Public bug reported: After installing the HAProxy security update associated with USN-8972-1 from yesterday https://ubuntu.com/security/notices/USN-8972-1 we experienced frequent HTTP 502 errors on all our instances
Environment: - Ubuntu 22.04 LTS, amd64 - HAProxy forwarding to a local Tomcat backend at 127.0.0.1:8080 - Failing version: 2.4.30-0ubuntu0.22.04.3 - Working version: 2.4.30-0ubuntu0.22.04.2 We performed an A/B test on the same affected VM using both binaries with the same minimal HAProxy configuration and the same running backend: - Revision .3: 9 out of 10 requests returned HTTP 502. - Revision .2: all 10 requests returned HTTP 200. - Direct requests to Tomcat: all 10 requests returned HTTP 200. The minimal proxy was bound to 127.0.0.1:18081 and forwarded to 127.0.0.1:8080, without TLS or caching. This reproduced the failure independently of the production proxy configuration and external routing. Production requests failed with both HTTP/1.1 and HTTP/2 clients. HAProxy logs show PH--. The admin socket command "show errors -1 response" reports: backend tomcat: invalid response len 0, error at position 0 H1 msg state MSG_CHUNK_SIZE(26) Downgrading the production HAProxy package to revision .2 restored service. We have temporarily pinned only revision .3 to prevent reinstallation. The exact underlying cause is unknown. Please investigate this as a regression associated with the security update. Related security notice: https://ubuntu.com/security/notices/USN-8972-1 ** Affects: haproxy (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2172905 Title: [Regression] HAProxy 2.4.30-0ubuntu0.22.04.3 causes frequent HTTP 502 errors after USN-8972-1 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/haproxy/+bug/2172905/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
