0.2 [build, ssl]
  • ๐ŸŸก Medium Isolate tls session resumption per authentication policy [bug, ssl, medium]
  • ๐ŸŸข Minor Isolate tls session resumption per crt-list filter [bug, ssl, minor]
  • ๐ŸŸก Medium Isolate tls session resumption per x509 server certificate [bug, ssl, medium]
  • ๐Ÿ—๏ธ Disable the tls1.3 session timeout clamp on wolfssl [build, ssl]
  • ๐ŸŸข Minor Apply tune.ssl.lifetime to tls1.3 sessions on boringssl/aws-lc [bug, ssl, minor]
  • ๐ŸŸก Medium Enforce tune.ssl.lifetime across tls1.3 session renewals [bug, ssl, medium]
  • ๐ŸŸก Medium Fix unprotected 'ssl_sock_choose_sni_ctx' calls [bug, ssl, medium]
  • ๐ŸŸข Minor Release the previous client cert reference at depth > 0 [bug, ssl, minor]
  • ๐ŸŸข Minor Fix leak of x509_name in traces [bug, ssl, minor]
  • ๐ŸŸข Minor Do not check 'sess_el' list on frontend connections in __trace_enabled [bug, conn, minor]
  • ๐ŸŸข Minor Fix double-free error when error in parse_loger occurs [bug, log, minor]
  • ๐ŸŸข Minor Missing shift count check in qpack_get_varint() (ub) [bug, qpack, minor]
  • ๐ŸŸข Minor Check snprintf() return value in spoe_set_var/spoe_unset_var [bug, spoe, minor]
  • ๐ŸŸข Minor Fix handshake length off-by-4 in ssl_hello_sni/alpn [bug, payload, minor]
  • ๐ŸŸก Medium Fix a stick-table entry leak in shared mode [bug, bwlim, medium]
  • ๐ŸŸก Medium Fix authority parsing for absolute-form uri with empty path [bug, http, medium]
  • ๐ŸŸข Minor Fix off-by-one error when parsing and copying source port range [bug, server, minor]
  • ๐ŸŸข Minor Avoid a division by zero in the bbr pacing interval [bug, quic, minor]
  • ๐ŸŸข Minor Reject an embedded nul in the full-dn ssl_*_dn() fetches [bug, ssl, minor]
  • ๐ŸŸข Minor Reject an embedded nul in the ssl_*_dn(entry) fetches [bug, ssl, minor]
  • ๐ŸŸก Medium Do not release an entry under the cache read lock [bug, cache, medium]
  • ๐ŸŸก Medium Retain the primary or secondary entry only when detaching its row [bug, cache, medium]
  • ๐Ÿ“ Clarify req.ssl_sni [doc, config]
  • ๐ŸŸก Medium Ensure systematic bref cleanup for patref list iterator [bug, hlua_fcn, medium]
  • ๐ŸŸก Medium Resume channel:send() from the unsent part of the string [bug, lua, medium]
  • ๐ŸŸก Medium Prevent out-of-bound read on wrapping crypto content [bug, quic, medium]
  • ๐ŸŸข Minor Strip the userinfo when deriving :authority for a server [bug, mux-h2, minor]
  • ๐ŸŸข Minor Only dump the trace once in __bug_on_once() [bug, debug, minor]
  • ๐ŸŸข Minor Bound the walk when the saved cursor changed tree [bug, lb-chash, minor]
  • ๐ŸŸก Medium Don't release a reversed connection twice on error [bug, session, medium]
  • ๐ŸŸข Minor Reserve the whole crc32c tlv before saving its pointer [bug, connection, minor]
  • ๐ŸŸก Medium Require a full-length aead tag when decrypting with aes-gcm [bug, ssl, medium]
  • ๐ŸŸข Minor Restrict the permissions of the generated account key [bug, acme, minor]
  • ๐ŸŸข Minor Reject server certificate names containing a nul byte [bug, ssl, minor]
  • ๐ŸŸก Medium Don't delete a null token from the map [bug, acme, medium]
  • ๐ŸŸก Medium Always reserve room for trailing 0 when using cbor encoding helpers [bug, log, medium]
  • ๐ŸŸข Minor Fix ambiguous comments for some log encoding helpers [log/tools, minor]
  • ๐ŸŸข Minor Sanitize the stderr records before logging them [bug, mux-fcgi, minor]
  • ๐ŸŸก Medium Check the cookie rewrite result before moving the offsets [bug, http-ana, medium]
  • ๐ŸŸก Medium Bound the recvmsg() length when receiving old sockets [bug, sock, medium]
  • ๐ŸŸก Medium Use the same bucket for string keys with a nul [bug, stick-tables, medium]
  • ๐ŸŸก Medium Don't crash on "keep-query" in a response redirect [bug, http-ana, medium]
  • ๐ŸŸข Minor Don't call fcgi_strm_destroy() on a null stream [bug, mux-fcgi, minor]
  • ๐ŸŸก Medium Clear the applet pointer when the applet fails to start [bug, spoe, medium]
  • ๐ŸŸข Minor Use a local buffer to format the socket addresses [bug, hlua, minor]
  • ๐ŸŸก Medium Encode long methods and schemes using the long form [bug, hpack, medium]
  • ๐ŸŸข Minor Fix default-server leak on post-parsing cleanup [bug, proxy, minor]
  • ๐ŸŸข Minor Check strdup return value on server id [bug, server, minor]
  • ๐ŸŸก Medium Disable auto-close on channel during tcp payload filtering [bug, filter, medium]
  • ๐ŸŸข Minor Use the current argument to parse the fd spec in "show fd" [bug, cli, minor]
    • Tags: sample minor config payload doc lua connection wurfl ssl mqtt quic bug mux-h2 conn http-ana log server resolvers medium spoe http cli http-act session cfgcond regtests stick-tables flt-http-comp log/tools fcgi-app filter acme proxy qpack cache ot mux-h1 http-fetch mux-fcgi sink bwlim hlua_fcn converters build hlua debug auth hpack ssl/cli sock lb-chash tools
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog HAProxy Enterprise 3.3r1 (1.0.0-375.869) (2026-08-26) marketing@haproxy.com (HAProxy Technologies) Wed, 26 Aug 2026 00:00:00 +0000 sample minor config payload doc lua connection wurfl ssl mqtt quic bug mux-h2 conn jwt http-ana log admin server resolvers medium spoe http cli http-act session cfgcond regtests stick-tables flt-http-comp log/tools fcgi-app tcpcheck counters filter acme stats-file proxy qpack cache ot mux-h1 http-fetch mux-fcgi sink bwlim hlua_fcn converters hlua build debug auth ech hpack ssl/cli sock lb-chash tools
  • ๐ŸŸก Medium Do not create one implicit ring per logger copy [bug, sink, medium]
  • ๐ŸŸก Medium Initialize the settings of the implicit log server [bug, sink, medium]
  • ๐ŸŸข Minor Don't read next block to detect end of data [bug, flt-http-comp, minor]
  • ๐ŸŸข Minor Allow explicit filter declaration with non-cache/non-compression filters [bug, fcgi-app, minor]
  • ๐ŸŸก Medium Ignore cache on redundant origin/referer [bug, cache, medium]
  • โšช Use connection: close in the has_ctl() test [regtests, converters]
  • ๐ŸŸข Minor Add new converter has_ctl() to detect control characters [sample, minor]
  • ๐ŸŸก Medium Do not hold the sft lock around ring_dispatch_messages() [bug, sink, medium]
  • ๐ŸŸก Medium Fix an infinite loop in the fc_pp_tlv() fetch [bug, connection, medium]
  • ๐ŸŸก Medium Don't report eom on a short content-length message [mux-h2, medium]
  • ๐ŸŸก Medium Close the connection on a short content-length [bug, mux-h1, medium]
  • ๐ŸŸข Minor Harden h2_dump_h2s_info() against potentially null h2s->sd [bug, mux-h2, minor]
  • ๐ŸŸข Minor Fix publish flags validation that want all bits to be set [bug, mqtt, minor]
  • ๐ŸŸข Minor Connack parser uses wrong bit for subscription_identifiers_available [bug, mqtt, minor]
  • ๐ŸŸข Minor Connect parser uses wrong bit field for topic_alias_maximum [bug, mqtt, minor]
  • ๐ŸŸข Minor Connack parser returns mqtt_need_more_data on unknown property [bug, mqtt, minor]
  • ๐ŸŸข Minor Make kqueue check for gtune_use_kqueue not gtune_use_epoll [bug, cfgcond, minor]
  • ๐ŸŸก Medium Make string encoding possible to fail instead of truncating [bug, tools, medium]
  • ๐ŸŸข Minor Free user groups on error paths in userlist_postinit() [bug, auth, minor]
  • ๐ŸŸข Minor Fix memory leak in env_expand() error path [bug, tools, minor]
  • ๐ŸŸข Minor Set-status() must check the response message, not the request [bug, http-act, minor]
  • ๐ŸŸข Minor Make http_first_req() check for http first [bug, http-fetch, minor]
  • ๐ŸŸข Minor Fix smp_fetch_hdr_ip()'s handling of brackets for ipv6 [bug, http-fetch, minor]
  • ๐ŸŸข Minor Don't release ruleset when parsing 'spop-check' ruleset [bug, tcpcheck, minor]
  • ๐ŸŸข Minor Removed dead code in flt_ot_parse_cfg_str() [bug, ot, minor]
  • ๐ŸŸข Minor Null check on my_strndup() [bug, acme, minor]
  • ๐ŸŸข Minor Haproxy-reload use explicit socat address type [bug, admin, minor]
  • ๐ŸŸข Minor Improve 'jwt_tokenize' function - revert "bug/minor: jwt: missing 'jwt_tokenize' return value check" [jwt, minor]
  • ๐ŸŸข Minor Missing 'jwt_tokenize' return value check [bug, jwt, minor]
  • ๐ŸŸข Minor Properly enable/disable receives for tcp applets [bug, hlua, minor]
  • ๐ŸŸก Medium Fix shm-stats-file recover when all process slots are full [bug, stats-file, medium]
  • ๐ŸŸข Minor Check buffer pool creation for failures [bug, config, minor]
  • ๐ŸŸข Minor Fix memory leak of information list and patch strings at deinit [bug, wurfl, minor]
  • ๐ŸŸข Minor Fix label at end of compound statement [bug, ech, minor]
  • ๐ŸŸก Medium Check the room left before appending the index [bug, mux-fcgi, medium]
  • ๐ŸŸก Medium Pre-initialize the implicit log forwarding server [bug, sink, medium]
