Red Hat Product Errata RHSA-2026:55772 - Security Advisory Issued: 2026-08-17 Updated: 2026-08-17 RHSA-2026:55772 - Security Advisory Overview Updated Packages Synopsis Important: haproxy security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for haproxy is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fix(es): haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions (CVE-2026-55204) haproxy: HAProxy: Response smuggling due to integer overflow in FastCGI record length handling (CVE-2026-55203) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2490518 - CVE-2026-55204 haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions BZ - 2490522 - CVE-2026-55203 haproxy: HAProxy: Response smuggling due to integer overflow in FastCGI record length handling CVEs CVE-2026-55203 CVE-2026-55204 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM haproxy-2.8.14-3.el9_8.2.src.rpm SHA-256: 04de0ebef64926c6f0bd51fdc9e3b0a6e95b996198dd5af66df05a291c455e51 x86_64 haproxy-2.8.14-3.el9_8.2.x86_64.rpm SHA-256: 12cf9af1ee55414a71f822f2b2803dfd38abd7952b868e38774a81185c397365 haproxy-debuginfo-2.8.14-3.el9_8.2.x86_64.rpm SHA-256: c22e1c8dd3556e3501228b903ae367d0094d9d42e8f3c03de2a55e872be32cc9 haproxy-debugsource-2.8.14-3.el9_8.2.x86_64.rpm SHA-256: fdad734384384578387238de87f2588f17fab962e9d3fa9a4825822b8327a495 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM haproxy-2.8.14-3.el9_8.2.src.rpm SHA-256: 04de0ebef64926c6f0bd51fdc9e3b0a6e95b996198dd5af66df05a291c455e51 x86_64 haproxy-2.8.14-3.el9_8.2.x86_64.rpm SHA-256: 12cf9af1ee55414a71f822f2b2803dfd38abd7952b868e38774a81185c397365 haproxy-debuginfo-2.8.14-3.el9_8.2.x86_64.rpm SHA-256: c22e1c8dd3556e3501228b903ae367d0094d9d42e8f3c03de2a55e872be32cc9 haproxy-debugsource-2.8.14-3.el9_8.2.x86_64.rpm SHA-256: fdad734384384578387238de87f2588f17fab962e9d3fa9a4825822b8327a495 Red Hat Enterprise Linux for IBM z Systems 9 SRPM haproxy-2.8.14-3.el9_8.2.src.rpm SHA-256: 04de0ebef64926c6f0bd51fdc9e3b0a6e95b996198dd5af66df05a291c455e51 s390x haproxy-2.8.14-3.el9_8.2.s390x.rpm SHA-256: edde8c2ee0fb09c67b7890097f8c30b7f37780aadf072b6ee4607c9084045d38 haproxy-debuginfo-2.8.14-3.el9_8.2.s390x.rpm SHA-256: f3030dfdbf15de12a41b06c7888e4b2825e794e8cde1f62f29360836de771b54 haproxy-debugsource-2.8.14-3.el9_8.2.s390x.rpm SHA-256: 43b64d72d5861c951aba162c078bfcd0a2ec4bd4be2fc923e79442b3d512be4d Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM haproxy-2.8.14-3.el9_8.2.src.rpm SHA-256: 04de0ebef64926c6f0bd51fdc9e3b0a6e95b996198dd5af66df05a291c455e51 s390x haproxy-2.8.14-3.el9_8.2.s390x.rpm SHA-256: edde8c2ee0fb09c67b7890097f8c30b7f37780aadf072b6ee4607c9084045d38 haproxy-debuginfo-2.8.14-3.el9_8.2.s390x.rpm SHA-256: f3030dfdbf15de12a41b06c7888e4b2825e794e8cde1f62f29360836de771b54 haproxy-debugsource-2.8.14-3.el9_8.2.s390x.rpm SHA-256: 43b64d72d5861c951aba162c078bfcd0a2ec4bd4be2fc923e79442b3d512be4d Red Hat Enterprise Linux for Power, little endian 9 SRPM haproxy-2.8.14-3.el9_8.2.src.rpm SHA-256: 04de0ebef64926c6f0bd51fdc9e3b0a6e95b996198dd5af66df05a291c455e51 ppc64le haproxy-2.8.14-3.el9_8.2.ppc64le.rpm SHA-256: d99ca75d910fb056b1ee9f7b097c0c54031021dafc5d4fd2037a8e241fb40001 haproxy-debuginfo-2.8.14-3.el9_8.2.ppc64le.rpm SHA-256: 4064708dec61a776f25fb620be3b363d48308603a5a0259f08333d8ead232b08 haproxy-debugsource-2.8.14-3.el9_8.2.ppc64le.rpm SHA-256: 0931a3f08ab2a208db461a413c19428235b76d8ef7821aae9d29b779e2798fce Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM haproxy-2.8.14-3.el9_8.2.src.rpm SHA-256: 04de0ebef64926c6f0bd51fdc9e3b0a6e95b996198dd5af66df05a291c455e51 ppc64le haproxy-2.8.14-3.el9_8.2.ppc64le.rpm SHA-256: d99ca75d910fb056b1ee9f7b097c0c54031021dafc5d4fd2037a8e241fb40001 haproxy-debuginfo-2.8.14-3.el9_8.2.ppc64le.rpm SHA-256: 4064708dec61a776f25fb620be3b363d48308603a5a0259f08333d8ead232b08 