<?xml version="1.0" ?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<link>https://www.haproxy.com/documentation/haproxy-enterprise/</link>
		<atom:link href="https://www.haproxy.com/documentation/haproxy-enterprise/" rel="self" type="application/rss+xml"/>
		<description>HAProxy Enterprise changelog</description>
		<language>en-us</language>
		<lastBuildDate>Tue, 21 Apr 2026 03:33:32 +0000</lastBuildDate>
		<title>HAProxy Enterprise</title>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</guid>
			<title>HAProxy Enterprise 2.6r1 (2026-04-17)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Fri, 17 Apr 2026 00:00:00 +0000</pubDate>
			<category>bug</category>
			<category>config</category>
			<category>minor</category>
			<category>sock</category>
			<category>qpack</category>
			<category>doc</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Properly test warnif_misplaced_* return values</span> [<em>bug</em>, <em>config</em>, <em>minor</em>]</li><li>📝 <span>Reorder params for 'tcp-check expect' directive</span> [<em>doc</em>, <em>config</em>]</li><li>📝 <span>Add missing 'status-code' param for 'http-check expect' directive</span> [<em>doc</em>, <em>config</em>]</li><li><strong>🟢 Minor</strong> <span>Fix 62-bit overflow and 1-byte oob reads in decoding</span> [<em>bug</em>, <em>qpack</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Adjust accept() error messages for enfile and enomem</span> [<em>bug</em>, <em>sock</em>, <em>minor</em>]</li></ul><div>Tags: bug config minor sock qpack doc </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</guid>
			<title>HAProxy Enterprise 2.8r1 (2026-04-17)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Fri, 17 Apr 2026 00:00:00 +0000</pubDate>
			<category>bug</category>
			<category>config</category>
			<category>minor</category>
			<category>qpack</category>
			<category>sock</category>
			<category>ncbmbuf</category>
			<category>doc</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Properly test warnif_misplaced_* return values</span> [<em>bug</em>, <em>config</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Improve itbmap_next() code</span> [<em>ncbmbuf</em>, <em>minor</em>]</li><li>📝 <span>Reorder params for 'tcp-check expect' directive</span> [<em>doc</em>, <em>config</em>]</li><li>📝 <span>Add missing 'status-code' param for 'http-check expect' directive</span> [<em>doc</em>, <em>config</em>]</li><li><strong>🟢 Minor</strong> <span>Fix 62-bit overflow and 1-byte oob reads in decoding</span> [<em>bug</em>, <em>qpack</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Adjust accept() error messages for enfile and enomem</span> [<em>bug</em>, <em>sock</em>, <em>minor</em>]</li></ul><div>Tags: bug config minor qpack sock ncbmbuf doc </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</guid>
			<title>HAProxy Enterprise 3.0r1 (2026-04-17)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Fri, 17 Apr 2026 00:00:00 +0000</pubDate>
			<category>bug</category>
			<category>hapee</category>
			<category>config</category>
			<category>ci</category>
			<category>minor</category>
			<category>qpack</category>
			<category>sock</category>
			<category>ncbmbuf</category>
			<category>doc</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li>🪛 <span>Add the sast to the gitlab-ci dispatcher</span> [<em>ci</em>, <em>hapee</em>]</li><li>🪛 <span>Configure sast in sast.yml</span> [<em>ci</em>, <em>hapee</em>]</li><li><strong>🟢 Minor</strong> <span>Properly test warnif_misplaced_* return values</span> [<em>bug</em>, <em>config</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Improve itbmap_next() code</span> [<em>ncbmbuf</em>, <em>minor</em>]</li><li>📝 <span>Reorder params for 'tcp-check expect' directive</span> [<em>doc</em>, <em>config</em>]</li><li>📝 <span>Add missing 'status-code' param for 'http-check expect' directive</span> [<em>doc</em>, <em>config</em>]</li><li><strong>🟢 Minor</strong> <span>Fix 62-bit overflow and 1-byte oob reads in decoding</span> [<em>bug</em>, <em>qpack</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Adjust accept() error messages for enfile and enomem</span> [<em>bug</em>, <em>sock</em>, <em>minor</em>]</li></ul><div>Tags: bug hapee config ci minor qpack sock ncbmbuf doc </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</guid>
			<title>HAProxy Enterprise 3.2r1 (2026-04-17)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Fri, 17 Apr 2026 00:00:00 +0000</pubDate>
			<category>task</category>
			<category>medium</category>
			<category>bug</category>
			<category>htx</category>
			<category>cli</category>
			<category>ot</category>
			<category>minor</category>
			<category>peers</category>
			<category>log</category>
			<category>acme</category>
			<category>mux-h2</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Fix uninitialised read in run_tasks_from_lists()</span> [<em>bug</em>, <em>task</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Ignore conn->owner when deciding if a connection is dead</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Trash of expired entries delayed after fullresync</span> [<em>bug</em>, <em>peers</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Don't pass null into format string</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Don't count delta twice when block value is replaced</span> [<em>bug</em>, <em>htx</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Fix function used to change part of a block value when defrag</span> [<em>bug</em>, <em>htx</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Properly handle too big payload on a command line</span> [<em>bug</em>, <em>cli</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix error message when using unavailable fetch in logfmt</span> [<em>bug</em>, <em>log</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fixed wrong null check in flt_ot_parse_cfg_group()</span> [<em>bug</em>, <em>ot</em>, <em>minor</em>]</li></ul><div>Tags: task medium bug htx cli ot minor peers log acme mux-h2 </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</guid>
			<title>HAProxy Enterprise 3.3r1 (2026-04-17)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Fri, 17 Apr 2026 00:00:00 +0000</pubDate>
			<category>task</category>
			<category>medium</category>
			<category>bug</category>
			<category>htx</category>
			<category>cli</category>
			<category>ot</category>
			<category>minor</category>
			<category>peers</category>
			<category>log</category>
			<category>threads</category>
			<category>acme</category>
			<category>mux-h2</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Fix uninitialised read in run_tasks_from_lists()</span> [<em>bug</em>, <em>task</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Ignore conn->owner when deciding if a connection is dead</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Properly set the number of tgroups when non using policy</span> [<em>bug</em>, <em>threads</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Trash of expired entries delayed after fullresync</span> [<em>bug</em>, <em>peers</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Don't pass null into format string</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Don't count delta twice when block value is replaced</span> [<em>bug</em>, <em>htx</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Fix function used to change part of a block value when defrag</span> [<em>bug</em>, <em>htx</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Properly handle too big payload on a command line</span> [<em>bug</em>, <em>cli</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix error message when using unavailable fetch in logfmt</span> [<em>bug</em>, <em>log</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fixed wrong null check in flt_ot_parse_cfg_group()</span> [<em>bug</em>, <em>ot</em>, <em>minor</em>]</li></ul><div>Tags: task medium bug htx cli ot minor peers log threads acme mux-h2 </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</guid>
			<title>HAProxy Enterprise 3.2r1 (2026-04-10)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Fri, 10 Apr 2026 00:00:00 +0000</pubDate>
			<category>task</category>
			<category>bug</category>
			<category>quic</category>
			<category>major</category>
			<category>internals</category>
			<category>samples</category>
			<category>payload</category>
			<category>tools</category>
			<category>filters</category>
			<category>tinfo</category>
			<category>doc</category>
			<category>hlua</category>
			<category>tcpcheck</category>
			<category>mux-fcgi</category>
			<category>spoe</category>
			<category>slz</category>
			<category>actions</category>
			<category>peers</category>
			<category>resolvers</category>
			<category>map/cli</category>
			<category>medium</category>
			<category>hapee</category>
			<category>cli</category>
			<category>jwt</category>
			<category>http-act</category>
			<category>mux-h1</category>
			<category>build</category>
			<category>cfgcond</category>
			<category>applet</category>
			<category>net_helper</category>
			<category>sample</category>
			<category>initcall</category>
			<category>ssl/ocsp</category>
			<category>config</category>
			<category>minor</category>
			<category>debug</category>
			<category>ssl</category>
			<category>memprof</category>
			<category>ssl/cli</category>
			<category>activity</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Update the backports list</span> [<em>hapee</em>, <em>minor</em>]</li><li>📝 <span>Short explanation on how thread_exec_ctx works</span> [<em>doc</em>, <em>internals</em>]</li><li><strong>🟢 Minor</strong> <span>Raise the default number of memprofile buckets to 4k</span> [<em>activity</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Support aggregating by caller also for memprofile</span> [<em>activity</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Implement execution context for manually registered keywords</span> [<em>cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Keep track of the initcall context since kw registration</span> [<em>cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Keep the info of the current keyword being processed in the appctx</span> [<em>cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set execution context on applet calls</span> [<em>applet</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set execution context on task/tasklet calls</span> [<em>task</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set the thread execution context during message callbacks</span> [<em>ssl</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set the exec context to the current filter config</span> [<em>filters</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Also report execution contexts registered directly</span> [<em>actions</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Store the location of keywords registered via initcalls</span> [<em>actions</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Support an execution context that is just a function</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Also report contexts registered directly</span> [<em>sample</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Store location for fetch/conv via initcalls</span> [<em>sample</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Support decoding ha_caller type exec context</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Decode execution context th_ex_ctx_initcall</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Record the file and line declaration of an initcall</span> [<em>initcall</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Report the execution context on profiling output</span> [<em>memprof</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Report the execution context on thread dumps</span> [<em>debug</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add a function to write a thread execution context.