Hi, HAProxy 2.6.31 was released on 2026/07/03. It added 4 new commits after version 2.6.30.
This release is similar to the 2.8.26 and was emitted for the same reason. It fixed an issue concerning the HTX API and affecting the FCGI. Crashes could be experienced. This issue was revealed by a fix shipped in the 2.6.30. Because it was released one week ago and probably not widely deployed yet, we've decided to emit the 2.6.31 right away to prevent any trouble. So, if you are running the 2.6.30 and you are using the FCGI, you must upgrade. Otherwise, there is no reason to rush. While the H2 and QUIC are theoretically affected, it seems pretty hard to hit this bug, except with a misbehaving configuration. Otherwise, one pending fix was brought with this release. The function responsible to merge Cookie header value during the message parsing in H2 and QUIC was fixed to respect the HTX API. The bug was ineffective but was waiting to be discovered. Thanks everyone for your help on this release ! Please find the usual URLs below : Site index : https://www.haproxy.org/ Documentation : https://docs.haproxy.org/ Wiki : https://github.com/haproxy/wiki/wiki Discourse : https://discourse.haproxy.org/ Slack channel : https://slack.haproxy.org/ Issue tracker : https://github.com/haproxy/haproxy/issues Sources : https://www.haproxy.org/download/2.6/src/ Git repository : https://git.haproxy.org/git/haproxy-2.6.git/ Git Web browsing : https://git.haproxy.org/?p=haproxy-2.6.git Changelog : https://www.haproxy.org/download/2.6/src/CHANGELOG Dataplane API : https://github.com/haproxytech/dataplaneapi/releases/latest Pending bugs : https://www.haproxy.org/l/pending-bugs Reviewed bugs : https://www.haproxy.org/l/reviewed-bugs Code reports : https://www.haproxy.org/l/code-reports Latest builds : https://www.haproxy.org/l/dev-packages --- Complete changelog : Alexander Stephan (1): BUG/MINOR: sample: set SMP_F_CONST on srv_name fetch Christopher Faulet (2): BUG/MAJOR: htx: Don't swap buffers for empty HTX message with an error BUG/MINOR: http-htx: Don't by-pass HTX API when merging cookie values Huangbin Zhan (1): BUG/MINOR: tools: fix invalid character detection in strl2ic() -- Christopher Faulet