  • ๐ŸŸข Minor Accept fields at the response boundary [bug, resolvers, minor]
  • ๐ŸŸข Minor Fix frontend-not-found detection in 'show ssl sni -f' [bug, ssl/cli, minor]
  • ๐Ÿ—๏ธ Avoid a potential null-dereference warning on openssl 1.0.2 [build, ssl]
  • ๐ŸŸก Medium Isolate tls session resumption per authentication policy [bug, ssl, medium]
  • ๐ŸŸข Minor Isolate tls session resumption per crt-list filter [bug, ssl, minor]
  • ๐ŸŸก Medium Isolate tls session resumption per x509 server certificate [bug, ssl, medium]
  • ๐Ÿ—๏ธ Disable the tls1.3 session timeout clamp on wolfssl [build, ssl]
  • ๐ŸŸข Minor Apply tune.ssl.lifetime to tls1.3 sessions on boringssl/aws-lc [bug, ssl, minor]
  • ๐ŸŸก Medium Enforce tune.ssl.lifetime across tls1.3 session renewals [bug, ssl, medium]
  • ๐ŸŸก Medium Fix unprotected 'ssl_sock_choose_sni_ctx' calls [bug, ssl, medium]
  • ๐ŸŸข Minor Release the previous client cert reference at depth > 0 [bug, ssl, minor]
  • ๐ŸŸข Minor Fix leak of x509_name in traces [bug, ssl, minor]
  • ๐ŸŸข Minor Do not check 'sess_el' list on frontend connections in __trace_enabled [bug, conn, minor]
  • ๐ŸŸข Minor Fix double-free error when error in parse_loger occurs [bug, log, minor]
  • ๐ŸŸข Minor Missing shift count check in qpack_get_varint() (ub) [bug, qpack, minor]
  • ๐ŸŸข Minor Check snprintf() return value in spoe_set_var/spoe_unset_var [bug, spoe, minor]
  • ๐ŸŸข Minor Fix handshake length off-by-4 in ssl_hello_sni/alpn [bug, payload, minor]
  • ๐ŸŸก Medium Fix a stick-table entry leak in shared mode [bug, bwlim, medium]
  • ๐ŸŸก Medium Fix authority parsing for absolute-form uri with empty path [bug, http, medium]
  • ๐ŸŸข Minor Fix off-by-one error when parsing and copying source port range [bug, server, minor]
  • ๐ŸŸข Minor Avoid a division by zero in the bbr pacing interval [bug, quic, minor]
  • ๐ŸŸข Minor Reject an embedded nul in the full-dn ssl_*_dn() fetches [bug, ssl, minor]
  • ๐ŸŸข Minor Reject an embedded nul in the ssl_*_dn(entry) fetches [bug, ssl, minor]
  • ๐ŸŸก Medium Do not release an entry under the cache read lock [bug, cache, medium]
  • ๐ŸŸก Medium Retain the primary or secondary entry only when detaching its row [bug, cache, medium]
  • ๐Ÿ“ Clarify req.ssl_sni [doc, config]
  • ๐ŸŸก Medium Ensure systematic bref cleanup for patref list iterator [bug, hlua_fcn, medium]
  • ๐ŸŸก Medium Resume channel:send() from the unsent part of the string [bug, lua, medium]
  • ๐ŸŸข Minor Drop multiple retry on same connection [bug, quic, minor]
  • ๐ŸŸก Medium Prevent out-of-bound read on wrapping crypto content [bug, quic, medium]
  • ๐ŸŸข Minor Strip the userinfo when deriving :authority for a server [bug, mux-h2, minor]
  • ๐ŸŸข Minor Only dump the trace once in __bug_on_once() [bug, debug, minor]
  • ๐ŸŸข Minor Bound the walk when the saved cursor changed tree [bug, lb-chash, minor]
  • ๐ŸŸก Medium Don't release a reversed connection twice on error [bug, session, medium]
  • ๐ŸŸข Minor Reserve the whole crc32c tlv before saving its pointer [bug, connection, minor]
  • ๐ŸŸก Medium Require a full-length aead tag when decrypting with aes-gcm [bug, ssl, medium]
  • ๐ŸŸข Minor Restrict the permissions of the generated account key [bug, acme, minor]
  • ๐ŸŸข Minor Reject server certificate names containing a nul byte [bug, ssl, minor]
  • ๐ŸŸก Medium Don't delete a null token from the map [bug, acme, medium]
  • ๐ŸŸข Minor Don't take an extra reference on the certificate public key [bug, jwt, minor]
  • ๐ŸŸก Medium Always reserve room for trailing 0 when using cbor encoding helpers [bug, log, medium]
  • ๐ŸŸข Minor Fix ambiguous comments for some log encoding helpers [log/tools, minor]
  • ๐ŸŸข Minor Sanitize the stderr records before logging them [bug, mux-fcgi, minor]
  • ๐ŸŸก Medium Check the cookie rewrite result before moving the offsets [bug, http-ana, medium]
  • ๐ŸŸก Medium Bound the recvmsg() length when receiving old sockets [bug, sock, medium]
  • ๐ŸŸก Medium Use the same bucket for string keys with a nul [bug, stick-tables, medium]
  • ๐ŸŸก Medium Don't crash on "keep-query" in a response redirect [bug, http-ana, medium]
  • ๐ŸŸข Minor Don't call fcgi_strm_destroy() on a null stream [bug, mux-fcgi, minor]
  • ๐ŸŸก Medium Clear the applet pointer when the applet fails to start [bug, spoe, medium]
  • ๐ŸŸข Minor Use a local buffer to format the socket addresses [bug, hlua, minor]
  • ๐ŸŸข Minor Reject tgid 0 when preloading shm objects [bug, stats-file, minor]
  • ๐ŸŸก Medium Encode long methods and schemes using the long form [bug, hpack, medium]
  • ๐ŸŸข Minor Fix default-server leak on post-parsing cleanup [bug, proxy, minor]
  • ๐ŸŸข Minor Check strdup return value on server id [bug, server, minor]
  • ๐ŸŸก Medium Disable auto-close on channel during tcp payload filtering [bug, filter, medium]
  • ๐ŸŸก Medium Preserve shared.tg pointer on 'clear counters all' [bug, counters, medium]
  • ๐ŸŸข Minor Reject an ech store with no usable private key [bug, ech, minor]
  • ๐ŸŸข Minor Propagate error from load_echkeys() [bug, ech, minor]
  • ๐ŸŸข Minor Use the current argument to parse the fd spec in "show fd" [bug, cli, minor]
    • Tags: sample minor config payload doc lua connection wurfl ssl mqtt quic bug mux-h2 conn jwt http-ana log admin server resolvers medium spoe http cli http-act session cfgcond regtests stick-tables flt-http-comp log/tools fcgi-app tcpcheck counters filter acme stats-file proxy qpack cache ot mux-h1 http-fetch mux-fcgi sink bwlim hlua_fcn converters hlua build debug auth ech hpack ssl/cli sock lb-chash tools
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog HAProxy Enterprise 2.6r1 (1.0.0-308.1893) (2026-07-29) marketing@haproxy.com (HAProxy Technologies) Wed, 29 Jul 2026 00:00:00 +0000 sample minor bug h2 htx slz peers medium http-act http-ana cleanup http-htx http-fetch
  • ๐ŸŸก Medium Reject the deprecated protobuf group wire types [bug, sample, medium]
  • ๐ŸŸก Medium Check the available room before encoding dict values [bug, peers, medium]
  • ๐Ÿงน Clarify that the size promise applies to the stream, not to a call [cleanup, slz]
  • ๐ŸŸข Minor Avoid undefined shifts when building the word byte by byte [bug, slz, minor]
  • ๐ŸŸข Minor Fix the adler32 accumulators signedness on 32-bit [bug, slz, minor]
  • ๐ŸŸข Minor Do not append a block to an already finished stream [bug, slz, minor]
  • ๐ŸŸก Medium Bound the bits wasted by the 9-bit literals [bug, slz, medium]
  • ๐ŸŸข Minor Use the exact switch cost for the last literals of a block [bug, slz, minor]
  • ๐ŸŸข Minor Do not read past the end of the input around the match loop [bug, slz, minor]
  • ๐ŸŸข Minor Transfer htx_fl_eom flag on success in htx_append_msg() [bug, htx, minor]
  • ๐ŸŸข Minor Perform raw copy for messages of same size in htx_copy_msg() [bug, htx, minor]
  • ๐ŸŸข Minor Check the strdup() of the "lf-string" http reply argument [bug, http-htx, minor]
  • ๐ŸŸข Minor Reject a negative capture id in the capture actions [bug, http-act, minor]
  • ๐ŸŸข Minor Restore the response buffer state in the early-hint action [bug, http-act, minor]
  • ๐ŸŸข Minor Fix a double free of the map reference on a parsing error [bug, http-act, minor]
  • ๐ŸŸข Minor Fix a double free of the regex on a rule parsing error [bug, http-act, minor]
  • ๐ŸŸข Minor Fix a one-byte over-read in the client-side cookie parser [bug, http-ana, minor]
  • ๐ŸŸข Minor Don't use a block pointer to roll back a partial htx conversion [bug, h2, minor]
  • ๐ŸŸข Minor Check the trash allocation in http_scheme_based_normalize() [bug, http-htx, minor]
  • ๐ŸŸก Medium Reject a negative capture id in capture.{req,res}.hdr [bug, http-fetch, medium]
  • ๐ŸŸก Medium Don't parse a non-http check buffer as an htx message [bug, http-fetch, medium]
  • ๐ŸŸข Minor Fix the length moved when removing a header value [bug, http-htx, minor]
    • Tags: sample minor bug h2 htx slz peers medium http-act http-ana cleanup http-htx http-fetch
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog HAProxy Enterprise 2.8r1 (1.0.0-341.1520) (2026-07-29) marketing@haproxy.com (HAProxy Technologies) Wed, 29 Jul 2026 00:00:00 +0000 sample minor slz bug htx ssl/ocsp medium http http-act cleanup h2 peers major http-fetch applet stconn reorg http-ana http-htx
  • ๐Ÿ”ด Major Lock the ocsp response around reads in the stapling callback [bug, ssl/ocsp, major]
  • ๐ŸŸก Medium Reject the deprecated protobuf group wire types [bug, sample, medium]
  • ๐ŸŸก Medium Check the available room before encoding dict values [bug, peers, medium]
  • ๐Ÿงน Clarify that the size promise applies to the stream, not to a call [cleanup, slz]