</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Also permit to sort output by calling context</span> [<em>memprof</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Prepare to consider exec_ctx in reporting</span> [<em>memprof</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Start to add basic thread_exec_ctx</span> [<em>tinfo</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add a new pointer hash function that also takes an argument</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Use dynamic allocation for "show profiling" entries</span> [<em>activity</em>, <em>minor</em>]</li><li>🏗️ <span>Fix unterminated comment that broke the build</span> [<em>build</em>, <em>net_helper</em>]</li><li><strong>🟢 Minor</strong> <span>Fix length controls on ip.fp tcp options parsing</span> [<em>bug</em>, <em>net_helper</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix use-after-free of http reason string</span> [<em>bug</em>, <em>hlua</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Prevent record-length truncation with large bufsize</span> [<em>bug</em>, <em>mux-fcgi</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix info leak in regsub when exp_replace fails</span> [<em>bug</em>, <em>sample</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix handling of smp_t_meth samples</span> [<em>bug</em>, <em>samples</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix pointer arithmetic overflow in spoe_decode_buffer()</span> [<em>bug</em>, <em>spoe</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix memory leak on aaaa additional records</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🔴 Major</strong> <span>Always make sure to limit fixed output to less than worst case literals</span> [<em>bug</em>, <em>slz</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Fix oob heap write in dictionary cache update</span> [<em>bug</em>, <em>peers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix format-string vulnerability in patref error path</span> [<em>bug</em>, <em>hlua</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix stack overflow in httpclient headers conversion</span> [<em>bug</em>, <em>hlua</em>, <em>minor</em>]</li><li>🐞 <span>Fix stack overflow in httpclient headers conversion</span> [<em>bug</em>, <em>hlua</em>]</li><li><strong>🟡 Medium</strong> <span>Fix heap overflow in ecdsa signature der conversion</span> [<em>bug</em>, <em>jwt</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Validate sni name_len in req.ssl_sni</span> [<em>bug</em>, <em>payload</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix a typo in the "pause" action error message</span> [<em>bug</em>, <em>http-act</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Disable 0-copy forwarding when draining the request</span> [<em>bug</em>, <em>mux-h1</em>, <em>medium</em>]</li><li>📝 <span>Fix ambiguous info in log-steps directive description</span> [<em>doc</em>, <em>config</em>]</li><li><strong>🟢 Minor</strong> <span>Fail cleanly on missing argument for "feature"</span> [<em>bug</em>, <em>cfgcond</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Always set the error string on openssl_version checks</span> [<em>bug</em>, <em>cfgcond</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly set the error pointer on evaluation error</span> [<em>bug</em>, <em>cfgcond</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix documentation for transport params decoding</span> [<em>bug</em>, <em>quic</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Use tcpcheck context for expressions parsing</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Don't enable http_needed when parsing http samples</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Remove unexpected flag on tcpcheck rules for httchck option</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Don't set msg_more on bodyless responses forwarded to client</span> [<em>bug</em>, <em>mux-h1</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Map/acl commands warn when accessed without admin level</span> [<em>bug</em>, <em>map/cli</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Ocsp commands warn when accessed without admin level</span> [<em>bug</em>, <em>ssl/ocsp</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Tls-keys commands warn when accessed without admin level</span> [<em>bug</em>, <em>ssl/cli</em>, <em>medium</em>]</li></ul><div>Tags: task bug quic major internals samples payload tools filters tinfo doc hlua tcpcheck mux-fcgi spoe slz actions peers resolvers map/cli medium hapee cli jwt http-act mux-h1 build cfgcond applet net_helper sample initcall ssl/ocsp config minor debug ssl memprof ssl/cli activity </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</guid>
			<title>HAProxy Enterprise 3.3r1 (2026-04-10)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Fri, 10 Apr 2026 00:00:00 +0000</pubDate>
			<category>configuration</category>
			<category>bug</category>
			<category>quic</category>
			<category>major</category>
			<category>samples</category>
			<category>payload</category>
			<category>doc</category>
			<category>hlua</category>
			<category>tcpcheck</category>
			<category>mux-fcgi</category>
			<category>spoe</category>
			<category>slz</category>
			<category>peers</category>
			<category>resolvers</category>
			<category>map/cli</category>
			<category>medium</category>
			<category>mux-h1</category>
			<category>http-act</category>
			<category>jwt</category>
			<category>cfgcond</category>
			<category>build</category>
			<category>counters</category>
			<category>net_helper</category>
			<category>sample</category>
			<category>ssl/ocsp</category>
			<category>config</category>
			<category>minor</category>
			<category>ssl/cli</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li>🏗️ <span>Fix unterminated comment that broke the build</span> [<em>build</em>, <em>net_helper</em>]</li><li><strong>🟢 Minor</strong> <span>Fix length controls on ip.fp tcp options parsing</span> [<em>bug</em>, <em>net_helper</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix use-after-free of http reason string</span> [<em>bug</em>, <em>hlua</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Prevent record-length truncation with large bufsize</span> [<em>bug</em>, <em>mux-fcgi</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix info leak in regsub when exp_replace fails</span> [<em>bug</em>, <em>sample</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix handling of smp_t_meth samples</span> [<em>bug</em>, <em>samples</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix pointer arithmetic overflow in spoe_decode_buffer()</span> [<em>bug</em>, <em>spoe</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix memory leak on aaaa additional records</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🔴 Major</strong> <span>Always make sure to limit fixed output to less than worst case literals</span> [<em>bug</em>, <em>slz</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Fix oob heap write in dictionary cache update</span> [<em>bug</em>, <em>peers</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix format-string vulnerability in patref error path</span> [<em>bug</em>, <em>hlua</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix stack overflow in httpclient headers conversion</span> [<em>bug</em>, <em>hlua</em>, <em>minor</em>]</li><li>🐞 <span>Fix stack overflow in httpclient headers conversion</span> [<em>bug</em>, <em>hlua</em>]</li><li><strong>🟡 Medium</strong> <span>Fix heap overflow in ecdsa signature der conversion</span> [<em>bug</em>, <em>jwt</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Validate sni name_len in req.ssl_sni</span> [<em>bug</em>, <em>payload</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix unexpected 127 char guid truncation for shm-stats-file objects</span> [<em>bug</em>, <em>counters</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix a typo in the "pause" action error message</span> [<em>bug</em>, <em>http-act</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Disable 0-copy forwarding when draining the request</span> [<em>bug</em>, <em>mux-h1</em>, <em>medium</em>]</li><li>📝 <span>Fix ambiguous info in log-steps directive description</span> [<em>doc</em>, <em>config</em>]</li><li><strong>🟢 Minor</strong> <span>Fail cleanly on missing argument for "feature"</span> [<em>bug</em>, <em>cfgcond</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Always set the error string on awslc_api checks</span> [<em>bug</em>, <em>cfgcond</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Always set the error string on openssl_version checks</span> [<em>bug</em>, <em>cfgcond</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly set the error pointer on evaluation error</span> [<em>bug</em>, <em>cfgcond</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix documentation for transport params decoding</span> [<em>bug</em>, <em>quic</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Use tcpcheck context for expressions parsing</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Don't enable http_needed when parsing http samples</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Remove unexpected flag on tcpcheck rules for httchck option</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Don't set msg_more on bodyless responses forwarded to client</span> [<em>bug</em>, <em>mux-h1</em>, <em>medium</em>]</li><li>📝 <span>Mention quic server support</span> [<em>doc</em>, <em>configuration</em>]</li><li><strong>🟡 Medium</strong> <span>Cli commands lack admin permission checks</span> [<em>bug</em>, <em>map/cli</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Ocsp commands are missing permission checks</span> [<em>bug</em>, <em>ssl/ocsp</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Tls-keys commands are missing permission checks</span> [<em>bug</em>, <em>ssl/cli</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Map/acl commands warn when accessed without admin level</span> [<em>bug</em>, <em>map/cli</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Ocsp commands warn when accessed without admin level</span> [<em>bug</em>, <em>ssl/ocsp</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Tls-keys commands warn when accessed without admin level</span> [<em>bug</em>, <em>ssl/cli</em>, <em>medium</em>]</li></ul><div>Tags: configuration bug quic major samples payload doc hlua tcpcheck mux-fcgi spoe slz peers resolvers map/cli medium mux-h1 http-act jwt cfgcond build counters net_helper sample ssl/ocsp config minor ssl/cli </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</guid>
			<title>HAProxy Enterprise 2.8r1 (2026-04-07)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Tue, 07 Apr 2026 00:00:00 +0000</pubDate>
