Red Hat Security Advisory

RHSA-2026:55862

haproxy security update

Released 2026-08-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.6) haproxy-1.8.27-4.el8_6.2
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) haproxy-1.8.27-4.el8_6.2

Fixes 1 record

TI-2026-39884 CVE-2026-55204 · GHSA-4vj2-5mvx-3vcc

HAProxy - NULL Pointer Dereference in hpack_dht_insert Function

MEDIUM 44

HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that fails to validate the return value of hpack_dht_defrag() when the memory…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00484 Published 2026-06-18 Partial fix CWE-476