  • ๐ŸŸข Minor Avoid undefined shifts when building the word byte by byte [bug, slz, minor]
  • ๐ŸŸข Minor Fix the adler32 accumulators signedness on 32-bit [bug, slz, minor]
  • ๐ŸŸข Minor Do not append a block to an already finished stream [bug, slz, minor]
  • ๐ŸŸก Medium Bound the bits wasted by the 9-bit literals [bug, slz, medium]
  • ๐ŸŸข Minor Use the exact switch cost for the last literals of a block [bug, slz, minor]
  • ๐Ÿงน Fix the documented worst case size of flush() and finish() [cleanup, slz]
  • ๐ŸŸข Minor Do not read past the end of the input around the match loop [bug, slz, minor]
  • ๐ŸŸข Minor Transfer htx_fl_eom flag on success in htx_append_msg() [bug, htx, minor]
  • ๐ŸŸข Minor Perform raw copy for messages of same size in htx_copy_msg() [bug, htx, minor]
  • ๐ŸŸข Minor Check the strdup() of the "lf-string" http reply argument [bug, http-htx, minor]
  • ๐ŸŸข Minor Reject a negative capture id in the capture actions [bug, http-act, minor]
  • ๐ŸŸข Minor Restore the response buffer state in the early-hint action [bug, http-act, minor]
  • ๐ŸŸข Minor Fix a double free of the map reference on a parsing error [bug, http-act, minor]
  • ๐ŸŸข Minor Fix a double free of the regex on a rule parsing error [bug, http-act, minor]
  • ๐ŸŸข Minor Fix a one-byte over-read in the client-side cookie parser [bug, http-ana, minor]
  • ๐ŸŸข Minor Don't use a block pointer to roll back a partial htx conversion [bug, h2, minor]
  • ๐ŸŸข Minor Check the trash allocation in http_scheme_based_normalize() [bug, http-htx, minor]
  • ๐ŸŸข Minor Fix an out-of-bounds read in http_get_host_port() on empty host [bug, http, minor]
  • ๐ŸŸก Medium Reject a negative capture id in capture.{req,res}.hdr [bug, http-fetch, medium]
  • ๐ŸŸก Medium Don't parse a non-http check buffer as an htx message [bug, http-fetch, medium]
  • ๐ŸŸข Minor Fix the length moved when removing a header value [bug, http-htx, minor]
  • ๐ŸŸก Medium Reenable reads in applet context if requesting a connection [bug, applet, medium]
  • ๐Ÿ”„ Move sc_chk_rcv() from sc_strm.h to stconn.c [reorg, stconn]
    • Tags: sample minor slz bug htx ssl/ocsp medium http http-act cleanup h2 peers major http-fetch applet stconn reorg http-ana http-htx
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog HAProxy Enterprise 3.0r1 (1.0.0-360.1267) (2026-07-29) marketing@haproxy.com (HAProxy Technologies) Wed, 29 Jul 2026 00:00:00 +0000 sample minor slz bug htx ssl/ocsp server medium http http-act cleanup stream h2 peers major h1 http-fetch http-ana http-htx
  • ๐ŸŸก Medium Properly check for streams before deletion [bug, server, medium]
  • ๐ŸŸก Medium Introduce stream_set_srv_target() [stream, medium]
  • ๐Ÿ”ด Major Lock the ocsp response around reads in the stapling callback [bug, ssl/ocsp, major]
  • ๐ŸŸก Medium Reject the deprecated protobuf group wire types [bug, sample, medium]
  • ๐ŸŸก Medium Check the available room before encoding dict values [bug, peers, medium]
  • ๐Ÿงน Clarify that the size promise applies to the stream, not to a call [cleanup, slz]
  • ๐ŸŸข Minor Avoid undefined shifts when building the word byte by byte [bug, slz, minor]
  • ๐ŸŸข Minor Fix the adler32 accumulators signedness on 32-bit [bug, slz, minor]
  • ๐ŸŸข Minor Do not append a block to an already finished stream [bug, slz, minor]
  • ๐ŸŸก Medium Bound the bits wasted by the 9-bit literals [bug, slz, medium]
  • ๐ŸŸข Minor Use the exact switch cost for the last literals of a block [bug, slz, minor]
  • ๐Ÿงน Fix the documented worst case size of flush() and finish() [cleanup, slz]
  • ๐ŸŸข Minor Do not read past the end of the input around the match loop [bug, slz, minor]
  • ๐ŸŸข Minor Transfer htx_fl_eom flag on success in htx_append_msg() [bug, htx, minor]
  • ๐ŸŸข Minor Perform raw copy for messages of same size in htx_copy_msg() [bug, htx, minor]
  • ๐ŸŸข Minor Check the strdup() of the "lf-string" http reply argument [bug, http-htx, minor]
  • ๐ŸŸข Minor Reject a negative capture id in the capture actions [bug, http-act, minor]
  • ๐ŸŸข Minor Restore the response buffer state in the early-hint action [bug, http-act, minor]
  • ๐ŸŸข Minor Fix a double free of the map reference on a parsing error [bug, http-act, minor]
  • ๐ŸŸข Minor Fix a double free of the regex on a rule parsing error [bug, http-act, minor]
  • ๐ŸŸข Minor Fix a one-byte over-read in the client-side cookie parser [bug, http-ana, minor]
  • ๐ŸŸข Minor Don't use a block pointer to roll back a partial htx conversion [bug, h2, minor]
  • ๐ŸŸข Minor Report the right error position on authority/host mismatch [bug, h1, minor]
  • ๐ŸŸข Minor Check the trash allocation in http_scheme_based_normalize() [bug, http-htx, minor]
  • ๐ŸŸข Minor Fix an out-of-bounds read in http_get_host_port() on empty host [bug, http, minor]
  • ๐ŸŸก Medium Reject a negative capture id in capture.{req,res}.hdr [bug, http-fetch, medium]
  • ๐ŸŸก Medium Don't parse a non-http check buffer as an htx message [bug, http-fetch, medium]
  • ๐ŸŸข Minor Fix the length moved when removing a header value [bug, http-htx, minor]
    • Tags: sample minor slz bug htx ssl/ocsp server medium http http-act cleanup stream h2 peers major h1 http-fetch http-ana http-htx
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog HAProxy Enterprise 3.2r1 (1.0.0-376.1053) (2026-07-29) marketing@haproxy.com (HAProxy Technologies) Wed, 29 Jul 2026 00:00:00 +0000 sample minor slz bug http-rules htx ssl/ocsp server h1-htx medium resolvers http http-act cleanup stream h2 peers major h1 mux-h1 http-fetch reorg http-ana http-htx
  • ๐ŸŸข Minor Fix check reuse-pool in srv_settings_cpy() [bug, server, minor]
  • ๐ŸŸข Minor Duplicate server alt_proto in srv_settings_cpy() [bug, server, minor]
  • ๐ŸŸข Minor Improve parsing error for server-template [server, minor]
  • ๐ŸŸก Medium Properly check for streams before deletion [bug, server, medium]
  • ๐ŸŸก Medium Introduce stream_set_srv_target() [stream, medium]
  • ๐Ÿ”ด Major Lock the ocsp response around reads in the stapling callback [bug, ssl/ocsp, major]
  • ๐ŸŸก Medium Reject the deprecated protobuf group wire types [bug, sample, medium]
  • ๐ŸŸก Medium Check the available room before encoding dict values [bug, peers, medium]
  • ๐Ÿงน Clarify that the size promise applies to the stream, not to a call [cleanup, slz]
  • ๐ŸŸข Minor Avoid undefined shifts when building the word byte by byte [bug, slz, minor]
  • ๐ŸŸข Minor Fix the adler32 accumulators signedness on 32-bit [bug, slz, minor]
  • ๐ŸŸข Minor Do not append a block to an already finished stream [bug, slz, minor]
  • ๐ŸŸก Medium Bound the bits wasted by the 9-bit literals [bug, slz, medium]
  • ๐ŸŸข Minor Use the exact switch cost for the last literals of a block [bug, slz, minor]
  • ๐Ÿงน Fix the documented worst case size of flush() and finish() [cleanup, slz]
  • ๐ŸŸข Minor Do not read past the end of the input around the match loop [bug, slz, minor]
  • ๐ŸŸข Minor Fix release of a failed "set-cookie-fmt" redirect rule [bug, http-rules, minor]
  • ๐ŸŸข Minor Transfer htx_fl_eom flag on success in htx_append_msg() [bug, htx, minor]
  • ๐ŸŸข Minor Perform raw copy for messages of same size in htx_copy_msg() [bug, htx, minor]
  • ๐ŸŸข Minor Check the strdup() of the "lf-string" http reply argument [bug, http-htx, minor]
  • ๐ŸŸข Minor Reject a negative capture id in the capture actions [bug, http-act, minor]
  • ๐ŸŸข Minor Restore the response buffer state in the early-hint action [bug, http-act, minor]
  • ๐ŸŸข Minor Fix a double free of the map reference on a parsing error [bug, http-act, minor]
  • ๐ŸŸข Minor Fix a double free of the regex on a rule parsing error [bug, http-act, minor]
  • ๐ŸŸข Minor Fix a one-byte over-read in the client-side cookie parser [bug, http-ana, minor]
  • ๐ŸŸข Minor Don't use a block pointer to roll back a partial htx conversion [bug, h2, minor]
  • ๐ŸŸข Minor Report the right error position on authority/host mismatch [bug, h1, minor]
  • ๐ŸŸข Minor Check the trash allocation in http_scheme_based_normalize() [bug, http-htx, minor]
  • ๐ŸŸข Minor Fix an out-of-bounds read in http_get_host_port() on empty host [bug, http, minor]
  • ๐ŸŸก Medium Reject a negative capture id in capture.{req,res}.hdr [bug, http-fetch, medium]
  • ๐ŸŸก Medium Don't parse a non-http check buffer as an htx message [bug, http-fetch, medium]
  • ๐ŸŸข Minor Fix the length moved when removing a header value [bug, http-htx, minor]
  • ๐ŸŸก Medium Always adjust case for all outgoing headers as expected [bug, mux-h1, medium]
  • ๐Ÿ”„ Move h1 headers map in h1-htx [reorg, h1-htx]
