The current version of HAProxy is 3.4.6 (as of 28/09/2026). patchletter checks the official source daily and emails you new releases.
BSI security advisories
Advisories the German BSI (CERT-Bund) published for this product. Whether your version is affected is stated in the advisory itself.
- HAProxy: Mehrere Schwachstellen
WID-SEC-W-2026-2012 · 5 Oct
- Rsync: Mehrere Schwachstellen
WID-SEC-W-2025-0084 · 5 Oct
- OpenSSH: Schwachstelle ermöglicht Codeausführung
WID-SEC-W-2024-1486 · 16 Sept
- HAProxy: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
WID-SEC-W-2026-3323 · 14 Sept
- HAProxy Enterprise, Community und ALOHA (QUIC): Mehrere Schwachstellen ermöglichen Denial of Service
WID-SEC-W-2026-0410 · 22 Jul
- HAProxy: Schwachstelle ermöglicht Manipulation von Dateien
WID-SEC-W-2026-1074 · 26 May
HAProxy at a glance
HAProxy is a high-performance load balancer and reverse proxy, widely used in front of demanding web applications and APIs. HAProxy ships regular releases across LTS and standard branches plus coordinated security fixes; as a component in the traffic path, timely patching matters.
For admins the LTS branch is the calmer choice for production. Updates are usually low-risk (swap the binary; a brief reload), but sit them in a maintenance window since a restart interrupts connections. Larger jumps can bring configuration changes — check the changelogs. HAProxy sees all the traffic and often terminates TLS, so treat its config as security-critical: current TLS settings, sane timeouts, no exposed stats. For critical security advisories (request smuggling and the like), patch promptly. Track the branch's support window.
Support cycles (endoflife.date)
| Cycle | Latest version | Status |
|---|---|---|
| 3.4LTS | 3.4.6 | EOL 1 Apr 31 |
| 3.3 | 3.3.16 | EOL in 82 days |
| 3.2LTS | 3.2.25 | EOL 1 Apr 30 |
| 3.1 | 3.1.17 | End of Life |
| 3.0LTS | 3.0.29 | EOL 1 Apr 29 |
| 2.9 | 2.9.15 | End of Life |
| 2.8LTS | 2.8.30 | EOL 1 Apr 28 |
| 2.7 | 2.7.12 | End of Life |
Version history & changelog · as detected by patchletter
| Version | Channel | Date | Notes |
|---|---|---|---|
| 3.4.6 | LTS | 28/09/2026 | – |
| 3.4.5 | LTS | 24/09/2026 | – |
| 3.4.4 | LTS | 27/08/2026 | – |
| 3.4.3 | LTS | 29/07/2026 | – |
| 3.4.2 | LTS | 03/07/2026 | – |
Frequently asked questions
- What is the latest version of HAProxy?
- HAProxy 3.4.6, released 28/09/2026. patchletter checks the vendor's official source daily for new releases.
- Where can I find the HAProxy release notes?
- The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
- How do I get notified about new HAProxy updates?
- Tick HAProxy off in the catalogue and leave your address. From then on new versions go out by email — one at a time, or bundled in the daily or weekly digest.
An email as soon as a new HAProxy version ships
We reconcile the vendor source daily. When a new version appears, it lands in your inbox right away or bundled as a digest. The update email is free and ends with one click. Alerts about vulnerabilities and end of support are part of patchletter Pro.
Embed this badge
The badge shows the current HAProxy version and keeps it up to date. Anyone may embed it, no account needed.
[](https://patchletter.com/en/software/haproxy)https://patchletter.com/badge/haproxy.svgAlso available: ?v=eol (end of support) and ?v=cve (actively exploited).