HAProxy known bugs for maintenance branch 3.3 :  0 

This is maintenance branch 3.3 whose latest version is 3.3.7. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches. In short, if you are running any 3.3 version other than 3.3.7, you're running with known bugs.

Quick links

Versions available in this branch

This branch contains the following releases :

DateVersionComment
2026-04-233.3.7 ⇐ last
2026-03-193.3.6 
2026-03-093.3.5 
2026-02-193.3.4 
2026-02-123.3.3 
2026-01-293.3.2 
2025-12-193.3.1 
2025-11-263.3.0 

Fixes for known bugs pending in this branch since the last release (3.3.7)

These fixes have already been queued for the next 3.3 release but no version was released with them yet. Note that fixes are backported several at a time from the development branch to maintenance branches, and the absence of a fix here doesn't mean none will be issued soon.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in the latest version of this branch by category :

TotalCRITICALMAJORMEDIUMMINOR
0 0 0 0 0

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)

Known bugs fixed in the development branch after the last commit in this branch

It is important to understand that not all of these commits are necessarily relevant to this version, but clicking on them will show the bug description. All fixes are made first in the development branch and then backported to the maintenance branches. This ensures no fix is lost when upgrading. If a fix was marked for backporting to this branch and is not there yet, it's likely that it is still missing. Do not hesitate to ask on the haproxy mailing list if you feel like a fix has been skipped.

DateSubject
2026-04-29BUG/MINOR: http-htx: Don't normalize emtpy path for OPTIONS requests
2026-04-29BUG/MEDIUM: mux-fcgi: Properly handle full buffer for FCGI_PARAM record
2026-04-29BUG/MINOR: net_helper: fix incomplete decoding in sample_conv_eth_vlan
2026-04-29BUG/MINOR: net_helper: fix out-of-bounds read in sample_conv_tcp_options_list
2026-04-29BUG/MINOR: net_helper: fix out-of-bounds read in tcp_fullhdr_find_opt
2026-04-29BUG/MINOR: payload: prevent integer overflow in distcc token parsing
2026-04-29BUG/MINOR: payload: validate minimum keyshare_len in smp_fetch_ssl_keyshare_groups
2026-04-29BUG/MINOR: fix various typos and spelling mistakes in user-visible messages
2026-04-29BUG/MEDIUM: tasks: Do not loop in task_schedule() if a task is running
2026-04-29BUG/MAJOR: mux-h1: Deal with true 64-bits integer to emit chunks size
2026-04-29BUG/MEDIUM: h1: Enforce the authority validation during H1 request parsing
2026-04-29BUG/MAJOR: http: forbid comma character in authority value
2026-04-29BUG/MEDIUM: http-htx: Loop on full host value during scheme based normalization
2026-04-29BUG/MEDIUM: http-htx: Don't use data from HTX message to update authority
2026-04-29BUG/MAJOR: http-htx: Store new host in a chunk for scheme-based normalization
2026-04-28BUG/MINOR: mux_quic: free frames emitted with QMux
2026-04-27BUG/MINOR: http_ana: use scf to report term_evts in http_wait_for_request()
2026-04-27BUG/MEDIUM: mux_h1: fix stack buffer overflow in h1_append_chunk_size()
2026-04-27BUG/MINOR: peers: fix wrong flag reported twice for dump_flags
2026-04-27BUG/MINOR: peers: fix logical "and" when checking for local in PEER_APP_ST_STARTING
2026-04-27BUG/MINOR: sample: fix NULL strm dereference in sample_conv_when
2026-04-27BUG/MINOR: sample: fix memory leak in smp_resolve_args error paths
2026-04-27BUG/MINOR: sample: fix memory leak in check_when_cond() when ACL is not found
2026-04-27BUG/MINOR: tools: free previously allocated strings on strdup failure in backup_env()
2026-04-27BUG/MINOR: tools: fix memory leak in indent_msg() on out of memory
2026-04-27BUG/MINOR: tools: my_memspn/my_memcspn wrong cast causing incorrect byte reading
2026-04-27BUG/MINOR: tree-wide: fix a few user-visible spelling mistakes from dev7
2026-04-27BUG/MINOR: ssl: fix double-free on failed realloc in ssl_sock.c
2026-04-25BUG/MINOR: ssl: fix memory leak on realloc failure in acme.ips
2026-04-25BUG/MINOR: ssl: fix memory leaks on realloc failure in ssl_sock.c
2026-04-25BUG/MINOR: ssl: fix memory leaks on realloc failure in ssl_ckch.c
2026-04-24BUG/MEDIUM: stats: fix crash on 'dump stats-file'
2026-04-24BUG/MINOR: tcpcheck: Allow connection reuse without prior traffic
2026-04-24BUG/MINOR: mux_quic: do not release conn on qcc_recv() for QMux
2026-04-24BUG/MINOR: xprt_qstrm: prevent crash if conn release on MUX wake
2026-04-24BUG/MINOR: xprt_qstrm: ensure all local TPs are allocated
2026-04-24BUG/MINOR: mux_quic: prevent crash on qc_frm_free() with QMux
2026-04-23BUG/MEDIUM: mux-h1: Force close mode for bodyless message announcing a C-L
2026-04-23BUG/MAJOR: mux-h2: detect incomplete transfers on HEADERS frames as well

Back to the list of branches and versions
Back to the HAProxy page