  • ๐ŸŸข Minor Do not index resolvers names in the proxies [bug, resolvers, minor]
    • Tags: sample minor slz bug http-rules htx ssl/ocsp server h1-htx medium resolvers http http-act cleanup stream h2 peers major h1 mux-h1 http-fetch reorg http-ana http-htx
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog HAProxy Enterprise 3.3r1 (1.0.0-375.773) (2026-07-29) marketing@haproxy.com (HAProxy Technologies) Wed, 29 Jul 2026 00:00:00 +0000 sample minor doc slz ssl quic h3 bug http-rules htx ssl/ocsp server h1-htx medium resolvers http http-act cleanup import h2 fd peers major h1 mux-h1 http-fetch mux_quic build debug reorg http-ana http-htx mux-quic cebtree
  • โšช Private: fix the duplicate detection in the lookup shortcut [import, cebtree]
  • ๐ŸŸข Minor Fix check reuse-pool in srv_settings_cpy() [bug, server, minor]
  • ๐ŸŸข Minor Duplicate server alt_proto in srv_settings_cpy() [bug, server, minor]
  • ๐ŸŸข Minor Fix quic on server-template [bug, server, minor]
  • ๐ŸŸข Minor Improve parsing error for server-template [server, minor]
  • ๐Ÿ”ด Major Lock the ocsp response around reads in the stapling callback [bug, ssl/ocsp, major]
  • ๐ŸŸก Medium Reject the deprecated protobuf group wire types [bug, sample, medium]
  • ๐ŸŸก Medium Check the available room before encoding dict values [bug, peers, medium]
  • ๐Ÿ—๏ธ Do not use ssl3_mt_key_update, hardcode 24 instead [build, ssl]
  • ๐ŸŸก Medium Put co_er_ssl_keyupdate at the right place [bug, ssl, medium]
  • ๐Ÿ“ Document tune.ssl.keyupdate-rate-limit [doc, ssl]
  • ๐ŸŸก Medium Add a way to rate-limit tlsv1.3 keyupdate [ssl, medium]
  • ๐Ÿงน Clarify that the size promise applies to the stream, not to a call [cleanup, slz]
  • ๐ŸŸข Minor Avoid undefined shifts when building the word byte by byte [bug, slz, minor]
  • ๐ŸŸข Minor Fix the adler32 accumulators signedness on 32-bit [bug, slz, minor]
  • ๐ŸŸข Minor Do not append a block to an already finished stream [bug, slz, minor]
  • ๐ŸŸก Medium Bound the bits wasted by the 9-bit literals [bug, slz, medium]
  • ๐ŸŸข Minor Use the exact switch cost for the last literals of a block [bug, slz, minor]
  • ๐Ÿงน Fix the documented worst case size of flush() and finish() [cleanup, slz]
  • ๐ŸŸข Minor Do not read past the end of the input around the match loop [bug, slz, minor]
  • ๐ŸŸข Minor Fix release of a failed "set-cookie-fmt" redirect rule [bug, http-rules, minor]
  • ๐ŸŸข Minor Transfer htx_fl_eom flag on success in htx_append_msg() [bug, htx, minor]
  • ๐ŸŸข Minor Perform raw copy for messages of same size in htx_copy_msg() [bug, htx, minor]
  • ๐ŸŸข Minor Check the strdup() of the "lf-string" http reply argument [bug, http-htx, minor]
  • ๐ŸŸข Minor Reject a negative capture id in the capture actions [bug, http-act, minor]
  • ๐ŸŸข Minor Restore the response buffer state in the early-hint action [bug, http-act, minor]
  • ๐ŸŸข Minor Fix a double free of the map reference on a parsing error [bug, http-act, minor]
  • ๐ŸŸข Minor Fix a double free of the regex on a rule parsing error [bug, http-act, minor]
  • ๐ŸŸข Minor Fix a one-byte over-read in the client-side cookie parser [bug, http-ana, minor]
  • ๐ŸŸข Minor Don't use a block pointer to roll back a partial htx conversion [bug, h3, minor]
  • ๐ŸŸข Minor Don't use a block pointer to roll back a partial htx conversion [bug, h2, minor]
  • ๐ŸŸข Minor Report the right error position on authority/host mismatch [bug, h1, minor]
  • ๐ŸŸข Minor Check the trash allocation in http_scheme_based_normalize() [bug, http-htx, minor]
  • ๐ŸŸข Minor Fix an out-of-bounds read in http_get_host_port() on empty host [bug, http, minor]
  • ๐ŸŸก Medium Reject a negative capture id in capture.{req,res}.hdr [bug, http-fetch, medium]
  • ๐ŸŸก Medium Don't parse a non-http check buffer as an htx message [bug, http-fetch, medium]
  • ๐ŸŸข Minor Fix the length moved when removing a header value [bug, http-htx, minor]
  • ๐ŸŸก Medium Always adjust case for all outgoing headers as expected [bug, mux-h1, medium]
  • ๐Ÿ”„ Move h1 headers map in h1-htx [reorg, h1-htx]
  • โšช Catch access attempts to closed fds [debug, fd]
  • ๐ŸŸก Medium Handle non-application data record while splicing [bug, ssl, medium]
  • ๐ŸŸก Medium Spell have_vanilla_openssl correctly [bug, ssl, medium]
  • ๐ŸŸข Minor Do not index resolvers names in the proxies [bug, resolvers, minor]
  • ๐ŸŸก Medium Properly check for streams before deletion [bug, server, medium]
  • ๐ŸŸข Minor Ignore stream after mux closure on be side [bug, quic, minor]
  • ๐ŸŸก Medium Complete stream shutdown for read channel [bug, mux_quic, medium]
  • ๐ŸŸก Medium Extend shut to app proto layer [mux-quic, medium]
  • ๐ŸŸข Minor Use separate error code for stop_sending [mux_quic, minor]
    • Tags: sample minor doc slz ssl quic h3 bug http-rules htx ssl/ocsp server h1-htx medium resolvers http http-act cleanup import h2 fd peers major h1 mux-h1 http-fetch mux_quic build debug reorg http-ana http-htx mux-quic cebtree
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog HAProxy Enterprise 3.2r1 (1.0.0-376.1018) (2026-07-24) marketing@haproxy.com (HAProxy Technologies) Fri, 24 Jul 2026 00:00:00 +0000 ssl medium minor httpclient
  • ๐ŸŸก Medium Initialize the httpclient with default ssl values [httpclient, medium]
  • ๐ŸŸข Minor Export ssl_sock_init_srv() [ssl, minor]
    • Tags: ssl medium minor httpclient
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog HAProxy Enterprise 2.6r1 (1.0.0-308.1871) (2026-07-22) marketing@haproxy.com (HAProxy Technologies) Wed, 22 Jul 2026 00:00:00 +0000 sample minor bug doc stats medium protobuf ssl-gencert http-conv mux-h1
  • ๐ŸŸก Medium Adjust sample size capacity after pointer shift for ltrim() [bug, sample, medium]
  • ๐ŸŸข Minor Don't delay send if message with c-l was fully sent [bug, mux-h1, minor]
  • ๐ŸŸก Medium Fix nested path bypass in field lookup [bug, protobuf, medium]
  • ๐ŸŸก Medium Adjust sample size capacity after pointer shift [bug, protobuf, medium]
  • ๐ŸŸก Medium Don't forget to free memory when done [bug, ssl-gencert, medium]
  • ๐Ÿ“ Document that stats admin is vulnerable to a csrf attack [doc, stats]
  • ๐ŸŸก Medium Ensure that origin is valid on posts [bug, stats, medium]
  • ๐ŸŸก Medium Subject "stats admin" accesses to "stats scope" filtering [bug, stats, medium]
  • ๐ŸŸข Minor Factor the proxy vs scope check into its own function [stats, minor]
  • ๐ŸŸข Minor Make url-dec failed if no space for trailing null byte [bug, http-conv, minor]
  • ๐ŸŸข Minor Fix a possible underflow on be2hex for large chunk size [bug, sample, minor]
    • Tags: sample minor bug doc stats medium protobuf ssl-gencert http-conv mux-h1
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog HAProxy Enterprise 2.8r1 (1.0.0-341.1493) (2026-07-22) marketing@haproxy.com (HAProxy Technologies) Wed, 22 Jul 2026 00:00:00 +0000 sample minor h3 bug doc stats stream fd hlua medium protobuf ssl-gencert http-conv mux-h1 mux_quic
  • ๐ŸŸก Medium Adjust sample size capacity after pointer shift for ltrim() [bug, sample, medium]
  • ๐ŸŸข Minor Don't delay send if message with c-l was fully sent [bug, mux-h1, minor]
  • ๐ŸŸก Medium Fix nested path bypass in field lookup [bug, protobuf, medium]
  • ๐ŸŸก Medium Adjust sample size capacity after pointer shift [bug, protobuf, medium]
  • ๐ŸŸก Medium Don't forget to free memory when done [bug, ssl-gencert, medium]
  • ๐Ÿ“ Document that stats admin is vulnerable to a csrf attack [doc, stats]
  • ๐ŸŸก Medium Ensure that origin is valid on posts [bug, stats, medium]
  • ๐ŸŸก Medium Subject "stats admin" accesses to "stats scope" filtering [bug, stats, medium]
  • ๐ŸŸข Minor Factor the proxy vs scope check into its own function [stats, minor]
  • ๐ŸŸข Minor Apply socket timeout on server side only [bug, hlua, minor]
  • ๐ŸŸข Minor Make url-dec failed if no space for trailing null byte [bug, http-conv, minor]
  • ๐ŸŸข Minor Fix custom timeouts initialization when setting backend [bug, stream, minor]
  • ๐ŸŸข Minor Fix a possible underflow on be2hex for large chunk size [bug, sample, minor]
  • ๐ŸŸก Medium Fix a deadlock when closing other tgroups fds [bug, fd, medium]
  • ๐ŸŸข Minor Prevent multiple stop_sending emission per stream [bug, mux_quic, minor]
  • ๐ŸŸก Medium Fix parser desync on error with multiple frames [bug, h3, medium]
    • Tags: sample minor h3 bug doc stats stream fd hlua medium protobuf ssl-gencert http-conv mux-h1 mux_quic
