> ## Content Index
> Fetch the complete content index at: https://stackurity.ai/blog/llms.txt
> Use this file to discover other available public pages before exploring further.

# Ubuntu USN-8972-2 fixes a HAProxy update regression
- URL: https://stackurity.ai/blog/ubuntu-usn-8972-2-haproxy-regression-fix/
- Published: 2026-11-05T20:35:03.000Z
- Updated: 2026-11-05T20:35:03.000Z
- Description: Ubuntu USN-8972-2 repairs a regression from the HAProxy update on 22.04 LTS. See who is affected, how to check a server and how to confirm the fix.
- Author: Stackurity Research Team
- Tags: Linux Servers, News

**TL;DR:** Ubuntu USN-8972-2 repairs a regression that the HAProxy update USN-8972-1 caused on Ubuntu 22.04 LTS. If you held that update back, take the new package instead.

## What happened

Ubuntu Security Notices [published USN-8972-2](https://ubuntu.com/security/notices/USN-8972-2) on November 5, 2026\. USN-8972-1 fixed two denial of service flaws in HAProxy, CVE-2026-110353 and CVE-2026-110354\. On Ubuntu 22.04 LTS that first update broke the handling of some chunked requests, and this second notice fixes the break.

The underlying flaws let a remote attacker without credentials tie up HAProxy worker threads. The National Vulnerability Database describes CVE-2026-110353 as a truncated HTTP/2 ping frame problem and CVE-2026-110354 as a chunked request problem, and both are scored 7.5 on CVSS v3.1 by MITRE.

## Am I affected?

You are affected if you run HAProxy from the Ubuntu package. A server on Ubuntu 22.04 LTS that installed the first update may be rejecting some requests, and a server that postponed it is still open to the two flaws. Run `haproxy -v` to see the installed version and compare it with the version in the notice. HAProxy in a container image is separate from the host package.

## How to check with Stackurity

Stackurity reads installed packages on Ubuntu servers and matches them against vendor advisories every hour, backports included, so you can list every server that still needs the corrected HAProxy package. Appliance firmware is not covered, and neither are copies of software bundled outside a package manager. After you update, check again records whether the issue is gone. See [how Stackurity handles fixes](https://stackurity.ai/docs/remediation). Stackurity Cloud has a 14-day free trial without a card: [Start a free trial](https://app.stackurity.dev/signup?utm%5Fsource=blog&utm%5Fmedium=referral&utm%5Fcampaign=linux-servers&utm%5Fcontent=ubuntu-usn-8972-2-haproxy-regression-fix).