Red Hat Security Advisory

RHSA-2026:83844

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-10-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images haproxy-3.0.30-0.1.hum1@aarch64, haproxy-3.0.30-0.1.hum1@s390x, haproxy-3.0.30-0.1.hum1@src +1

Fixes 2 records

TI-2026-79141 CVE-2026-110354 · GHSA-vqpp-w68q-p3f5

Persistent CPU exhaustion in HAProxy via chunked HTTP requests

MEDIUM 40

HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00807 Published 2026-10-22 Partial fix · 3.0.30, 3.2.26 +10 CWE-835

TI-2026-79140 CVE-2026-110353 · GHSA-p9cc-qc4f-7x35

Denial of service in HAProxy via truncated HTTP/2 PING frame

MEDIUM 40

HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00738 Published 2026-10-22 Partial fix · 3.2.26, 3.3.17 +8 CWE-252