			<description><![CDATA[<ul style='list-style-type:none;'></ul><div>Tags: </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</guid>
			<title>HAProxy Enterprise 3.0r1 (2026-04-07)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Tue, 07 Apr 2026 00:00:00 +0000</pubDate>
			<description><![CDATA[<ul style='list-style-type:none;'></ul><div>Tags: </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</guid>
			<title>HAProxy Enterprise 3.2r1 (2026-03-31)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Tue, 31 Mar 2026 00:00:00 +0000</pubDate>
			<category>bug</category>
			<category>quic</category>
			<category>stconn</category>
			<category>medium</category>
			<category>config</category>
			<category>ci</category>
			<category>minor</category>
			<category>github</category>
			<category>http-ana</category>
			<category>acme</category>
			<category>scripts</category>
			<category>git-show-backports</category>
			<category>mux-h2</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>⚪ </strong> <span>List new commits and how to review them with -l</span> [<em>scripts</em>, <em>git-show-backports</em>]</li><li><strong>🟢 Minor</strong> <span>Report glitches on early rst_stream</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Flag the stream endpoint descriptor when the app has started</span> [<em>stconn</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Always declare the sc created from healthchecks as a back sc</span> [<em>bug</em>, <em>stconn</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Close conn on packet reception with incompatible frame</span> [<em>bug</em>, <em>quic</em>, <em>minor</em>]</li><li>🪛 <span>Fix tag listing by implementing proper api pagination</span> [<em>ci</em>, <em>github</em>]</li><li><strong>🟢 Minor</strong> <span>Fix task allocation leaked upon error</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Skip doing challenge if it is already valid</span> [<em>bug</em>, <em>acme</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Only consider client abort for abortonclose</span> [<em>bug</em>, <em>http-ana</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly test warnif_misplaced_* return values</span> [<em>bug</em>, <em>config</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Permission checks on the cli</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li></ul><div>Tags: bug quic stconn medium config ci minor github http-ana acme scripts git-show-backports mux-h2 </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</guid>
			<title>HAProxy Enterprise 3.3r1 (2026-03-31)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Tue, 31 Mar 2026 00:00:00 +0000</pubDate>
			<category>bug</category>
			<category>quic</category>
			<category>stconn</category>
			<category>medium</category>
			<category>config</category>
			<category>ci</category>
			<category>minor</category>
			<category>github</category>
			<category>http-ana</category>
			<category>acme</category>
			<category>ech</category>
			<category>scripts</category>
			<category>git-show-backports</category>
			<category>mux-h2</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>⚪ </strong> <span>List new commits and how to review them with -l</span> [<em>scripts</em>, <em>git-show-backports</em>]</li><li><strong>🟢 Minor</strong> <span>Report glitches on early rst_stream</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Flag the stream endpoint descriptor when the app has started</span> [<em>stconn</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Always declare the sc created from healthchecks as a back sc</span> [<em>bug</em>, <em>stconn</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Close conn on packet reception with incompatible frame</span> [<em>bug</em>, <em>quic</em>, <em>minor</em>]</li><li>🪛 <span>Fix tag listing by implementing proper api pagination</span> [<em>ci</em>, <em>github</em>]</li><li><strong>🟢 Minor</strong> <span>Fix task allocation leaked upon error</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Skip doing challenge if it is already valid</span> [<em>bug</em>, <em>acme</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Only consider client abort for abortonclose</span> [<em>bug</em>, <em>http-ana</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly test warnif_misplaced_* return values</span> [<em>bug</em>, <em>config</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Permission checks on the cli</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Permission checks on the cli</span> [<em>bug</em>, <em>ech</em>, <em>minor</em>]</li></ul><div>Tags: bug quic stconn medium config ci minor github http-ana acme ech scripts git-show-backports mux-h2 </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</guid>
			<title>HAProxy Enterprise 3.2r1 (2026-03-24)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Tue, 24 Mar 2026 00:00:00 +0000</pubDate>
			<category>sched</category>
			<category>task</category>
			<category>bug</category>
			<category>medium</category>
			<category>spoe</category>
			<category>config</category>
			<category>build</category>
			<category>minor</category>
			<category>qpack</category>
			<category>sock</category>
			<category>mworker</category>
			<category>tools</category>
			<category>ncbmbuf</category>
			<category>acme/cli</category>
			<category>freq_ctr</category>
			<category>doc</category>
			<category>acme</category>
			<category>mux-h2</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Permit to fix a minimum value for the advertised streams limit</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Permit to moderate the advertised streams limit depending on load</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Store the concurrent streams hard limit in the h2c</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Maintain a per-thread indicator of the peak run-queue size</span> [<em>task</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add a function to add values with a peak</span> [<em>freq_ctr</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix argument check and error in 'acme challenge_ready'</span> [<em>bug</em>, <em>acme/cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Replace atol with len-bounded __strl2uic() for retry-after</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Free() der buffer on a2base64url error path</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Improve itbmap_next() code</span> [<em>ncbmbuf</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Acquire context buffer in applet before consuming a frame</span> [<em>bug</em>, <em>spoe</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix incorrect number of arguments allowed in config</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Wrong labels logic always memprintf errmsg</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Acme_ctx_destroy() leaks auth->dns</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li>📝 <span>Reorder params for 'tcp-check expect' directive</span> [<em>doc</em>, <em>config</em>]</li><li>📝 <span>Add missing 'status-code' param for 'http-check expect' directive
- revert "bug/medium: mux-h2: make sure to always report pending errors to the stream"</span> [<em>doc</em>, <em>config</em>]</li><li><strong>🟢 Minor</strong> <span>Wrong argument check in 'acme renew'</span> [<em>bug</em>, <em>acme/cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Wrong error when checking for duplicate section</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Leak of ext_san upon insertion error</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix multiple resource leaks in acme_x509_req()</span> [<em>bug</em>, <em>acme</em>, <em>medium</em>]</li><li>🏗️ <span>Fix leftover of debugging test in single-run changes</span> [<em>build</em>, <em>sched</em>]</li><li><strong>🟢 Minor</strong> <span>Assign a limited frames processing budget</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Change scheduler budgets to lower tl_bulk</span> [<em>sched</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Do not punish self-waking tasklets if task_woken_any</span> [<em>sched</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Do not punish self-waking tasklets anymore</span> [<em>sched</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Do not requeue a tasklet into the current queue</span> [<em>sched</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Do not run a same task multiple times in series</span> [<em>sched</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix 62-bit overflow and 1-byte oob reads in decoding</span> [<em>bug</em>, <em>qpack</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Adjust accept() error messages for enfile and enomem</span> [<em>bug</em>, <em>sock</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix sort order of mworker_proc in 'show proc'</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li>🏗️ <span>Potential null pointer dereference in dl_collect_libs_cb</span> [<em>build</em>, <em>tools</em>]</li></ul><div>Tags: sched task bug medium spoe config build minor qpack sock mworker tools ncbmbuf acme/cli freq_ctr doc acme mux-h2 </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</guid>
			<title>HAProxy Enterprise 3.2r1 (2026-03-24)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Tue, 24 Mar 2026 00:00:00 +0000</pubDate>
			<category>mworker/cli</category>
			<category>h3</category>
			<category>bug</category>
			<category>medium</category>
			<category>major</category>
			<category>config</category>
			<category>gdb</category>
			<category>github</category>
			<category>minor</category>
			<category>ci</category>
			<category>peers</category>
			<category>mworker</category>
			<category>debug</category>
			<category>tools</category>
			<category>dev</category>
			<category>mux-h2</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li>🪛 <span>Treat vx.y.z release tags as stable like haproxy-* branches</span> [<em>ci</em>, <em>github</em>]</li><li><strong>🟢 Minor</strong> <span>Fix show proc pagination losing entries on resume</span> [<em>bug</em>, <em>mworker/cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Extract worker "show proc" row printer</span> [<em>mworker/cli</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Reject unaligned frames except data</span> [<em>bug</em>, <em>h3</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Check body size with content-length on empty fin</span> [<em>bug</em>, <em>h3</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Properly ignore r bit in window_update increments</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly ignore r bit in goaway stream id</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Enforce check on incoming table key type</span> [<em>bug</em>, <em>peers</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Don't try to access an initializing process</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Opportunistically load libthread_db.so.1 with set-dumpable=libs</span> [<em>debug</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Copy debug symbols from /usr/lib/debug when present</span> [<em>debug</em>, <em>minor</em>]</li><li><strong>⚪ </strong> <span>Add a new utility to extract libs from a core dump: libs-from-core</span> [<em>dev</em>, <em>gdb</em>]</li><li><strong>🟢 Minor</strong> <span>Read all libs in memory when set-dumpable=libs</span> [<em>debug</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Support explicit "on" and "off" for "set-dumpable"</span> [<em>config</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add a function to load a file into a tar archive</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add a function to create a tar file header</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>⚪ </strong> <span>Add a utility to find the post-mortem address from a core</span> [<em>dev</em>, <em>gdb</em>]</li></ul><div>Tags: mworker/cli h3 bug medium major config gdb github minor ci peers mworker debug tools dev mux-h2 </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</guid>