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog HAProxy Enterprise 3.0r1 (1.0.0-360.1239) (2026-07-22) marketing@haproxy.com (HAProxy Technologies) Wed, 22 Jul 2026 00:00:00 +0000 sample minor doc ssl-gencert http-conv h3 bug medium stream stats fd proxy cache mux-h1 mux_quic shctx applet hlua stconn protobuf reorg
  • ๐ŸŸข Minor Fix custom max-retries initialization when setting backend [bug, stream, minor]
  • ๐ŸŸก Medium Protect "show servers ..." against server deletion [bug, proxy, medium]
  • ๐ŸŸข Minor Fix bytes() when length it greater than remaining data [bug, sample, minor]
  • ๐ŸŸก Medium Adjust sample size capacity after pointer shift for ltrim() [bug, sample, medium]
  • ๐ŸŸก Medium Adjust sample size capacity after pointer shift for bytes() [bug, sample, medium]
  • ๐ŸŸข Minor Don't delay send if message with c-l was fully sent [bug, mux-h1, minor]
  • ๐ŸŸก Medium Fix nested path bypass in field lookup [bug, protobuf, medium]
  • ๐ŸŸก Medium Adjust sample size capacity after pointer shift [bug, protobuf, medium]
  • ๐ŸŸก Medium Don't forget to free memory when done [bug, ssl-gencert, medium]
  • ๐Ÿ“ Document that stats admin is vulnerable to a csrf attack [doc, stats]
  • ๐ŸŸก Medium Ensure that origin is valid on posts [bug, stats, medium]
  • ๐ŸŸก Medium Reattach the row when a secondary entry is incomplete [bug, cache, medium]
  • ๐ŸŸข Minor Clamp shctx_row_data_get() reads against the offset [shctx, minor]
  • ๐ŸŸข Minor Fix shctx_row_data_get() when offset exceeds a block [bug, shctx, minor]
  • ๐ŸŸก Medium Subject "stats admin" accesses to "stats scope" filtering [bug, stats, medium]
  • ๐ŸŸข Minor Factor the proxy vs scope check into its own function [stats, minor]
  • ๐ŸŸก Medium Reenable reads in applet context if requesting a connection [bug, applet, medium]
  • ๐Ÿ”„ Move sc_chk_rcv() from sc_strm.h to stconn.c [reorg, stconn]
  • ๐ŸŸข Minor Apply socket timeout on server side only [bug, hlua, minor]
  • ๐ŸŸข Minor Make url-dec failed if no space for trailing null byte [bug, http-conv, minor]
  • ๐ŸŸข Minor Fix custom timeouts initialization when setting backend [bug, stream, minor]
  • ๐ŸŸข Minor Fix a possible underflow on be2hex for large chunk size [bug, sample, minor]
  • ๐ŸŸก Medium Fix a deadlock when closing other tgroups fds [bug, fd, medium]
  • ๐ŸŸข Minor Prevent multiple stop_sending emission per stream [bug, mux_quic, minor]
  • ๐ŸŸก Medium Fix parser desync on error with multiple frames [bug, h3, medium]
    • Tags: sample minor doc ssl-gencert http-conv h3 bug medium stream stats fd proxy cache mux-h1 mux_quic shctx applet hlua stconn protobuf reorg
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog HAProxy Enterprise 3.2r1 (1.0.0-376.1016) (2026-07-22) marketing@haproxy.com (HAProxy Technologies) Wed, 22 Jul 2026 00:00:00 +0000 sample minor doc ssl-gencert http-conv ssl h3 bug medium regtests stats stream fd proxy cache mux-h1 mux_quic shctx applet hlua stconn protobuf reorg
  • ๐ŸŸก Medium Protect "show servers ..." against server deletion [bug, proxy, medium]
  • ๐ŸŸข Minor Fix bytes() when length it greater than remaining data [bug, sample, minor]
  • ๐ŸŸก Medium Adjust sample size capacity after pointer shift for ltrim() [bug, sample, medium]
  • ๐ŸŸก Medium Adjust sample size capacity after pointer shift for bytes() [bug, sample, medium]
  • ๐ŸŸข Minor Don't delay send if message with c-l was fully sent [bug, mux-h1, minor]
  • โšช Add regression test for nested vs flat paths [regtests, protobuf]
  • ๐ŸŸข Minor Fix proxy lookup for show ssl sni [bug, ssl, minor]
  • ๐ŸŸก Medium Fix nested path bypass in field lookup [bug, protobuf, medium]
  • ๐ŸŸก Medium Adjust sample size capacity after pointer shift [bug, protobuf, medium]
  • ๐ŸŸก Medium Don't forget to free memory when done [bug, ssl-gencert, medium]
  • ๐Ÿ“ Document that stats admin is vulnerable to a csrf attack [doc, stats]
  • ๐ŸŸก Medium Ensure that origin is valid on posts [bug, stats, medium]
  • ๐ŸŸก Medium Reattach the row when a secondary entry is incomplete [bug, cache, medium]
  • ๐ŸŸข Minor Clamp shctx_row_data_get() reads against the offset [shctx, minor]
  • ๐ŸŸข Minor Fix shctx_row_data_get() when offset exceeds a block [bug, shctx, minor]
  • ๐ŸŸก Medium Subject "stats admin" accesses to "stats scope" filtering [bug, stats, medium]
  • ๐ŸŸข Minor Factor the proxy vs scope check into its own function [stats, minor]
  • ๐ŸŸก Medium Reenable reads in applet context if requesting a connection [bug, applet, medium]
  • ๐Ÿ”„ Move sc_chk_rcv() from sc_strm.h to stconn.c [reorg, stconn]
  • ๐ŸŸข Minor Apply socket timeout on server side only [bug, hlua, minor]
  • ๐ŸŸข Minor Make url-dec failed if no space for trailing null byte [bug, http-conv, minor]
  • ๐ŸŸข Minor Fix custom max-retries initialization when setting backend [bug, stream, minor]
  • ๐ŸŸข Minor Fix custom timeouts initialization when setting backend [bug, stream, minor]
  • ๐ŸŸข Minor Fix a possible underflow on be2hex for large chunk size [bug, sample, minor]
  • ๐ŸŸก Medium Fix a deadlock when closing other tgroups fds [bug, fd, medium]
  • ๐ŸŸข Minor Prevent multiple stop_sending emission per stream [bug, mux_quic, minor]
  • ๐ŸŸก Medium Fix parser desync on error with multiple frames [bug, h3, medium]
    • Tags: sample minor doc ssl-gencert http-conv ssl h3 bug medium regtests stats stream fd proxy cache mux-h1 mux_quic shctx applet hlua stconn protobuf reorg
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog HAProxy Enterprise 3.3r1 (1.0.0-375.725) (2026-07-22) marketing@haproxy.com (HAProxy Technologies) Wed, 22 Jul 2026 00:00:00 +0000 sample minor doc ssl-gencert http-conv ssl h3 bug medium regtests stats stream fd proxy cache mux-h1 mux_quic shctx applet hlua stconn protobuf reorg
  • ๐ŸŸก Medium Protect "show servers ..." against server deletion [bug, proxy, medium]
  • ๐Ÿ“ Fix typo in "del ssl ech" command [doc]
  • ๐ŸŸข Minor Fix bytes() when length it greater than remaining data [bug, sample, minor]
  • ๐ŸŸก Medium Adjust sample size capacity after pointer shift for ltrim() [bug, sample, medium]
  • ๐ŸŸก Medium Adjust sample size capacity after pointer shift for bytes() [bug, sample, medium]
  • ๐ŸŸข Minor Don't delay send if message with c-l was fully sent [bug, mux-h1, minor]
  • โšช Add regression test for nested vs flat paths [regtests, protobuf]
  • ๐ŸŸข Minor Fix proxy lookup for show ssl sni [bug, ssl, minor]
  • ๐ŸŸก Medium Fix nested path bypass in field lookup [bug, protobuf, medium]
  • ๐ŸŸก Medium Adjust sample size capacity after pointer shift [bug, protobuf, medium]
  • ๐ŸŸก Medium Don't forget to free memory when done [bug, ssl-gencert, medium]
  • ๐Ÿ“ Document that stats admin is vulnerable to a csrf attack [doc, stats]
  • ๐ŸŸก Medium Ensure that origin is valid on posts [bug, stats, medium]
  • ๐ŸŸก Medium Reattach the row when a secondary entry is incomplete [bug, cache, medium]
  • ๐Ÿ“ Document the per-proxy byte count fields in the csv list [doc, stats]
  • ๐ŸŸข Minor Clamp shctx_row_data_get() reads against the offset [shctx, minor]
  • ๐ŸŸข Minor Fix shctx_row_data_get() when offset exceeds a block [bug, shctx, minor]
  • ๐ŸŸก Medium Subject "stats admin" accesses to "stats scope" filtering [bug, stats, medium]
  • ๐ŸŸข Minor Factor the proxy vs scope check into its own function [stats, minor]
  • ๐ŸŸก Medium Reenable reads in applet context if requesting a connection [bug, applet, medium]
  • ๐Ÿ”„ Move sc_chk_rcv() from sc_strm.h to stconn.c [reorg, stconn]
  • ๐ŸŸข Minor Apply socket timeout on server side only [bug, hlua, minor]
  • ๐ŸŸข Minor Make url-dec failed if no space for trailing null byte [bug, http-conv, minor]
  • ๐ŸŸข Minor Fix custom max-retries initialization when setting backend [bug, stream, minor]
  • ๐ŸŸข Minor Fix custom timeouts initialization when setting backend [bug, stream, minor]
  • ๐ŸŸข Minor Fix a possible underflow on be2hex for large chunk size [bug, sample, minor]
  • ๐ŸŸก Medium Fix a deadlock when closing other tgroups fds [bug, fd, medium]
  • ๐ŸŸก Medium Do not free qcs if stop_sending to sent [bug, mux_quic, medium]
  • ๐ŸŸข Minor Prevent multiple stop_sending emission per stream [bug, mux_quic, minor]
  • ๐ŸŸก Medium Fix parser desync on error with multiple frames [bug, h3, medium]
    • Tags: sample minor doc ssl-gencert http-conv ssl h3 bug medium regtests stats stream fd proxy cache mux-h1 mux_quic shctx applet hlua stconn protobuf reorg
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog HAProxy Enterprise 3.2r1 (1.0.0-376.989) (2026-07-20) marketing@haproxy.com (HAProxy Technologies) Mon, 20 Jul 2026 00:00:00 +0000 ssl medium
  • ๐ŸŸก Medium Add fips signature algorithm check for aws-lc [ssl, medium]
