Issues

Issues

• Load TLS private keys from TPM 2.0 / HSM via OSSL_STORE URI in crt-store "key" (frontend and backend)

  haproxy/haproxy#3571 · opened on Nov 12, 2026

• core dump on reg-tests/cli/show_commands.vtc

  haproxy/haproxy#3570 · opened on Nov 11, 2026
  4

• src/tools.c: ha_freearray() does not free the array, leaking it when domains/ips is repeated in ckch_conf_parse()

  haproxy/haproxy#3569 · opened on Nov 11, 2026
  1

• unsupported crypt() hash not detected on Debian/Ubuntu

  haproxy/haproxy#3568 · opened on Nov 10, 2026
  6

• regression (bisected): config check no longer fails without listeners

  haproxy/haproxy#3567 · opened on Nov 10, 2026

• QUIC: RSA certificate chosen over ECDSA when ssl-max-ver is not set

  haproxy/haproxy#3566 · opened on Nov 10, 2026
  1

• Systemd Reload Fails in Cases of Inherited FD

  haproxy/haproxy#3565 · opened on Nov 6, 2026
  9

• Bind option to keep a listener open during graceful shutdown

  haproxy/haproxy#3564 · opened on Nov 6, 2026
  3

• src/debug.c: "debug dev sched" leaks its context when count is 0

  haproxy/haproxy#3563 · opened on Nov 5, 2026

• src/server.c: a named default-server leaks its name when completed over several lines

  haproxy/haproxy#3562 · opened on Nov 5, 2026
  3

• src/ssl_ckch.c: ckch_conf_parse() frees an advanced pointer when my_strndup() fails (free(): invalid pointer)

  haproxy/haproxy#3561 · opened on Nov 5, 2026
  4

• CID 1690184: src/http.c: resource leak is suspected by coverity

  haproxy/haproxy#3560 · opened on Nov 5, 2026
  1

• process_stream spin/crash with SPOE http-response + H2 backend early response

  haproxy/haproxy#3559 · opened on Nov 3, 2026
  4

• FastCGI timeout server strikes when connection is blocked on slow reader

  haproxy/haproxy#3558 · opened on Nov 3, 2026
  7

• H2 backend: one slow client stalls every other stream on a shared server connection

  haproxy/haproxy#3557 · opened on Nov 3, 2026
  5

• rhttp: on soft-stop, reverse connections stay attached to the old process, so new requests get 503 SC-- until its in-flight requests finish

  haproxy/haproxy#3556 · opened on Nov 2, 2026
  2

• HAProxy 3.2.22-26 getting NOSRV w/ up server and balance leastconn

  haproxy/haproxy#3555 · opened on Nov 2, 2026
  5

• 3.4 regression: stick table declared only in a backend is no longer purged when stopping

  haproxy/haproxy#3554 · opened on Nov 2, 2026
  1

• Stopping process spins in malloc_trim() for each batch while purging a large stick table

  haproxy/haproxy#3553 · opened on Nov 2, 2026

• QUIC: server floods Initial PINGs and never resends its lost Handshake flight

  haproxy/haproxy#3552 · opened on Nov 1, 2026
  11

• mysql-check reads past the received data when the packet length field is smaller than the fixed header

  haproxy/haproxy#3551 · opened on Oct 29, 2026
  3

• using TLS-ALPN-01 to get new TLS certificates

  haproxy/haproxy#3550 · opened on Oct 27, 2026

• BUG/MINOR: hlua: unlock Patref before add_bulk type error leading to watchdog worker kill

  haproxy/haproxy#3548 · opened on Oct 25, 2026
  5

• src/server.c: parse_srv_expr() leaks the sample expression when the fetch is not usable on a server (runtime 'add server ... sni')

  haproxy/haproxy#3547 · opened on Oct 24, 2026
  3

• src/debug.c: 'debug dev fd' crashes on strlen(NULL) when sa2str() does not know the address family

  haproxy/haproxy#3546 · opened on Oct 24, 2026
  2