Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Red Hat Security Advisory: haproxy security update
published 2 months ago
Summary
No summary available.
What to do
- Update redhat haproxy to version 0:1.8.27-5.el8_8.2.
- Update redhat haproxy-debuginfo to version 0:1.8.27-5.el8_8.2.
- Update redhat haproxy-debugsource to version 0:1.8.27-5.el8_8.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_e4s:8.8::appstream | redhat | haproxy |
< 0:1.8.27-5.el8_8.2 Fix: upgrade to 0:1.8.27-5.el8_8.2
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | haproxy-debuginfo |
< 0:1.8.27-5.el8_8.2 Fix: upgrade to 0:1.8.27-5.el8_8.2
|
| Red Hat:rhel_e4s:8.8::appstream | redhat | haproxy-debugsource |
< 0:1.8.27-5.el8_8.2 Fix: upgrade to 0:1.8.27-5.el8_8.2
|
| Red Hat:rhel_tus:8.8::appstream | redhat | haproxy |
< 0:1.8.27-5.el8_8.2 Fix: upgrade to 0:1.8.27-5.el8_8.2
|
| Red Hat:rhel_tus:8.8::appstream | redhat | haproxy-debuginfo |
< 0:1.8.27-5.el8_8.2 Fix: upgrade to 0:1.8.27-5.el8_8.2
|
| Red Hat:rhel_tus:8.8::appstream | redhat | haproxy-debugsource |
< 0:1.8.27-5.el8_8.2 Fix: upgrade to 0:1.8.27-5.el8_8.2
|
Original advisory text
Red Hat Security Advisory: haproxy security update
References
- https://access.redhat.com/errata/RHSA-2026:55860 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2490518 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55860.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-55204 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-55204 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-55204 Vendor Advisory
- https://github.com/haproxy/haproxy/commit/9a6d1fe3f00d86ab4ea6ea6ea0a5d48fc058a5... Third Party Advisory
- https://www.vulncheck.com/advisories/haproxy-null-pointer-dereference-in-hpack-d... Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published18 Aug 2026
Updated11 Sep 2026
First seen11 Sep 2026
Sources
RHSA-2026:55860 · OSV
Track software like this
Free during beta