  • ๐ŸŸก Medium Set fips-approved sigalgs defaults for aws-lc fips builds [ssl, medium]
  • ๐ŸŸก Medium Add fips elliptic curve check for aws-lc [ssl, medium]
  • ๐ŸŸก Medium Set fips-approved curve defaults for aws-lc fips builds [ssl, medium]
  • ๐ŸŸก Medium Add fips tls 1.3 ciphersuite check for aws-lc [ssl, medium]
  • ๐ŸŸก Medium Set fips-approved cipher defaults for aws-lc fips builds [ssl, medium]
  • ๐ŸŸก Medium Add fips tls 1.2 cipher check for aws-lc [ssl, medium]
  • ๐ŸŸก Medium Introduce src/fips.c with tls version check [ssl, medium]
    • Tags: ssl medium
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog HAProxy Enterprise 2.6r1 (1.0.0-308.1860) (2026-07-02) marketing@haproxy.com (HAProxy Technologies) Thu, 02 Jul 2026 00:00:00 +0000 sample minor bug htx major http-htx tools
  • ๐ŸŸข Minor Don't by-pass htx api when merging cookie values [bug, http-htx, minor]
  • ๐Ÿ”ด Major Don't swap buffers for empty htx message with an error [bug, htx, major]
  • ๐ŸŸข Minor Fix invalid character detection in strl2ic() [bug, tools, minor]
  • ๐ŸŸข Minor Set smp_f_const on srv_name fetch [bug, sample, minor]
    • Tags: sample minor bug htx major http-htx tools
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog HAProxy Enterprise 2.8r1 (1.0.0-341.1477) (2026-07-02) marketing@haproxy.com (HAProxy Technologies) Thu, 02 Jul 2026 00:00:00 +0000 sample minor bug htx medium major http-htx tools mux_quic
  • ๐ŸŸข Minor Don't by-pass htx api when merging cookie values [bug, http-htx, minor]
  • ๐Ÿ”ด Major Don't swap buffers for empty htx message with an error [bug, htx, major]
  • ๐ŸŸข Minor Fix invalid character detection in strl2ic() [bug, tools, minor]
  • ๐ŸŸข Minor Set smp_f_const on srv_name fetch [bug, sample, minor]
  • ๐ŸŸก Medium Fix memory leak of rx app_buf on stream free [bug, mux_quic, medium]
    • Tags: sample minor bug htx medium major http-htx tools mux_quic
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog HAProxy Enterprise 3.0r1 (1.0.0-360.1214) (2026-07-02) marketing@haproxy.com (HAProxy Technologies) Thu, 02 Jul 2026 00:00:00 +0000 sample minor bug htx medium major servers http-htx tools mux_quic
  • ๐ŸŸข Minor Don't by-pass htx api when merging cookie values [bug, http-htx, minor]
  • ๐Ÿ”ด Major Don't swap buffers for empty htx message with an error [bug, htx, major]
  • ๐ŸŸข Minor Fix invalid character detection in strl2ic() [bug, tools, minor]
  • ๐ŸŸก Medium Use a refcount for port_range and free it properly [bug, servers, medium]
  • ๐ŸŸข Minor Set smp_f_const on srv_name fetch [bug, sample, minor]
  • ๐ŸŸก Medium Fix memory leak of rx app_buf on stream free [bug, mux_quic, medium]
    • Tags: sample minor bug htx medium major servers http-htx tools mux_quic
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog HAProxy Enterprise 3.2r1 (1.0.0-376.981) (2026-07-02) marketing@haproxy.com (HAProxy Technologies) Thu, 02 Jul 2026 00:00:00 +0000 sample minor bug log htx medium major servers http-htx tools mux_quic
  • ๐ŸŸข Minor Don't by-pass htx api when merging cookie values [bug, http-htx, minor]
  • ๐Ÿ”ด Major Don't swap buffers for empty htx message with an error [bug, htx, major]
  • ๐ŸŸข Minor Fix invalid character detection in strl2ic() [bug, tools, minor]
  • ๐ŸŸก Medium Use a refcount for port_range and free it properly [bug, servers, medium]
  • ๐ŸŸข Minor Set smp_f_const on srv_name fetch [bug, sample, minor]
  • ๐ŸŸก Medium Fix memory leak of rx app_buf on stream free [bug, mux_quic, medium]
  • ๐ŸŸข Minor Add app_log_raw() and send_log_raw() for binary-safe logging [log, minor]
    • Tags: sample minor bug log htx medium major servers http-htx tools mux_quic
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog HAProxy Enterprise 3.3r1 (1.0.0-375.695) (2026-07-02) marketing@haproxy.com (HAProxy Technologies) Thu, 02 Jul 2026 00:00:00 +0000 sample minor bug hq-interop log htx server medium major servers http-htx tools mux_quic
  • ๐ŸŸข Minor Don't by-pass htx api when merging cookie values [bug, http-htx, minor]
  • ๐Ÿ”ด Major Don't swap buffers for empty htx message with an error [bug, htx, major]
  • ๐ŸŸข Minor Fix invalid character detection in strl2ic() [bug, tools, minor]
  • ๐ŸŸก Medium Use a refcount for port_range and free it properly [bug, servers, medium]
  • ๐ŸŸข Minor Set smp_f_const on srv_name fetch [bug, sample, minor]
  • ๐ŸŸก Medium Initialise agent.health in srv_settings_init() [bug, server, medium]
  • ๐ŸŸข Minor Support transcoding of absolute uri [bug, hq-interop, minor]
  • ๐ŸŸข Minor Fix transcoding of wrapping response buffer [bug, hq-interop, minor]
  • ๐ŸŸก Medium Fix memory leak of rx app_buf on stream free [bug, mux_quic, medium]
  • ๐ŸŸข Minor Add app_log_raw() and send_log_raw() for binary-safe logging [log, minor]
    • Tags: sample minor bug hq-interop log htx server medium major servers http-htx tools mux_quic
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog HAProxy Enterprise 2.6r1 (1.0.0-308.1856) (2026-06-26) marketing@haproxy.com (HAProxy Technologies) Fri, 26 Jun 2026 00:00:00 +0000 payload minor sample mux_h1 ssl-gencert ssl bug mux-h2 addons/51d server resolvers medium dict ssl-hello log-forward qpack cache check mux-h1 http-fetch hlua auth http-ana mux-quic mux-fcgi
  • ๐ŸŸก Medium Drain the given amount of data in qcs_http_reset_buf() [bug, mux-quic, medium]
  • ๐ŸŸก Medium Truly drain outgoing htx data when the stream is closed [bug, mux-h2, medium]
  • ๐ŸŸก Medium Truly drain outgoing htx data when the stream is closed [bug, mux-fcgi, medium]
  • ๐ŸŸข Minor Fix add server with consistent hash balancing [bug, server, minor]
  • ๐ŸŸก Medium Don't free the early data buffer too early [bug, ssl, medium]
  • ๐ŸŸข Minor Properly resolve file path for 'h1-case-adjust-file' [bug, mux-h1, minor]
  • ๐ŸŸข Minor Handle a possible strdup() failure [bug, mux_h1, minor]
  • ๐ŸŸก Medium Don't ignore l7 retry errors [bug, http-ana, medium]
  • ๐ŸŸก Medium Skip tcpcheck post-config for external checks [bug, check, medium]
  • ๐ŸŸก Medium Dup connection/upgrade value to parse it when making headers [bug, mux-h1, medium]
  • ๐ŸŸข Minor Fix copy of value when parsing maxage [bug, cache, minor]
  • ๐ŸŸข Minor Fix huff_dec() error handling in qpack_decode_fs() [bug, qpack, minor]
  • ๐ŸŸข Minor Fix sign bit mask in qpack_decode_fs_pfx() [bug, qpack, minor]
  • ๐ŸŸข Minor Fix potential null-pointer dereference in qpack_dht_insert() [bug, qpack, minor]
  • ๐ŸŸข Minor Fix index calculation in debug functions [bug, qpack, minor]
  • ๐ŸŸข Minor Validate sni characters to prevent san certificate injection [bug, ssl-gencert, minor]
  • ๐ŸŸข Minor Use relative offset to compute contig data in demux buf [bug, mux-fcgi, minor]
  • ๐ŸŸก Medium Reject stream id 0 for application records [bug, mux-fcgi, medium]
  • ๐ŸŸข Minor Prevent lua from passing cr/lf/nul in http headers [bug, hlua, minor]
  • ๐ŸŸก Medium Fix unconfigured password null deref [bug, auth, medium]
  • ๐ŸŸข Minor Nul-terminate headers before passing them to trie api [bug, addons/51d, minor]
  • ๐ŸŸข Minor Make use of the null-terminated servername [bug, ssl-hello, minor]
  • ๐ŸŸข Minor Fix the handshake length bounds check smp_client_hello_parse() [bug, payload, minor]
  • ๐ŸŸข Minor Check against the whole token in get_http_auth() [bug, http-fetch, minor]
  • ๐ŸŸก Medium Always verify the primary hash in get_secondary_entry() [bug, cache, medium]
  • ๐ŸŸข Minor Limit the be2hex converter's chunk size [bug, sample, minor]
  • ๐ŸŸข Minor Fix refcount race on insert collision [bug, dict, minor]
  • ๐ŸŸข Minor Validate headers frame length before reading stream dep [bug, mux-h2, minor]
  • ๐ŸŸข Minor Fix risk of appending garbage past the domain name [bug, resolvers, minor]
  • ๐ŸŸข Minor Fix room for trailing zero in resolv_dn_label_to_str() [bug, resolvers, minor]
  • ๐ŸŸก Medium Make sure the month is unsigned [bug, log-forward, medium]
  • ๐ŸŸก Medium Fix integer underflow when receiving line from lua cosocket [bug, hlua, medium]
  • ๐ŸŸก Medium Hold lock while decrementing refcount in dict_entry_unref [bug, dict, medium]
  • ๐ŸŸก Medium Fix test on dn label size in resolv_dn_label_to_str() [bug, resolvers, medium]
    • Tags: payload minor sample mux_h1 ssl-gencert ssl bug mux-h2 addons/51d server resolvers medium dict ssl-hello log-forward qpack cache check mux-h1 http-fetch hlua auth http-ana mux-quic mux-fcgi
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog HAProxy Enterprise 2.8r1 (1.0.0-341.1472) (2026-06-26) marketing@haproxy.com (HAProxy Technologies) Fri, 26 Jun 2026 00:00:00 +0000 quic minor bug mux-h2 doc hq-interop lua medium mux-quic mux-fcgi mux_quic