			<title>HAProxy Enterprise 3.3r1 (2026-03-24)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Tue, 24 Mar 2026 00:00:00 +0000</pubDate>
			<category>task</category>
			<category>bug</category>
			<category>quic</category>
			<category>tools</category>
			<category>ncbmbuf</category>
			<category>doc</category>
			<category>proxy</category>
			<category>spoe</category>
			<category>server</category>
			<category>mworker</category>
			<category>sock</category>
			<category>quic/h3</category>
			<category>acme</category>
			<category>mux-h2</category>
			<category>medium</category>
			<category>build</category>
			<category>acme/cli</category>
			<category>sched</category>
			<category>stats-file</category>
			<category>config</category>
			<category>minor</category>
			<category>qpack</category>
			<category>freq_ctr</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Permit to fix a minimum value for the advertised streams limit</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Permit to moderate the advertised streams limit depending on load</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Store the concurrent streams hard limit in the h2c</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Maintain a per-thread indicator of the peak run-queue size</span> [<em>task</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add a function to add values with a peak</span> [<em>freq_ctr</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix argument check and error in 'acme challenge_ready'</span> [<em>bug</em>, <em>acme/cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Replace atol with len-bounded __strl2uic() for retry-after</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Free() der buffer on a2base64url error path</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Missing app ops init during backend 0-rtt sessions</span> [<em>bug</em>, <em>quic</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Improve itbmap_next() code</span> [<em>ncbmbuf</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Acquire context buffer in applet before consuming a frame</span> [<em>bug</em>, <em>spoe</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix incorrect number of arguments allowed in config</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Wrong labels logic always memprintf errmsg</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Acme_ctx_destroy() leaks auth->dns</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Display quic/h3 backend module on html stats</span> [<em>bug</em>, <em>quic/h3</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix counters used on be side</span> [<em>bug</em>, <em>quic</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Enable no-check-sni-auto for dynamic servers</span> [<em>bug</em>, <em>server</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set auto sni for dynamic servers</span> [<em>bug</em>, <em>server</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Detect strdup error on server auto sni</span> [<em>bug</em>, <em>proxy</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Detect and fix inconsistent shared clock when resuming from shm-stats-file</span> [<em>bug</em>, <em>stats-file</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Manipulate shm-stats-file heartbeat using unsigned int</span> [<em>bug</em>, <em>stats-file</em>, <em>minor</em>]</li><li>📝 <span>Reorder params for 'tcp-check expect' directive</span> [<em>doc</em>, <em>config</em>]</li><li>📝 <span>Add missing 'status-code' param for 'http-check expect' directive</span> [<em>doc</em>, <em>config</em>]</li><li>📝 <span>Fix alphabetical ordering of external-check directives</span> [<em>doc</em>, <em>config</em>]</li><li>📝 <span>Fix alphabetical ordering of proxy options
- revert "bug/medium: mux-h2: make sure to always report pending errors to the stream"</span> [<em>doc</em>, <em>config</em>]</li><li><strong>🟢 Minor</strong> <span>Wrong argument check in 'acme renew'</span> [<em>bug</em>, <em>acme/cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Wrong error when checking for duplicate section</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Leak of ext_san upon insertion error</span> [<em>bug</em>, <em>acme</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix multiple resource leaks in acme_x509_req()</span> [<em>bug</em>, <em>acme</em>, <em>medium</em>]</li><li>🏗️ <span>Fix leftover of debugging test in single-run changes</span> [<em>build</em>, <em>sched</em>]</li><li><strong>🟢 Minor</strong> <span>Assign a limited frames processing budget</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Change scheduler budgets to lower tl_bulk</span> [<em>sched</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Do not punish self-waking tasklets if task_woken_any</span> [<em>sched</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Do not punish self-waking tasklets anymore</span> [<em>sched</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Do not requeue a tasklet into the current queue</span> [<em>sched</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Do not run a same task multiple times in series</span> [<em>sched</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix 62-bit overflow and 1-byte oob reads in decoding</span> [<em>bug</em>, <em>qpack</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Adjust accept() error messages for enfile and enomem</span> [<em>bug</em>, <em>sock</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix sort order of mworker_proc in 'show proc'</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li>🏗️ <span>Potential null pointer dereference in dl_collect_libs_cb</span> [<em>build</em>, <em>tools</em>]</li></ul><div>Tags: task bug quic tools ncbmbuf doc proxy spoe server mworker sock quic/h3 acme mux-h2 medium build acme/cli sched stats-file config minor qpack freq_ctr </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</guid>
			<title>HAProxy Enterprise 3.3r1 (2026-03-24)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Tue, 24 Mar 2026 00:00:00 +0000</pubDate>
			<category>mworker/cli</category>
			<category>task</category>
			<category>bug</category>
			<category>major</category>
			<category>internals</category>
			<category>tools</category>
			<category>filters</category>
			<category>tinfo</category>
			<category>gdb</category>
			<category>doc</category>
			<category>github</category>
			<category>connection</category>
			<category>mworker</category>
			<category>peers</category>
			<category>actions</category>
			<category>mux-h2</category>
			<category>medium</category>
			<category>cli</category>
			<category>build</category>
			<category>ci</category>
			<category>applet</category>
			<category>sample</category>
			<category>initcall</category>
			<category>h3</category>
			<category>config</category>
			<category>makefile</category>
			<category>minor</category>
			<category>debug</category>
			<category>ssl</category>
			<category>memprof</category>
			<category>dev</category>
			<category>activity</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li>🪛 <span>Treat vx.y.z release tags as stable like haproxy-* branches</span> [<em>ci</em>, <em>github</em>]</li><li><strong>🟢 Minor</strong> <span>Fix show proc pagination losing entries on resume</span> [<em>bug</em>, <em>mworker/cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Extract worker "show proc" row printer</span> [<em>mworker/cli</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Reject unaligned frames except data</span> [<em>bug</em>, <em>h3</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Check body size with content-length on empty fin</span> [<em>bug</em>, <em>h3</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Properly ignore r bit in window_update increments</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly ignore r bit in goaway stream id</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Enforce check on incoming table key type</span> [<em>bug</em>, <em>peers</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Don't try to access an initializing process</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li>📝 <span>Short explanation on how thread_exec_ctx works</span> [<em>doc</em>, <em>internals</em>]</li><li><strong>🟢 Minor</strong> <span>Raise the default number of memprofile buckets to 4k</span> [<em>activity</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Support aggregating by caller also for memprofile</span> [<em>activity</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Implement execution context for manually registered keywords</span> [<em>cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Keep track of the initcall context since kw registration</span> [<em>cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Keep the info of the current keyword being processed in the appctx</span> [<em>cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set execution context on applet calls</span> [<em>applet</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set execution context on task/tasklet calls</span> [<em>task</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Track mux calls to report their allocation context</span> [<em>connection</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set the thread execution context during message callbacks</span> [<em>ssl</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set the exec context to the current filter config</span> [<em>filters</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Also report execution contexts registered directly</span> [<em>actions</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Store the location of keywords registered via initcalls</span> [<em>actions</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Support an execution context that is just a function</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Also report contexts registered directly</span> [<em>sample</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Store location for fetch/conv via initcalls</span> [<em>sample</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Support decoding ha_caller type exec context</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Decode execution context th_ex_ctx_initcall</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Record the file and line declaration of an initcall</span> [<em>initcall</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Report the execution context on profiling output</span> [<em>memprof</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Report the execution context on thread dumps</span> [<em>debug</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add a function to write a thread execution context.