Ubuntu unattended-upgrades introduces HAProxy 2.4.30 regression

news.ycombinator.com2 min read

An Ubuntu unattended-upgrades backport of CVE-2026-110354 for HAProxy version 2.4.30 introduces a major regression causing roughly 50 to 70 percent of requests through HAProxy to fail with HTTP 502 errors. The bug affects HTTP/1.1 backends that send chunked responses because the parser incorrectly evaluates released input buffers as full buffers during chunk-size line processing. Affected users can work around the issue by downgrading HAProxy and holding the package version. Open article →