  • ๐ŸŸก Medium Handle econnrefused on rx side [bug, quic, medium]
  • ๐ŸŸก Medium Reset cwnd in slow_start on persistent congestion (cubic) [bug, quic, medium]
  • ๐ŸŸข Minor Refresh timeout only if i/o performed [bug, mux_quic, minor]
  • ๐ŸŸข Minor Adapt return value of qcc_decode_qcs() [mux-quic, minor]
  • ๐ŸŸก Medium Drain the given amount of data in qcs_http_reset_buf() [bug, mux-quic, medium]
  • ๐ŸŸก Medium Truly drain outgoing htx data when the stream is closed [bug, mux-h2, medium]
  • ๐ŸŸก Medium Truly drain outgoing htx data when the stream is closed [bug, mux-fcgi, medium]
  • ๐Ÿ“ Remove incorrect init tags [doc, lua]
  • ๐ŸŸข Minor Prevent reset if missing content-length [bug, hq-interop, minor]
  • ๐ŸŸข Minor Reject too big content [bug, hq-interop, minor]
    • Tags: quic minor bug mux-h2 doc hq-interop lua medium mux-quic mux-fcgi mux_quic
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog HAProxy Enterprise 3.0r1 (1.0.0-360.1208) (2026-06-26) marketing@haproxy.com (HAProxy Technologies) Fri, 26 Jun 2026 00:00:00 +0000 minor bug mux-h2 doc hq-interop lua medium mux-quic mux-fcgi mux_quic
  • ๐ŸŸข Minor Refresh timeout only if i/o performed [bug, mux_quic, minor]
  • ๐ŸŸข Minor Adapt return value of qcc_decode_qcs() [mux-quic, minor]
  • ๐ŸŸก Medium Drain the given amount of data in qcs_http_reset_buf() [bug, mux-quic, medium]
  • ๐ŸŸก Medium Truly drain outgoing htx data when the stream is closed [bug, mux-h2, medium]
  • ๐ŸŸก Medium Truly drain outgoing htx data when the stream is closed [bug, mux-fcgi, medium]
  • ๐Ÿ“ Remove incorrect init tags [doc, lua]
  • ๐ŸŸข Minor Prevent reset if missing content-length [bug, hq-interop, minor]
  • ๐ŸŸข Minor Reject too big content [bug, hq-interop, minor]
    • Tags: minor bug mux-h2 doc hq-interop lua medium mux-quic mux-fcgi mux_quic
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog HAProxy Enterprise 3.2r1 (1.0.0-376.974) (2026-06-26) marketing@haproxy.com (HAProxy Technologies) Fri, 26 Jun 2026 00:00:00 +0000 minor bug mux-h2 doc hq-interop lua mux-spop medium mux-quic mux-fcgi mux_quic
  • ๐ŸŸข Minor Refresh timeout only if i/o performed [bug, mux_quic, minor]
  • ๐ŸŸก Medium Drain the given amount of data in qcs_http_reset_buf() [bug, mux-quic, medium]
  • ๐ŸŸก Medium Truly drain outgoing data when the stream is closed [bug, mux-spop, medium]
  • ๐ŸŸก Medium Truly drain outgoing htx data when the stream is closed [bug, mux-h2, medium]
  • ๐ŸŸก Medium Truly drain outgoing htx data when the stream is closed [bug, mux-fcgi, medium]
  • ๐Ÿ“ Remove incorrect init tags [doc, lua]
  • ๐ŸŸข Minor Prevent reset if missing content-length [bug, hq-interop, minor]
  • ๐ŸŸข Minor Reject too big content [bug, hq-interop, minor]
    • Tags: minor bug mux-h2 doc hq-interop lua mux-spop medium mux-quic mux-fcgi mux_quic
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog HAProxy Enterprise 3.3r1 (1.0.0-375.685) (2026-06-26) marketing@haproxy.com (HAProxy Technologies) Fri, 26 Jun 2026 00:00:00 +0000 minor quic bug mux-h2 h3 doc hq-interop lua hlua mux-spop regtests medium mux-quic mux-fcgi mux_quic
  • ๐ŸŸข Minor Fix be conn removal on app shutdown [bug, mux_quic, minor]
  • ๐ŸŸก Medium Drain the given amount of data in qcs_http_reset_buf() [bug, mux-quic, medium]
  • ๐ŸŸก Medium Truly drain outgoing data when the stream is closed [bug, mux-spop, medium]
  • ๐ŸŸก Medium Truly drain outgoing htx data when the stream is closed [bug, mux-h2, medium]
  • ๐ŸŸก Medium Truly drain outgoing htx data when the stream is closed [bug, mux-fcgi, medium]
  • โšช Test h3 request without content-length [regtests, quic]
  • ๐ŸŸก Medium Increment unknown request payload length [bug, h3, medium]
  • ๐Ÿ“ Remove incorrect init tags [doc, lua]
  • ๐ŸŸข Minor Support response buffer wrapping [bug, hq-interop, minor]
  • ๐ŸŸข Minor Support full demux buf on large response [bug, hq-interop, minor]
  • ๐ŸŸก Medium Properly report eos when http applet exits [bug, hlua, medium]
  • ๐ŸŸข Minor Prevent reset if missing content-length [bug, hq-interop, minor]
  • ๐ŸŸข Minor Reject too big content [bug, hq-interop, minor]
    • Tags: minor quic bug mux-h2 h3 doc hq-interop lua hlua mux-spop regtests medium mux-quic mux-fcgi mux_quic
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog HAProxy Enterprise 2.6r1 (1.0.0-308.1822) (2026-06-19) marketing@haproxy.com (HAProxy Technologies) Fri, 19 Jun 2026 00:00:00 +0000 minor bug hpack-tbl server medium mux-fcgi
  • ๐ŸŸก Medium Fix uint16_t overflow in drl += drp [bug, mux-fcgi, medium]
  • ๐ŸŸข Minor Add missing null check after hpack_dht_defrag() [bug, hpack-tbl, minor]
  • ๐ŸŸก Medium Duplicate healthcheck's alpn inherited from default server [bug, server, medium]
    • Tags: minor bug hpack-tbl server medium mux-fcgi
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog HAProxy Enterprise 2.8r1 (1.0.0-341.1462) (2026-06-18) marketing@haproxy.com (HAProxy Technologies) Thu, 18 Jun 2026 00:00:00 +0000 payload minor sample mux_h1 hpack-tbl ocsp ssl-gencert ssl quic h3 bug mux-h2 base64 addons/51d log server http-ext resolvers medium h1-htx http cleanup dict tcpcheck ssl-hello log-forward qpack h1 cache check mux-h1 http-fetch tcpchecks init tasks hlua acl auth http-ana mux-fcgi
  • ๐ŸŸข Minor Fix add server with consistent hash balancing [bug, server, minor]
  • ๐ŸŸก Medium Fix uint16_t overflow in drl += drp [bug, mux-fcgi, medium]
  • ๐ŸŸข Minor Add missing null check after hpack_dht_defrag() [bug, hpack-tbl, minor]
  • ๐ŸŸก Medium Don't free the early data buffer too early [bug, ssl, medium]
  • ๐ŸŸข Minor Properly resolve file path for 'h1-case-adjust-file' [bug, mux-h1, minor]
  • ๐ŸŸข Minor Handle a possible strdup() failure [bug, mux_h1, minor]
  • ๐ŸŸก Medium Don't ignore l7 retry errors [bug, http-ana, medium]
  • ๐ŸŸข Minor Report "acl" not "map" in acl id lookup failures [bug, acl, minor]
  • ๐ŸŸข Minor Don't dump buffers state in check traces for external checks [check, minor]
  • ๐ŸŸก Medium Skip tcpcheck post-config for external checks [bug, check, medium]
  • ๐ŸŸข Minor Increase the right niced_task counter [bug, tasks, minor]
  • ๐ŸŸก Medium Dup connection/upgrade value to parse it when making headers [bug, mux-h1, medium]
  • ๐ŸŸข Minor Fix copy of value when parsing maxage [bug, cache, minor]
  • ๐ŸŸก Medium Wait a bit before calling the xprt prepare_srv [bug, resolvers, medium]
  • ๐ŸŸข Minor Fix ack range node pool_free call passing wrong pointer type [bug, quic, minor]
  • ๐ŸŸข Minor Count padding for connection flow control on error path [bug, mux-h2, minor]
  • ๐Ÿงน Move encoded macros to qpack-t.h to avoid duplication [cleanup, qpack]
  • ๐ŸŸข Minor Fix huff_dec() error handling in qpack_decode_fs() [bug, qpack, minor]
  • ๐Ÿงน Fix copy-paste typo in value huffman debug string for wln [cleanup, qpack]
  • ๐ŸŸข Minor Fix sign bit mask in qpack_decode_fs_pfx() [bug, qpack, minor]
  • ๐Ÿงน Fix copy-paste typo in value huffman debug string [cleanup, qpack]
  • ๐ŸŸข Minor Fix potential null-pointer dereference in qpack_dht_insert() [bug, qpack, minor]
  • ๐ŸŸข Minor Fix index calculation in debug functions [bug, qpack, minor]
  • ๐ŸŸข Minor Validate sni characters to prevent san certificate injection [bug, ssl-gencert, minor]
  • ๐ŸŸข Minor Check ldap response to not read more data than available [bug, tcpcheck, minor]
  • ๐ŸŸข Minor Use relative offset to compute contig data in demux buf [bug, mux-fcgi, minor]
  • ๐ŸŸก Medium Sanitize parsing to properly handle upgrade requests [bug, h1-htx, medium]
  • ๐ŸŸข Minor Add a h1m flag to specify a non-empty 'upgrade:' header was parsed [h1, minor]
  • ๐ŸŸข Minor Add function to remove all occurrences of a value in a header [http, minor]
  • ๐ŸŸก Medium Reject stream id 0 for application records [bug, mux-fcgi, medium]
  • ๐ŸŸข Minor Reject packet too short for hp decryption [bug, quic, minor]
  • ๐ŸŸข Minor Prevent lua from passing cr/lf/nul in http headers [bug, hlua, minor]
  • ๐ŸŸก Medium Fix unconfigured password null deref [bug, auth, medium]
  • ๐ŸŸข Minor Reject client cancel_push frame [bug, h3, minor]
  • ๐ŸŸก Medium Reject client push stream [bug, h3, medium]
  • ๐ŸŸข Minor Nul-terminate headers before passing them to trie api [bug, addons/51d, minor]
  • ๐ŸŸข Minor Switch to a better prng for query ids [bug, resolvers, minor]
  • ๐ŸŸข Minor Make use of the null-terminated servername [bug, ssl-hello, minor]
  • ๐ŸŸข Minor Fix the handshake length bounds check smp_client_hello_parse() [bug, payload, minor]
  • ๐ŸŸข Minor Return empty string for empty input in base64dec() [bug, base64, minor]