</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Also permit to sort output by calling context</span> [<em>memprof</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Prepare to consider exec_ctx in reporting</span> [<em>memprof</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Start to add basic thread_exec_ctx</span> [<em>tinfo</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add a new pointer hash function that also takes an argument</span> [<em>tools</em>, <em>minor</em>]</li><li>🏗️ <span>Fix range build without test command</span> [<em>build</em>, <em>makefile</em>]</li><li><strong>🟢 Minor</strong> <span>Opportunistically load libthread_db.so.1 with set-dumpable=libs</span> [<em>debug</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Copy debug symbols from /usr/lib/debug when present</span> [<em>debug</em>, <em>minor</em>]</li><li><strong>⚪ </strong> <span>Add a new utility to extract libs from a core dump: libs-from-core</span> [<em>dev</em>, <em>gdb</em>]</li><li><strong>🟢 Minor</strong> <span>Read all libs in memory when set-dumpable=libs</span> [<em>debug</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Support explicit "on" and "off" for "set-dumpable"</span> [<em>config</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add a function to load a file into a tar archive</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add a function to create a tar file header</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>⚪ </strong> <span>Add a utility to find the post-mortem address from a core</span> [<em>dev</em>, <em>gdb</em>]</li></ul><div>Tags: mworker/cli task bug major internals tools filters tinfo gdb doc github connection mworker peers actions mux-h2 medium cli build ci applet sample initcall h3 config makefile minor debug ssl memprof dev activity </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</guid>
			<title>HAProxy Enterprise 2.6r1 (2026-03-23)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Mon, 23 Mar 2026 00:00:00 +0000</pubDate>
			<category>configuration</category>
			<category>h2/h3</category>
			<category>bug</category>
			<category>major</category>
			<category>htx</category>
			<category>doc</category>
			<category>git-show-backports</category>
			<category>tcpcheck</category>
			<category>github</category>
			<category>mworker</category>
			<category>peers</category>
			<category>http-ana</category>
			<category>scripts</category>
			<category>mux-h2</category>
			<category>ssl-sample</category>
			<category>medium</category>
			<category>ci</category>
			<category>mjson</category>
			<category>stream</category>
			<category>h3</category>
			<category>sockpair</category>
			<category>minor</category>
			<category>backend</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Reject unaligned frames except data</span> [<em>bug</em>, <em>h3</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Check body size with content-length on empty fin</span> [<em>bug</em>, <em>h3</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Properly ignore r bit in window_update increments</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly ignore r bit in goaway stream id</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Enforce check on incoming table key type</span> [<em>bug</em>, <em>peers</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Make mystrtod() length-aware to prevent out-of-bounds reads</span> [<em>bug</em>, <em>mjson</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix crash in stream dump if the current rule has no keyword</span> [<em>bug</em>, <em>stream</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Swap l7 buffer with request buffer by hand</span> [<em>bug</em>, <em>http-ana</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Never insert partial headers/trailers in an htx message</span> [<em>bug</em>, <em>h2/h3</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add function to truncate all blocks after a specific block</span> [<em>htx</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Only test number of trailers inserted in htx message</span> [<em>bug</em>, <em>h2/h3</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set fd_cloexec on fd received via scm_rights</span> [<em>bug</em>, <em>sockpair</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix typo &= instead of & in proc list serialization</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li>📝 <span>Http-check expect example typo</span> [<em>doc</em>, <em>configuration</em>]</li><li><strong>🟢 Minor</strong> <span>Fix typo in error error message for `http-check expect`</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li>🪛 <span>Treat vx.y.z release tags as stable like haproxy-* branches</span> [<em>ci</em>, <em>github</em>]</li><li><strong>⚪ </strong> <span>Add a restart-from-last option</span> [<em>scripts</em>, <em>git-show-backports</em>]</li><li><strong>⚪ </strong> <span>Hide the common ancestor warning in quiet mode</span> [<em>scripts</em>, <em>git-show-backports</em>]</li><li><strong>🟢 Minor</strong> <span>Don't get proto to use for webscoket if there is no server</span> [<em>bug</em>, <em>backend</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix sample_conv_sha2() by checking evp_digest* failures</span> [<em>bug</em>, <em>ssl-sample</em>, <em>minor</em>]</li></ul><div>Tags: configuration h2/h3 bug major htx doc git-show-backports tcpcheck github mworker peers http-ana scripts mux-h2 ssl-sample medium ci mjson stream h3 sockpair minor backend </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</guid>
			<title>HAProxy Enterprise 2.8r1 (2026-03-23)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Mon, 23 Mar 2026 00:00:00 +0000</pubDate>
			<category>configuration</category>
			<category>h2/h3</category>
			<category>bug</category>
			<category>major</category>
			<category>htx</category>
			<category>doc</category>
			<category>git-show-backports</category>
			<category>tcpcheck</category>
			<category>github</category>
			<category>mworker</category>
			<category>peers</category>
			<category>http-ana</category>
			<category>scripts</category>
			<category>mux-h2</category>
			<category>ssl-sample</category>
			<category>medium</category>
			<category>ci</category>
			<category>mjson</category>
			<category>stream</category>
			<category>h3</category>
			<category>sockpair</category>
			<category>minor</category>
			<category>backend</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li>🪛 <span>Treat vx.y.z release tags as stable like haproxy-* branches</span> [<em>ci</em>, <em>github</em>]</li><li><strong>🟢 Minor</strong> <span>Fix typo in error error message for `http-check expect`</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li>📝 <span>Http-check expect example typo</span> [<em>doc</em>, <em>configuration</em>]</li><li><strong>🟢 Minor</strong> <span>Fix typo &= instead of & in proc list serialization</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set fd_cloexec on fd received via scm_rights</span> [<em>bug</em>, <em>sockpair</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Only test number of trailers inserted in htx message</span> [<em>bug</em>, <em>h2/h3</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add function to truncate all blocks after a specific block</span> [<em>htx</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Never insert partial headers/trailers in an htx message</span> [<em>bug</em>, <em>h2/h3</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Swap l7 buffer with request buffer by hand</span> [<em>bug</em>, <em>http-ana</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix crash in stream dump if the current rule has no keyword</span> [<em>bug</em>, <em>stream</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly ignore r bit in window_update increments</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Make mystrtod() length-aware to prevent out-of-bounds reads</span> [<em>bug</em>, <em>mjson</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Enforce check on incoming table key type</span> [<em>bug</em>, <em>peers</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Properly ignore r bit in goaway stream id</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🔴 Major</strong> <span>Check body size with content-length on empty fin</span> [<em>bug</em>, <em>h3</em>, <em>major</em>]</li><li><strong>🟡 Medium</strong> <span>Reject unaligned frames except data</span> [<em>bug</em>, <em>h3</em>, <em>medium</em>]</li><li><strong>⚪ </strong> <span>Add a restart-from-last option</span> [<em>scripts</em>, <em>git-show-backports</em>]</li><li><strong>⚪ </strong> <span>Hide the common ancestor warning in quiet mode</span> [<em>scripts</em>, <em>git-show-backports</em>]</li><li><strong>🟢 Minor</strong> <span>Don't get proto to use for webscoket if there is no server</span> [<em>bug</em>, <em>backend</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix sample_conv_sha2() by checking evp_digest* failures</span> [<em>bug</em>, <em>ssl-sample</em>, <em>minor</em>]</li></ul><div>Tags: configuration h2/h3 bug major htx doc git-show-backports tcpcheck github mworker peers http-ana scripts mux-h2 ssl-sample medium ci mjson stream h3 sockpair minor backend </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</guid>
			<title>HAProxy Enterprise 3.0r1 (2026-03-23)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Mon, 23 Mar 2026 00:00:00 +0000</pubDate>
			<category>configuration</category>
			<category>h2/h3</category>
			<category>mworker/cli</category>
			<category>bug</category>
			<category>major</category>
			<category>htx</category>
			<category>tools</category>
			<category>doc</category>
			<category>git-show-backports</category>
			<category>tcpcheck</category>
			<category>github</category>
			<category>mworker</category>
			<category>peers</category>
			<category>http-ana</category>
			<category>scripts</category>
			<category>mux-h2</category>
			<category>ssl-sample</category>
			<category>medium</category>
			<category>ci</category>
			<category>mjson</category>
			<category>stream</category>
			<category>h3</category>
			<category>sockpair</category>
			<category>minor</category>
			<category>backend</category>