haproxy-debugsource-2.8.14-3.el9_8.2.ppc64le.rpm SHA-256: 0931a3f08ab2a208db461a413c19428235b76d8ef7821aae9d29b779e2798fce Red Hat Enterprise Linux for ARM 64 9 SRPM haproxy-2.8.14-3.el9_8.2.src.rpm SHA-256: 04de0ebef64926c6f0bd51fdc9e3b0a6e95b996198dd5af66df05a291c455e51 aarch64 haproxy-2.8.14-3.el9_8.2.aarch64.rpm SHA-256: a264918fe451a196bf5100d101e3fae8ed21da9553eee6e388dc0a8f5a0dbf7c haproxy-debuginfo-2.8.14-3.el9_8.2.aarch64.rpm SHA-256: 92e747b9b4f1d65416b0c29cd9932c073f76f3a4b717872e505b0ddd07d1b5e7 haproxy-debugsource-2.8.14-3.el9_8.2.aarch64.rpm SHA-256: 6dcadf4bf7f87c33d78e8c99c8d2a830ab066f3d79703294e2c43e2d3cbaa3ee Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM haproxy-2.8.14-3.el9_8.2.src.rpm SHA-256: 04de0ebef64926c6f0bd51fdc9e3b0a6e95b996198dd5af66df05a291c455e51 aarch64 haproxy-2.8.14-3.el9_8.2.aarch64.rpm SHA-256: a264918fe451a196bf5100d101e3fae8ed21da9553eee6e388dc0a8f5a0dbf7c haproxy-debuginfo-2.8.14-3.el9_8.2.aarch64.rpm SHA-256: 92e747b9b4f1d65416b0c29cd9932c073f76f3a4b717872e505b0ddd07d1b5e7 haproxy-debugsource-2.8.14-3.el9_8.2.aarch64.rpm SHA-256: 6dcadf4bf7f87c33d78e8c99c8d2a830ab066f3d79703294e2c43e2d3cbaa3ee Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM haproxy-2.8.14-3.el9_8.2.src.rpm SHA-256: 04de0ebef64926c6f0bd51fdc9e3b0a6e95b996198dd5af66df05a291c455e51 ppc64le haproxy-2.8.14-3.el9_8.2.ppc64le.rpm SHA-256: d99ca75d910fb056b1ee9f7b097c0c54031021dafc5d4fd2037a8e241fb40001 haproxy-debuginfo-2.8.14-3.el9_8.2.ppc64le.rpm SHA-256: 4064708dec61a776f25fb620be3b363d48308603a5a0259f08333d8ead232b08 haproxy-debugsource-2.8.14-3.el9_8.2.ppc64le.rpm SHA-256: 0931a3f08ab2a208db461a413c19428235b76d8ef7821aae9d29b779e2798fce Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM haproxy-2.8.14-3.el9_8.2.src.rpm SHA-256: 04de0ebef64926c6f0bd51fdc9e3b0a6e95b996198dd5af66df05a291c455e51 x86_64 haproxy-2.8.14-3.el9_8.2.x86_64.rpm SHA-256: 12cf9af1ee55414a71f822f2b2803dfd38abd7952b868e38774a81185c397365 haproxy-debuginfo-2.8.14-3.el9_8.2.x86_64.rpm SHA-256: c22e1c8dd3556e3501228b903ae367d0094d9d42e8f3c03de2a55e872be32cc9 haproxy-debugsource-2.8.14-3.el9_8.2.x86_64.rpm SHA-256: fdad734384384578387238de87f2588f17fab962e9d3fa9a4825822b8327a495 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 SRPM haproxy-2.8.14-3.el9_8.2.src.rpm SHA-256: 04de0ebef64926c6f0bd51fdc9e3b0a6e95b996198dd5af66df05a291c455e51 aarch64 haproxy-2.8.14-3.el9_8.2.aarch64.rpm SHA-256: a264918fe451a196bf5100d101e3fae8ed21da9553eee6e388dc0a8f5a0dbf7c haproxy-debuginfo-2.8.14-3.el9_8.2.aarch64.rpm SHA-256: 92e747b9b4f1d65416b0c29cd9932c073f76f3a4b717872e505b0ddd07d1b5e7 haproxy-debugsource-2.8.14-3.el9_8.2.aarch64.rpm SHA-256: 6dcadf4bf7f87c33d78e8c99c8d2a830ab066f3d79703294e2c43e2d3cbaa3ee Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 SRPM haproxy-2.8.14-3.el9_8.2.src.rpm SHA-256: 04de0ebef64926c6f0bd51fdc9e3b0a6e95b996198dd5af66df05a291c455e51 s390x haproxy-2.8.14-3.el9_8.2.s390x.rpm SHA-256: edde8c2ee0fb09c67b7890097f8c30b7f37780aadf072b6ee4607c9084045d38 haproxy-debuginfo-2.8.14-3.el9_8.2.s390x.rpm SHA-256: f3030dfdbf15de12a41b06c7888e4b2825e794e8cde1f62f29360836de771b54 haproxy-debugsource-2.8.14-3.el9_8.2.s390x.rpm SHA-256: 43b64d72d5861c951aba162c078bfcd0a2ec4bd4be2fc923e79442b3d512be4d Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 SRPM haproxy-2.8.14-3.el9_8.2.src.rpm SHA-256: 04de0ebef64926c6f0bd51fdc9e3b0a6e95b996198dd5af66df05a291c455e51 x86_64 haproxy-2.8.14-3.el9_8.2.x86_64.rpm SHA-256: 12cf9af1ee55414a71f822f2b2803dfd38abd7952b868e38774a81185c397365 haproxy-debuginfo-2.8.14-3.el9_8.2.x86_64.rpm SHA-256: c22e1c8dd3556e3501228b903ae367d0094d9d42e8f3c03de2a55e872be32cc9 haproxy-debugsource-2.8.14-3.el9_8.2.x86_64.rpm SHA-256: fdad734384384578387238de87f2588f17fab962e9d3fa9a4825822b8327a495 Red Hat Enterprise Linux for ARM 64 - Extended Life Cyc