  • ๐ŸŸข Minor Always check remaining data when reading rfc7239 nodeport [bug, http-ext, minor]
  • ๐ŸŸข Minor Check against the whole token in get_http_auth() [bug, http-fetch, minor]
  • ๐ŸŸข Minor Relax size checks in authority record parsing [bug, resolvers, minor]
  • ๐ŸŸก Medium Always verify the primary hash in get_secondary_entry() [bug, cache, medium]
  • ๐ŸŸข Minor Limit the be2hex converter's chunk size [bug, sample, minor]
  • ๐ŸŸข Minor Use more than ha_random64() for the cluster secret [bug, init, minor]
  • ๐ŸŸข Minor Fix refcount race on insert collision [bug, dict, minor]
  • ๐ŸŸข Minor Look for the end of priority before the end of the buffer [bug, log, minor]
  • ๐ŸŸข Minor Validate headers frame length before reading stream dep [bug, mux-h2, minor]
  • ๐ŸŸข Minor Fix risk of appending garbage past the domain name [bug, resolvers, minor]
  • ๐ŸŸข Minor Fix room for trailing zero in resolv_dn_label_to_str() [bug, resolvers, minor]
  • ๐ŸŸก Medium Make sure the month is unsigned [bug, log-forward, medium]
  • ๐ŸŸก Medium Fix integer underflow when receiving line from lua cosocket [bug, hlua, medium]
  • ๐ŸŸข Minor Limit parsing of agent-check reply to the buffer [bug, tcpchecks, minor]
  • ๐ŸŸก Medium Hold lock while decrementing refcount in dict_entry_unref [bug, dict, medium]
  • ๐ŸŸข Minor Fix odcid lookup from derived value [bug, quic, minor]
  • ๐ŸŸก Medium Unlock lru cache if failing to generate certificate [bug, ssl-gencert, medium]
  • ๐ŸŸก Medium Fix test on dn label size in resolv_dn_label_to_str() [bug, resolvers, medium]
  • ๐ŸŸข Minor Manage date too far away in the future [bug, ocsp, minor]
    • Tags: payload minor sample mux_h1 hpack-tbl ocsp ssl-gencert ssl quic h3 bug mux-h2 base64 addons/51d log server http-ext resolvers medium h1-htx http cleanup dict tcpcheck ssl-hello log-forward qpack h1 cache check mux-h1 http-fetch tcpchecks init tasks hlua acl auth http-ana mux-fcgi
    ]]>         https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog HAProxy Enterprise 3.0r1 (1.0.0-360.1200) (2026-06-18) marketing@haproxy.com (HAProxy Technologies) Thu, 18 Jun 2026 00:00:00 +0000 payload minor sample mux_h1 hpack-tbl ocsp ssl-gencert ssl quic sessions bug mux-h2 h3 base64 addons/51d log server http-ext resolvers medium h1-htx http cleanup dict tcpcheck ssl-hello log-forward qpack h1 cache check mux-h1 http-fetch tcpchecks init tasks vars applet hlua acl auth http-ana mux-fcgi checks
  • ๐ŸŸข Minor Fix add server with consistent hash balancing [bug, server, minor]
  • ๐ŸŸก Medium Fix uint16_t overflow in drl += drp [bug, mux-fcgi, medium]
  • ๐ŸŸข Minor Add missing null check after hpack_dht_defrag() [bug, hpack-tbl, minor]
  • ๐ŸŸก Medium Don't free the early data buffer too early [bug, ssl, medium]
  • ๐ŸŸข Minor Properly resolve file path for 'h1-case-adjust-file' [bug, mux-h1, minor]
  • ๐ŸŸข Minor Handle a possible strdup() failure [bug, mux_h1, minor]
  • ๐ŸŸก Medium Don't ignore l7 retry errors [bug, http-ana, medium]
  • ๐ŸŸข Minor Fix initial length value in sent packets [bug, quic, minor]
  • ๐ŸŸก Medium Dequeue checks on purge [bug, checks, medium]
  • ๐ŸŸข Minor Report "acl" not "map" in acl id lookup failures [bug, acl, minor]
  • ๐Ÿงน Simplify the sess_priv_conns pool name [cleanup, sessions]
  • ๐ŸŸข Minor Don't dump buffers state in check traces for external checks [check, minor]
  • ๐ŸŸก Medium Skip tcpcheck post-config for external checks [bug, check, medium]
  • ๐ŸŸก Medium Properly eval set-var-fmt action for emtpy log-format string [bug, vars, medium]
  • ๐ŸŸข Minor Increase the right niced_task counter [bug, tasks, minor]
  • ๐ŸŸข Minor Commit changes into input buffer after sending htx data [bug, applet, minor]
  • ๐ŸŸก Medium Dup connection/upgrade value to parse it when making headers [bug, mux-h1, medium]
  • ๐ŸŸข Minor Fix copy of value when parsing maxage [bug, cache, minor]
  • ๐ŸŸก Medium Wait a bit before calling the xprt prepare_srv [bug, resolvers, medium]
  • ๐ŸŸข Minor Fix cache tree iteration [bug, cache, minor]
  • ๐ŸŸก Medium Reset cwnd in slow_start on persistent congestion (cubic) [bug, quic, medium]
  • ๐ŸŸข Minor Fix ack range node pool_free call passing wrong pointer type [bug, quic, minor]
  • ๐ŸŸข Minor Count padding for connection flow control on error path [bug, mux-h2, minor]
  • ๐ŸŸก Medium Handle econnrefused on rx side [bug, quic, medium]
  • ๐Ÿงน Move encoded macros to qpack-t.h to avoid duplication [cleanup, qpack]
  • ๐ŸŸข Minor Fix huff_dec() error handling in qpack_decode_fs() [bug, qpack, minor]
  • ๐Ÿงน Fix copy-paste typo in value huffman debug string for wln [cleanup, qpack]
  • ๐ŸŸข Minor Fix sign bit mask in qpack_decode_fs_pfx() [bug, qpack, minor]
  • ๐Ÿงน Fix copy-paste typo in value huffman debug string [cleanup, qpack]
  • ๐ŸŸข Minor Fix potential null-pointer dereference in qpack_dht_insert() [bug, qpack, minor]
  • ๐ŸŸข Minor Fix index calculation in debug functions [bug, qpack, minor]
  • ๐ŸŸข Minor Validate sni characters to prevent san certificate injection [bug, ssl-gencert, minor]
  • ๐ŸŸข Minor Check ldap response to not read more data than available [bug, tcpcheck, minor]
  • ๐ŸŸข Minor Use relative offset to compute contig data in demux buf [bug, mux-fcgi, minor]
  • ๐ŸŸก Medium Sanitize parsing to properly handle upgrade requests [bug, h1-htx, medium]
  • ๐ŸŸข Minor Add a h1m flag to specify a non-empty 'upgrade:' header was parsed [h1, minor]
  • ๐ŸŸข Minor Add function to remove all occurrences of a value in a header [http, minor]
  • ๐ŸŸก Medium Reject stream id 0 for application records [bug, mux-fcgi, medium]
  • ๐ŸŸข Minor Reject packet too short for hp decryption [bug, quic, minor]
  • ๐ŸŸข Minor Prevent lua from passing cr/lf/nul in http headers [bug, hlua, minor]
  • ๐ŸŸก Medium Fix unconfigured password null deref [bug, auth, medium]
  • ๐ŸŸข Minor Reject client cancel_push frame [bug, h3, minor]
  • ๐ŸŸก Medium Reject client push stream [bug, h3, medium]
  • ๐ŸŸข Minor Nul-terminate headers before passing them to trie api [bug, addons/51d, minor]
  • ๐ŸŸข Minor Switch to a better prng for query ids [bug, resolvers, minor]
  • ๐ŸŸข Minor Make use of the null-terminated servername [bug, ssl-hello, minor]
  • ๐ŸŸข Minor Fix the handshake length bounds check smp_client_hello_parse() [bug, payload, minor]
  • ๐ŸŸข Minor Return empty string for empty input in base64dec() [bug, base64, minor]
  • ๐ŸŸข Minor Always check remaining data when reading rfc7239 nodeport [bug, http-ext, minor]
  • ๐ŸŸข Minor Check against the whole token in get_http_auth() [bug, http-fetch, minor]
  • ๐ŸŸข Minor Relax size checks in authority record parsing [bug, resolvers, minor]
  • ๐ŸŸก Medium Always verify the primary hash in get_secondary_entry() [bug, cache, medium]
  • ๐ŸŸข Minor Limit the be2hex converter's chunk size [bug, sample, minor]
  • ๐ŸŸข Minor Use more than ha_random64() for the cluster secret [bug, init, minor]
  • ๐ŸŸข Minor Fix refcount race on insert collision [bug, dict, minor]
  • ๐ŸŸข Minor Look for the end of priority before the end of the buffer [bug, log, minor]
  • ๐ŸŸข Minor Validate headers frame length before reading stream dep [bug, mux-h2, minor]
  • ๐ŸŸข Minor Fix risk of appending garbage past the domain name [bug, resolvers, minor]
  • ๐ŸŸข Minor Fix room for trailing zero in resolv_dn_label_to_str() [bug, resolvers, minor]
  • ๐ŸŸก Medium Fix a refcount leak for missed secondary entries [bug, cache, medium]
  • ๐ŸŸก Medium Make sure the month is unsigned [bug, log-forward, medium]
  • ๐ŸŸก Medium Fix integer underflow when receiving line from lua cosocket [bug, hlua, medium]
  • ๐ŸŸข Minor Limit parsing of agent-check reply to the buffer [bug, tcpchecks, minor]
  • ๐ŸŸก Medium Hold lock while decrementing refcount in dict_entry_unref [bug, dict, medium]
  • ๐ŸŸข Minor Fix odcid lookup from derived value [bug, quic, minor]
  • ๐ŸŸก Medium Unlock lru cache if failing to generate certificate [bug, ssl-gencert, medium]
  • ๐ŸŸก Medium Fix test on dn label size in resolv_dn_label_to_str() [bug, resolvers, medium]
  • ๐ŸŸก Medium Properly handle receives of size 0 [bug, applet, medium]
  • ๐ŸŸข Minor Manage date too far away in the future [bug, ocsp, minor]
    • Tags: payload minor sample mux_h1 hpack-tbl ocsp ssl-gencert ssl quic sessions bug mux-h2 h3 base64 addons/51d log server http-ext resolvers medium h1-htx http cleanup dict tcpcheck ssl-hello log-forward qpack h1 cache check mux-h1 http-fetch tcpchecks init tasks vars applet hlua acl auth http-ana mux-fcgi checks
    ]]>