			<category>memprof</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Reject unaligned frames except data</span> [<em>bug</em>, <em>h3</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Check body size with content-length on empty fin</span> [<em>bug</em>, <em>h3</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Properly ignore r bit in window_update increments</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly ignore r bit in goaway stream id</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Enforce check on incoming table key type</span> [<em>bug</em>, <em>peers</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Make mystrtod() length-aware to prevent out-of-bounds reads</span> [<em>bug</em>, <em>mjson</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix crash in stream dump if the current rule has no keyword</span> [<em>bug</em>, <em>stream</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Swap l7 buffer with request buffer by hand</span> [<em>bug</em>, <em>http-ana</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Never insert partial headers/trailers in an htx message</span> [<em>bug</em>, <em>h2/h3</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add function to truncate all blocks after a specific block</span> [<em>htx</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Only test number of trailers inserted in htx message</span> [<em>bug</em>, <em>h2/h3</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set fd_cloexec on fd received via scm_rights</span> [<em>bug</em>, <em>sockpair</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix typo &= instead of & in proc list serialization</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Attempt different retry slots for different hashes on collision</span> [<em>memprof</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Extend the pointer hashing code to ease manipulations</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Avoid a small memory leak in "show profiling"</span> [<em>bug</em>, <em>memprof</em>, <em>minor</em>]</li><li>📝 <span>Http-check expect example typo</span> [<em>doc</em>, <em>configuration</em>]</li><li><strong>🟢 Minor</strong> <span>Fix typo in error error message for `http-check expect`</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li>🪛 <span>Treat vx.y.z release tags as stable like haproxy-* branches</span> [<em>ci</em>, <em>github</em>]</li><li><strong>🟢 Minor</strong> <span>Fix show proc pagination losing entries on resume</span> [<em>bug</em>, <em>mworker/cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Extract worker "show proc" row printer</span> [<em>mworker/cli</em>, <em>minor</em>]</li><li><strong>⚪ </strong> <span>Add a restart-from-last option</span> [<em>scripts</em>, <em>git-show-backports</em>]</li><li><strong>⚪ </strong> <span>Hide the common ancestor warning in quiet mode</span> [<em>scripts</em>, <em>git-show-backports</em>]</li><li><strong>🟢 Minor</strong> <span>Don't get proto to use for webscoket if there is no server</span> [<em>bug</em>, <em>backend</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix sample_conv_sha2() by checking evp_digest* failures</span> [<em>bug</em>, <em>ssl-sample</em>, <em>minor</em>]</li></ul><div>Tags: configuration h2/h3 mworker/cli bug major htx tools doc git-show-backports tcpcheck github mworker peers http-ana scripts mux-h2 ssl-sample medium ci mjson stream h3 sockpair minor backend memprof </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-1r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-1r1/changelog</guid>
			<title>HAProxy Enterprise 3.1r1 (2026-03-19)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Thu, 19 Mar 2026 00:00:00 +0000</pubDate>
			<category>configuration</category>
			<category>h2/h3</category>
			<category>mworker/cli</category>
			<category>bug</category>
			<category>major</category>
			<category>htx</category>
			<category>tools</category>
			<category>doc</category>
			<category>proxy</category>
			<category>tcpcheck</category>
			<category>spoe</category>
			<category>github</category>
			<category>mworker</category>
			<category>peers</category>
			<category>http-ana</category>
			<category>mux-h2</category>
			<category>version</category>
			<category>medium</category>
			<category>build</category>
			<category>ci</category>
			<category>mjson</category>
			<category>stream</category>
			<category>h3</category>
			<category>sockpair</category>
			<category>minor</category>
			<category>memprof</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Set the eol of the 3.1 branch</span> [<em>version</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Reject unaligned frames except data</span> [<em>bug</em>, <em>h3</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Check body size with content-length on empty fin</span> [<em>bug</em>, <em>h3</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Properly ignore r bit in window_update increments</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Properly ignore r bit in goaway stream id</span> [<em>bug</em>, <em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Enforce check on incoming table key type</span> [<em>bug</em>, <em>peers</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Don't try to access an initializing process</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li>🏗️ <span>Remove unsused variable</span> [<em>build</em>, <em>spoe</em>]</li><li><strong>🟢 Minor</strong> <span>Fix condition to abort processing on client abort</span> [<em>bug</em>, <em>spoe</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Make mystrtod() length-aware to prevent out-of-bounds reads</span> [<em>bug</em>, <em>mjson</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix crash in stream dump if the current rule has no keyword</span> [<em>bug</em>, <em>stream</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Do not forget to validate quic-initial rules</span> [<em>bug</em>, <em>proxy</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Swap l7 buffer with request buffer by hand</span> [<em>bug</em>, <em>http-ana</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Never insert partial headers/trailers in an htx message</span> [<em>bug</em>, <em>h2/h3</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add function to truncate all blocks after a specific block</span> [<em>htx</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Only test number of trailers inserted in htx message</span> [<em>bug</em>, <em>h2/h3</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Properly abort processing on client abort</span> [<em>bug</em>, <em>spoe</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Properly switch spoe filter to waiting_ack state</span> [<em>bug</em>, <em>spoe</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set fd_cloexec on fd received via scm_rights</span> [<em>bug</em>, <em>sockpair</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Avoid passing null version in proc list serialization</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set a timeout on the worker socketpair read at startup</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix typo &= instead of & in proc list serialization</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Only match worker processes when looking for unspawned proc</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Attempt different retry slots for different hashes on collision</span> [<em>memprof</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Extend the pointer hashing code to ease manipulations</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Avoid a small memory leak in "show profiling"</span> [<em>bug</em>, <em>memprof</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Always stop the receiving listener</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li>📝 <span>Http-check expect example typo</span> [<em>doc</em>, <em>configuration</em>]</li><li><strong>🟢 Minor</strong> <span>Fix typo in error error message for `http-check expect`</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Don't set the proc_o_leaving flag on master process</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li>🪛 <span>Treat vx.y.z release tags as stable like haproxy-* branches</span> [<em>ci</em>, <em>github</em>]</li><li><strong>🟢 Minor</strong> <span>Fix show proc pagination losing entries on resume</span> [<em>bug</em>, <em>mworker/cli</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Extract worker "show proc" row printer</span> [<em>mworker/cli</em>, <em>minor</em>]</li></ul><div>Tags: configuration h2/h3 mworker/cli bug major htx tools doc proxy tcpcheck spoe github mworker peers http-ana mux-h2 version medium build ci mjson stream h3 sockpair minor memprof </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-1r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-1r1/changelog</guid>
			<title>HAProxy Enterprise 3.1r1 (2026-03-18)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Wed, 18 Mar 2026 00:00:00 +0000</pubDate>
			<category>ssl-sample</category>
			<category>bug</category>
			<category>promex</category>
			<category>minor</category>
			<category>backend</category>
			<category>scripts</category>
			<category>git-show-backports</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Export "haproxy_sticktable_local_updates" metric</span> [<em>promex</em>, <em>minor</em>]</li><li><strong>⚪ </strong> <span>Add a restart-from-last option</span> [<em>scripts</em>, <em>git-show-backports</em>]</li><li><strong>⚪ </strong> <span>Hide the common ancestor warning in quiet mode</span> [<em>scripts</em>, <em>git-show-backports</em>]</li><li><strong>🟢 Minor</strong> <span>Don't get proto to use for webscoket if there is no server</span> [<em>bug</em>, <em>backend</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix sample_conv_sha2() by checking evp_digest* failures</span> [<em>bug</em>, <em>ssl-sample</em>, <em>minor</em>]</li></ul><div>Tags: ssl-sample bug promex minor backend scripts git-show-backports </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</guid>
			<title>HAProxy Enterprise 3.2r1 (2026-03-18)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Wed, 18 Mar 2026 00:00:00 +0000</pubDate>
			<category>minor</category>
			<category>promex</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Export "haproxy_sticktable_local_updates" metric</span> [<em>promex</em>, <em>minor</em>]</li></ul><div>Tags: minor promex </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-2r1/changelog</guid>
			<title>HAProxy Enterprise 3.2r1 (2026-03-18)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Wed, 18 Mar 2026 00:00:00 +0000</pubDate>
			<category>configuration</category>
			<category>h2/h3</category>
			<category>bug</category>
			<category>htx</category>
			<category>tools</category>
			<category>doc</category>
			<category>proxy</category>
			<category>git-show-backports</category>
			<category>tcpcheck</category>
			<category>jws</category>
			<category>spoe</category>
			<category>mworker</category>
			<category>http-ana</category>
			<category>scripts</category>
			<category>ssl-sample</category>
			<category>medium</category>
			<category>build</category>
			<category>mjson</category>
			<category>stream</category>
			<category>cleanup</category>
			<category>sockpair</category>
			<category>config</category>
			<category>minor</category>
			<category>backend</category>
