Tested 2.4.30-0ubuntu0.22.04.4 from ppa:ubuntu-security-proposed (jammy, amd64, sha256 dc19d020ac04e1c3afa7ca05331bb19bbab5b92057eb87de5b69d5c89a8e430e, matches the PPA index). Not installed: extracted and run as throwaway loopback instances next to .22.04.2 and .22.04.3, identical configuration.
Chunked responses, synthetic backend (24576/28672/28672/9073 chunks with and without delays, 100x700, 16x65536, chunk extension, trailer, Content-Length), 3 runs each: .2: 21/21 .3: 4/21 .4: 21/21 Real backend (nginx 1.31.7, gzip, chunked JS bundles): .2 9/9, .3 0/9, .4 9/9. Requests (tune.bufsize 1024): valid chunked request, 1000-byte chunk and chunk-size line split across three sends return 200 on all three versions. A chunk-size line longer than the buffer returns 400 immediately on .3 and .4 (.2 not tested). So .4 fixes the regression and keeps the CVE-2026-110354 protection. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2172897 Title: haproxy 2.4.30-0ubuntu0.22.04.3: CVE-2026-110354 backport causes intermittent 502 (PH) on valid chunked responses To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/haproxy/+bug/2172897/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