			<category>memprof</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li>🏗️ <span>Remove unsused variable</span> [<em>build</em>, <em>spoe</em>]</li><li><strong>🟢 Minor</strong> <span>Fix condition to abort processing on client abort</span> [<em>bug</em>, <em>spoe</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Make mystrtod() length-aware to prevent out-of-bounds reads</span> [<em>bug</em>, <em>mjson</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix crash in stream dump if the current rule has no keyword</span> [<em>bug</em>, <em>stream</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Do not forget to validate quic-initial rules</span> [<em>bug</em>, <em>proxy</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Swap l7 buffer with request buffer by hand</span> [<em>bug</em>, <em>http-ana</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Never insert partial headers/trailers in an htx message</span> [<em>bug</em>, <em>h2/h3</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add function to truncate all blocks after a specific block</span> [<em>htx</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Only test number of trailers inserted in htx message</span> [<em>bug</em>, <em>h2/h3</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Properly abort processing on client abort</span> [<em>bug</em>, <em>spoe</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Properly switch spoe filter to waiting_ack state</span> [<em>bug</em>, <em>spoe</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set fd_cloexec on fd received via scm_rights</span> [<em>bug</em>, <em>sockpair</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Avoid passing null version in proc list serialization</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set a timeout on the worker socketpair read at startup</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix typo &= instead of & in proc list serialization</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Only match worker processes when looking for unspawned proc</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Attempt different retry slots for different hashes on collision</span> [<em>memprof</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Extend the pointer hashing code to ease manipulations</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Avoid a small memory leak in "show profiling"</span> [<em>bug</em>, <em>memprof</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Always stop the receiving listener</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🧹 Cleanup</strong> <span>Update mentions of the old "global parameters" section</span> [<em>doc</em>, <em>config</em>, <em>cleanup</em>]</li><li>📝 <span>Http-check expect example typo</span> [<em>doc</em>, <em>configuration</em>]</li><li><strong>🟢 Minor</strong> <span>Fix memory leak in jws_b64_signature</span> [<em>bug</em>, <em>jws</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix typo in error error message for `http-check expect`</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Don't set the proc_o_leaving flag on master process</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>⚪ </strong> <span>Add a restart-from-last option</span> [<em>scripts</em>, <em>git-show-backports</em>]</li><li><strong>⚪ </strong> <span>Hide the common ancestor warning in quiet mode</span> [<em>scripts</em>, <em>git-show-backports</em>]</li><li><strong>🟢 Minor</strong> <span>Don't get proto to use for webscoket if there is no server</span> [<em>bug</em>, <em>backend</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix sample_conv_sha2() by checking evp_digest* failures</span> [<em>bug</em>, <em>ssl-sample</em>, <em>minor</em>]</li></ul><div>Tags: configuration h2/h3 bug htx tools doc proxy git-show-backports tcpcheck jws spoe mworker http-ana scripts ssl-sample medium build mjson stream cleanup sockpair config minor backend memprof </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</guid>
			<title>HAProxy Enterprise 3.3r1 (2026-03-18)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Wed, 18 Mar 2026 00:00:00 +0000</pubDate>
			<category>minor</category>
			<category>promex</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟢 Minor</strong> <span>Export "haproxy_sticktable_local_updates" metric</span> [<em>promex</em>, <em>minor</em>]</li></ul><div>Tags: minor promex </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</guid>
			<title>HAProxy Enterprise 3.3r1 (2026-03-18)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Wed, 18 Mar 2026 00:00:00 +0000</pubDate>
			<category>configuration</category>
			<category>h2/h3</category>
			<category>bug</category>
			<category>htx</category>
			<category>tools</category>
			<category>doc</category>
			<category>proxy</category>
			<category>tcpcheck</category>
			<category>jws</category>
			<category>spoe</category>
			<category>mworker</category>
			<category>http-ana</category>
			<category>medium</category>
			<category>shctx</category>
			<category>build</category>
			<category>mjson</category>
			<category>stream</category>
			<category>cleanup</category>
			<category>sockpair</category>
			<category>config</category>
			<category>minor</category>
			<category>ssl</category>
			<category>memprof</category>
			<category>activity</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li>🏗️ <span>Remove unsused variable</span> [<em>build</em>, <em>spoe</em>]</li><li><strong>🟢 Minor</strong> <span>Fix condition to abort processing on client abort</span> [<em>bug</em>, <em>spoe</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Make mystrtod() length-aware to prevent out-of-bounds reads</span> [<em>bug</em>, <em>mjson</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix crash in stream dump if the current rule has no keyword</span> [<em>bug</em>, <em>stream</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Do not forget to validate quic-initial rules</span> [<em>bug</em>, <em>proxy</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Swap l7 buffer with request buffer by hand</span> [<em>bug</em>, <em>http-ana</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Never insert partial headers/trailers in an htx message</span> [<em>bug</em>, <em>h2/h3</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Add function to truncate all blocks after a specific block</span> [<em>htx</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Only test number of trailers inserted in htx message</span> [<em>bug</em>, <em>h2/h3</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Properly abort processing on client abort</span> [<em>bug</em>, <em>spoe</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Properly switch spoe filter to waiting_ack state</span> [<em>bug</em>, <em>spoe</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set fd_cloexec on fd received via scm_rights</span> [<em>bug</em>, <em>sockpair</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Avoid passing null version in proc list serialization</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Set a timeout on the worker socketpair read at startup</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix typo &= instead of & in proc list serialization</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Only match worker processes when looking for unspawned proc</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Attempt different retry slots for different hashes on collision</span> [<em>memprof</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Extend the pointer hashing code to ease manipulations</span> [<em>tools</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Use dynamic allocation for "show profiling" entries</span> [<em>activity</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Avoid a small memory leak in "show profiling"</span> [<em>bug</em>, <em>memprof</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Don't report read data as early data with aws-lc</span> [<em>bug</em>, <em>ssl</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Always stop the receiving listener</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Handle receiving early data with boringssl/aws-lc</span> [<em>bug</em>, <em>ssl</em>, <em>medium</em>]</li><li><strong>🧹 Cleanup</strong> <span>Update mentions of the old "global parameters" section</span> [<em>doc</em>, <em>config</em>, <em>cleanup</em>]</li><li>📝 <span>Http-check expect example typo</span> [<em>doc</em>, <em>configuration</em>]</li><li><strong>🟢 Minor</strong> <span>Fix memory leak in jws_b64_signature</span> [<em>bug</em>, <em>jws</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix typo in error error message for `http-check expect`</span> [<em>bug</em>, <em>tcpcheck</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Don't set the proc_o_leaving flag on master process</span> [<em>bug</em>, <em>mworker</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Use the next block when data exactly filled a block</span> [<em>bug</em>, <em>shctx</em>, <em>medium</em>]</li></ul><div>Tags: configuration h2/h3 bug htx tools doc proxy tcpcheck jws spoe mworker http-ana medium shctx build mjson stream cleanup sockpair config minor ssl memprof activity </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-3r1/changelog</guid>
			<title>HAProxy Enterprise 3.3r1 (2026-03-10)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Tue, 10 Mar 2026 00:00:00 +0000</pubDate>
			<category>bug</category>
			<category>quic</category>
			<category>major</category>
			<category>promex</category>
			<category>fcgi</category>
			<category>filters</category>
			<category>doc</category>
			<category>hlua</category>
			<category>git-show-backports</category>
			<category>stconn</category>
			<category>mux-fcgi</category>
			<category>hpack</category>
			<category>channel</category>
			<category>http-ana</category>
			<category>resolvers</category>
			<category>scripts</category>
			<category>mux-h2</category>
			<category>ssl-sample</category>
			<category>medium</category>
			<category>admin</category>
			<category>net_helper</category>
			<category>sample</category>
			<category>stream</category>
			<category>config</category>
			<category>h1-htx</category>
			<category>minor</category>
			<category>debug</category>
			<category>backend</category>
			<category>qpack</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>⚪ </strong> <span>Add a restart-from-last option</span> [<em>scripts</em>, <em>git-show-backports</em>]</li><li><strong>⚪ </strong> <span>Hide the common ancestor warning in quiet mode</span> [<em>scripts</em>, <em>git-show-backports</em>]</li><li><strong>🟢 Minor</strong> <span>Haproxy-reload rename -vv long option</span> [<em>bug</em>, <em>admin</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Don't get proto to use for webscoket if there is no server</span> [<em>bug</em>, <em>backend</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix sample_conv_sha2() by checking evp_digest* failures</span> [<em>bug</em>, <em>ssl-sample</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Increase sc bytes_out value in se_done_ff()</span> [<em>bug</em>, <em>stconn</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Fix end of request detection when retrieving payload</span> [<em>bug</em>, <em>hlua</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Properly enable/disable line receives from http applet</span> [<em>bug</em>, <em>hlua</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Use a safe loop to resume each stream eligible for sending</span> [<em>bug</em>, <em>mux-fcgi</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Properly lowered the names found in dns response</span> [<em>bug</em>, <em>resolvers</em>, <em>major</em>]</li><li><strong>🔴 Major</strong> <span>Fix param decoding by properly checking its size</span> [<em>bug</em>, <em>fcgi</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Increment scf bytes_out value if an haproxy error is sent</span> [<em>bug</em>, <em>http-ana</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix sample to retrieve the number of bytes received and sent</span> [<em>bug</em>, <em>sample</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Increase the stconn bytes_in value in channel_add_input()</span> [<em>bug</em>, <em>channel</em>, <em>minor</em>]</li><li>📝 <span>Use the right alias for %b</span> [<em>doc</em>, <em>config</em>]</li><li><strong>🟢 Minor</strong> <span>Set last_entity when a filter fails on stream_start callback</span> [<em>filters</em>, <em>minor</em>]</li><li><strong>⚪ </strong> <span>Display the currently running rule in stream dump</span> [<em>debug</em>, <em>stream</em>]</li><li><strong>🟢 Minor</strong> <span>Be sure that h1 response version starts by "http/"</span> [<em>bug</em>, <em>h1-htx</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Correctly deal with too large decoded numbers</span> [<em>bug</em>, <em>qpack</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix oob read in preferred_address transport parameter</span> [<em>bug</em>, <em>quic</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Fix 1-byte oob read in qpack_decode_fs_pfx()</span> [<em>bug</em>, <em>qpack</em>, <em>minor</em>]</li><li><strong>🔴 Major</strong> <span>Unchecked length passed to huffman decoder</span> [<em>bug</em>, <em>qpack</em>, <em>major</em>]</li><li><strong>🟡 Medium</strong> <span>Correctly deal with too large decoded numbers</span> [<em>bug</em>, <em>hpack</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Handle task_woken_res as a stream event</span> [<em>bug</em>, <em>stream</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix server iteration when last server is deleted</span> [<em>bug</em>, <em>promex</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Make sure to always report pending errors to the stream</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Add a new setting, "tune.h2.log-errors" to tweak error logging</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Also count glitches on invalid trailers</span> [<em>mux-h2</em>, <em>minor</em>]</li><li><strong>🟢 Minor</strong> <span>Extend the ip.fp output with an option presence mask</span> [<em>net_helper</em>, <em>minor</em>]</li></ul><div>Tags: bug quic major promex fcgi filters doc hlua git-show-backports stconn mux-fcgi hpack channel http-ana resolvers scripts mux-h2 ssl-sample medium admin net_helper sample stream config h1-htx minor debug backend qpack </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-4r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-4r1/changelog</guid>
			<title>HAProxy Enterprise 2.4r1 (2026-03-09)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Mon, 09 Mar 2026 00:00:00 +0000</pubDate>
			<category>bug</category>
			<category>minor</category>
			<category>backend</category>
			<category>scripts</category>
			<category>git-show-backports</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>⚪ </strong> <span>Add a restart-from-last option</span> [<em>scripts</em>, <em>git-show-backports</em>]</li><li><strong>⚪ </strong> <span>Hide the common ancestor warning in quiet mode</span> [<em>scripts</em>, <em>git-show-backports</em>]</li><li><strong>🟢 Minor</strong> <span>Don't get proto to use for webscoket if there is no server</span> [<em>bug</em>, <em>backend</em>, <em>minor</em>]</li></ul><div>Tags: bug minor backend scripts git-show-backports </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-4r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-4r1/changelog</guid>
			<title>HAProxy Enterprise 2.4r1 (2026-03-05)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Thu, 05 Mar 2026 00:00:00 +0000</pubDate>
			<category>medium</category>
			<category>bug</category>
			<category>major</category>
			<category>mux-fcgi</category>
			<category>fcgi</category>
			<category>h1-htx</category>
			<category>hpack</category>
			<category>minor</category>
			<category>ci</category>
			<category>github</category>
			<category>resolvers</category>
			<category>vtest</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Use a safe loop to resume each stream eligible for sending</span> [<em>bug</em>, <em>mux-fcgi</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Properly lowered the names found in dns response</span> [<em>bug</em>, <em>resolvers</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Always normalize fqdn from response</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🔴 Major</strong> <span>Fix param decoding by properly checking its size</span> [<em>bug</em>, <em>fcgi</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Be sure that h1 response version starts by "http/"</span> [<em>bug</em>, <em>h1-htx</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Correctly deal with too large decoded numbers</span> [<em>bug</em>, <em>hpack</em>, <em>medium</em>]</li><li>🪛 <span>Disable windows.yml by default on unofficials repo</span> [<em>ci</em>, <em>github</em>]</li><li>🪛 <span>Move the vtest2 url to vinyl-cache.org</span> [<em>ci</em>, <em>vtest</em>]</li></ul><div>Tags: medium bug major mux-fcgi fcgi h1-htx hpack minor ci github resolvers vtest </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-6r1/changelog</guid>
			<title>HAProxy Enterprise 2.6r1 (2026-03-05)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Thu, 05 Mar 2026 00:00:00 +0000</pubDate>
			<category>medium</category>
			<category>bug</category>
			<category>major</category>
			<category>mux-fcgi</category>
			<category>fcgi</category>
			<category>h1-htx</category>
			<category>hpack</category>
			<category>minor</category>
			<category>ci</category>
			<category>github</category>
			<category>qpack</category>
			<category>resolvers</category>
			<category>vtest</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Use a safe loop to resume each stream eligible for sending</span> [<em>bug</em>, <em>mux-fcgi</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Properly lowered the names found in dns response</span> [<em>bug</em>, <em>resolvers</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Always normalize fqdn from response</span> [<em>bug</em>, <em>resolvers</em>, <em>minor</em>]</li><li><strong>🔴 Major</strong> <span>Fix param decoding by properly checking its size</span> [<em>bug</em>, <em>fcgi</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Be sure that h1 response version starts by "http/"</span> [<em>bug</em>, <em>h1-htx</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Correctly deal with too large decoded numbers</span> [<em>bug</em>, <em>qpack</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix 1-byte oob read in qpack_decode_fs_pfx()</span> [<em>bug</em>, <em>qpack</em>, <em>minor</em>]</li><li><strong>🔴 Major</strong> <span>Unchecked length passed to huffman decoder</span> [<em>bug</em>, <em>qpack</em>, <em>major</em>]</li><li><strong>🟡 Medium</strong> <span>Correctly deal with too large decoded numbers</span> [<em>bug</em>, <em>hpack</em>, <em>medium</em>]</li><li>🪛 <span>Disable windows.yml by default on unofficials repo</span> [<em>ci</em>, <em>github</em>]</li><li>🪛 <span>Move the vtest2 url to vinyl-cache.org</span> [<em>ci</em>, <em>vtest</em>]</li></ul><div>Tags: medium bug major mux-fcgi fcgi h1-htx hpack minor ci github qpack resolvers vtest </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/2-8r1/changelog</guid>
			<title>HAProxy Enterprise 2.8r1 (2026-03-05)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Thu, 05 Mar 2026 00:00:00 +0000</pubDate>
			<category>medium</category>
			<category>bug</category>
			<category>major</category>
			<category>mux-fcgi</category>
			<category>fcgi</category>
			<category>h1-htx</category>
			<category>hpack</category>
			<category>minor</category>
			<category>ci</category>
			<category>github</category>
			<category>qpack</category>
			<category>resolvers</category>
			<category>vtest</category>
			<category>mux-h2</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Use a safe loop to resume each stream eligible for sending</span> [<em>bug</em>, <em>mux-fcgi</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Properly lowered the names found in dns response</span> [<em>bug</em>, <em>resolvers</em>, <em>major</em>]</li><li><strong>🔴 Major</strong> <span>Fix param decoding by properly checking its size</span> [<em>bug</em>, <em>fcgi</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Be sure that h1 response version starts by "http/"</span> [<em>bug</em>, <em>h1-htx</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Correctly deal with too large decoded numbers</span> [<em>bug</em>, <em>qpack</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix 1-byte oob read in qpack_decode_fs_pfx()</span> [<em>bug</em>, <em>qpack</em>, <em>minor</em>]</li><li><strong>🔴 Major</strong> <span>Unchecked length passed to huffman decoder</span> [<em>bug</em>, <em>qpack</em>, <em>major</em>]</li><li><strong>🟡 Medium</strong> <span>Correctly deal with too large decoded numbers</span> [<em>bug</em>, <em>hpack</em>, <em>medium</em>]</li><li><strong>🟡 Medium</strong> <span>Make sure to always report pending errors to the stream</span> [<em>bug</em>, <em>mux-h2</em>, <em>medium</em>]</li><li>🪛 <span>Disable windows.yml by default on unofficials repo</span> [<em>ci</em>, <em>github</em>]</li><li>🪛 <span>Move the vtest2 url to vinyl-cache.org</span> [<em>ci</em>, <em>vtest</em>]</li></ul><div>Tags: medium bug major mux-fcgi fcgi h1-htx hpack minor ci github qpack resolvers vtest mux-h2 </div>]]></description>
		</item>
		<item>
			<link>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</link>
			<guid>https://www.haproxy.com/documentation/haproxy-configuration-manual/3-0r1/changelog</guid>
			<title>HAProxy Enterprise 3.0r1 (2026-03-05)</title>
			<author>marketing@haproxy.com (HAProxy Technologies)</author>
			<pubDate>Thu, 05 Mar 2026 00:00:00 +0000</pubDate>
			<category>medium</category>
			<category>bug</category>
			<category>major</category>
			<category>mux-fcgi</category>
			<category>promex</category>
			<category>fcgi</category>
			<category>h1-htx</category>
			<category>hpack</category>
			<category>minor</category>
			<category>qpack</category>
			<category>resolvers</category>
			<description><![CDATA[<ul style='list-style-type:none;'><li><strong>🟡 Medium</strong> <span>Use a safe loop to resume each stream eligible for sending</span> [<em>bug</em>, <em>mux-fcgi</em>, <em>medium</em>]</li><li><strong>🔴 Major</strong> <span>Properly lowered the names found in dns response</span> [<em>bug</em>, <em>resolvers</em>, <em>major</em>]</li><li><strong>🔴 Major</strong> <span>Fix param decoding by properly checking its size</span> [<em>bug</em>, <em>fcgi</em>, <em>major</em>]</li><li><strong>🟢 Minor</strong> <span>Be sure that h1 response version starts by "http/"</span> [<em>bug</em>, <em>h1-htx</em>, <em>minor</em>]</li><li><strong>🟡 Medium</strong> <span>Correctly deal with too large decoded numbers</span> [<em>bug</em>, <em>qpack</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix 1-byte oob read in qpack_decode_fs_pfx()</span> [<em>bug</em>, <em>qpack</em>, <em>minor</em>]</li><li><strong>🔴 Major</strong> <span>Unchecked length passed to huffman decoder</span> [<em>bug</em>, <em>qpack</em>, <em>major</em>]</li><li><strong>🟡 Medium</strong> <span>Correctly deal with too large decoded numbers</span> [<em>bug</em>, <em>hpack</em>, <em>medium</em>]</li><li><strong>🟢 Minor</strong> <span>Fix server iteration when last server is deleted</span> [<em>bug</em>, <em>promex</em>, <em>minor</em>]</li></ul><div>Tags: medium bug major mux-fcgi promex fcgi h1-htx hpack minor qpack resolvers </div>]]></description>
		</item>
	</channel>
</rss>
