Red Hat Product Errata RHSA-2026:55679 - Security Advisory Issued: 2026-08-17 Updated: 2026-08-17 RHSA-2026:55679 - Security Advisory Overview Updated Packages Synopsis Important: haproxy security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for haproxy is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fix(es): haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions (CVE-2026-55204) haproxy: HAProxy: Response smuggling due to integer overflow in FastCGI record length handling (CVE-2026-55203) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2490518 - CVE-2026-55204 haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions BZ - 2490522 - CVE-2026-55203 haproxy: HAProxy: Response smuggling due to integer overflow in FastCGI record length handling CVEs CVE-2026-55203 CVE-2026-55204 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM haproxy-3.0.5-6.el10_2.2.src.rpm SHA-256: a19ae2d9f87a45a5024ae807faada6922c7ef04ad91c2a218068ae6bc6caae08 x86_64 haproxy-3.0.5-6.el10_2.2.x86_64.rpm SHA-256: c0f8ea02a50e64e925c6d1dee057be2af75a9e2731afde8907f19d0ae6fbecfa haproxy-debuginfo-3.0.5-6.el10_2.2.x86_64.rpm SHA-256: be3ed26d40b4b2ac54ceeebdb542241c11bf84e33f54995070400537d4f0d634 haproxy-debugsource-3.0.5-6.el10_2.2.x86_64.rpm SHA-256: 11e5e089970319977b11a2ce1e26636a44cf941fccb6bdf02fc3c122788e20bc Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM haproxy-3.0.5-6.el10_2.2.src.rpm SHA-256: a19ae2d9f87a45a5024ae807faada6922c7ef04ad91c2a218068ae6bc6caae08 x86_64 haproxy-3.0.5-6.el10_2.2.x86_64.rpm SHA-256: c0f8ea02a50e64e925c6d1dee057be2af75a9e2731afde8907f19d0ae6fbecfa haproxy-debuginfo-3.0.5-6.el10_2.2.x86_64.rpm SHA-256: be3ed26d40b4b2ac54ceeebdb542241c11bf84e33f54995070400537d4f0d634 haproxy-debugsource-3.0.5-6.el10_2.2.x86_64.rpm SHA-256: 11e5e089970319977b11a2ce1e26636a44cf941fccb6bdf02fc3c122788e20bc Red Hat Enterprise Linux for IBM z Systems 10 SRPM haproxy-3.0.5-6.el10_2.2.src.rpm SHA-256: a19ae2d9f87a45a5024ae807faada6922c7ef04ad91c2a218068ae6bc6caae08 s390x haproxy-3.0.5-6.el10_2.2.s390x.rpm SHA-256: 9da3f547dd79d70fca8024a22565288e5a0014c7d70ed5619e66f84ba352f6d5 haproxy-debuginfo-3.0.5-6.el10_2.2.s390x.rpm SHA-256: f24fb7b7a3d7912e877a82471c669dfb0d44ea2b7d63ad972a99f42efcea5e99 haproxy-debugsource-3.0.5-6.el10_2.2.s390x.rpm SHA-256: c11f5b68a2d5643fd29da1576c2862d3b9c72f12741f62663e58a8204093b31b Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM haproxy-3.0.5-6.el10_2.2.src.rpm SHA-256: a19ae2d9f87a45a5024ae807faada6922c7ef04ad91c2a218068ae6bc6caae08 s390x haproxy-3.0.5-6.el10_2.2.s390x.rpm SHA-256: 9da3f547dd79d70fca8024a22565288e5a0014c7d70ed5619e66f84ba352f6d5 haproxy-debuginfo-3.0.5-6.el10_2.2.s390x.rpm SHA-256: f24fb7b7a3d7912e877a82471c669dfb0d44ea2b7d63ad972a99f42efcea5e99 haproxy-debugsource-3.0.5-6.el10_2.2.s390x.rpm SHA-256: c11f5b68a2d5643fd29da1576c2862d3b9c72f12741f62663e58a8204093b31b Red Hat Enterprise Linux for Power, little endian 10 SRPM haproxy-3.0.5-6.el10_2.2.src.rpm SHA-256: a19ae2d9f87a45a5024ae807faada6922c7ef04ad91c2a218068ae6bc6caae08 ppc64le haproxy-3.0.5-6.el10_2.2.ppc64le.rpm SHA-256: 2cb7addbb819b4f77aab71d8f2adbde3079ae5d090092ee1be1ef45df4ba0d77 haproxy-debuginfo-3.0.5-6.el10_2.2.ppc64le.rpm SHA-256: 50ab4af4ab4ca5097c3fd02b6d56583c44b025b7ec64a8d8307bf35f0d23c823 haproxy-debugsource-3.0.5-6.el10_2.2.ppc64le.rpm SHA-256: a1bf5e100533fdf3274a46b331c200ae99c4a3833d9c6bc54c0909671bbb08ea Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM haproxy-3.0.5-6.el10_2.2.src.rpm SHA-256: a19ae2d9f87a45a5024ae807faada6922c7ef04ad91c2a218068ae6bc6caae08 ppc64le haproxy-3.0.5-6.el10_2.2.ppc64le.rpm SHA-256: 2cb7addbb819b4f77aab71d8f2adbde3079ae5d090092ee1be1ef45df4ba0d77 haproxy-debuginfo-3.0.5-6.el10_2.2.ppc64le.rpm SHA-256: 50ab4af4ab4ca5097c3fd02b6d56583c44b025b7ec64a8d8307bf35f0d23c823 haproxy-debugsource-3.0.5-6.el10_2.2.ppc64le.rpm SHA-256: a1bf5e100533fdf3274a46b331c200ae99c4a3833d9c6bc54c0909671bbb08ea Red Hat Enterprise Linux for ARM 64 10 SRPM haproxy-3.0.5-6.el10_2.2.src.rpm SHA-256: a19ae2d9f87a45a5024ae807faada6922c7ef04ad91c2a218068ae6bc6caae08 aarch64 haproxy-3.0.5-6.el10_2.2.aarch64.rpm SHA-256: b9030f012edac0262fbac4f092f067c82514ef59824dd6f9a76624aa607aaf25 haproxy-debuginfo-3.0.5-6.el10_2.2.aarch64.rpm SHA-256: c2ce53a4b57eb61164bca71853c2ccc72d05d5ae8b2e1b5142869223600e5312 haproxy-debugsource-3.0.5-6.el10_2.2.aarch64.rpm SHA-256: a5752859aeb7f36b291fe412ad8bf5e515a0c8ba36b8b33b1edd90ebbacad3ba Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 SRPM haproxy-3.0.5-6.el10_2.2.src.rpm SHA-256: a19ae2d9f87a45a5024ae807faada6922c7ef04ad91c2a218068ae6bc6caae08 aarch64 haproxy-3.0.5-6.el10_2.2.aarch64.rpm SHA-256: b9030f012edac0262fbac4f092f067c82514ef59824dd6f9a76624aa607aaf25 haproxy-debuginfo-3.0.5-6.el10_2.2.aarch64.rpm SHA-256: c2ce53a4b57eb61164bca71853c2ccc72d05d5ae8b2e1b5142869223600e5312 haproxy-debugsource-3.0.5-6.el10_2.2.aarch64.rpm SHA-256: a5752859aeb7f36b291fe412ad8bf5e515a0c8ba36b8b33b1edd90ebbacad3ba Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 SRPM haproxy-3.0.5-6.el10_2.2.src.rpm SHA-256: a19ae2d9f87a45a5024ae807faada6922c7ef04ad91c2a218068ae6bc6caae08 aarch64 haproxy-3.0.5-6.el10_2.2.aarch64.rpm SHA-256: b9030f012edac0262fbac4f092f067c82514ef59824dd6f9a76624aa607aaf25 haproxy-debuginfo-3.0.5-6.el10_2.2.aarch64.rpm SHA-256: c2ce53a4b57eb61164bca71853c2ccc72d05d5ae8b2e1b5142869223600e5312 haproxy-debugsource-3.0.5-6.el10_2.2.aarch64.rpm SHA-256: a5752859aeb7f36b291fe412ad8bf5e515a0c8ba36b8b33b1edd90ebbacad3ba Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 SRPM haproxy-3.0.5-6.el10_2.2.src.rpm SHA-256: a19ae2d9f87a45a5024ae807faada6922c7ef04ad91c2a218068ae6bc6caae08 s390x haproxy-3.0.5-6.el10_2.2.s390x.rpm SHA-256: 9da3f547dd79d70fca8024a22565288e5a0014c7d70ed5619e66f84ba352f6d5 haproxy-debuginfo-3.0.5-6.el10_2.2.s390x.rpm SHA-256: f24fb7b7a3d7912e877a82471c669dfb0d44ea2b7d63ad972a99f42efcea5e99 haproxy-debugsource-3.0.5-6.el10_2.2.s390x.rpm SHA-256: c11f5b68a2d5643fd29da1576c2862d3b9c72f12741f62663e58a8204093b31b Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 SRPM haproxy-3.0.5-6.el10_2.2.src.rpm SHA-256: a19ae2d9f87a45a5024ae807faada6922c7ef04ad91c2a218068ae6bc6caae08 ppc64le haproxy-3.0.5-6.el10_2.2.ppc64le.rpm SHA-256: 2cb7addbb819b4f77aab71d8f2adbde3079ae5d090092ee1be1ef45df4ba0d77 haproxy-debuginfo-3.0.5-6.el10_2.2.ppc64le.rpm SHA-256: 50ab4af4ab4ca5097c3fd02b6d56583c44b025b7ec64a8d8307bf35f0d23c823 haproxy-debugsource-3.0.5-6.el10_2.2.ppc64le.rpm SHA-256: a1bf5e100533fdf3274a46b331c200ae99c4a3833d9c6bc54c0909671bbb08ea Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 SRPM haproxy-3.0.5-6.el10_2.2.src.rpm SHA-256: a19ae2d9f87a45a5024ae807faada6922c7ef04ad91c2a218068ae6bc6caae08 x86_64 haproxy-3.0.5-6.el10_2.2.x86_64.rpm SHA-256: c0f8ea02a50e64e925c6d1dee057be2af75a9e2731afde8907f19d0ae6fbecfa haproxy-debuginfo-3.0.5-6.el10_2.2.x86_64.rpm SHA-256: be3ed26d40b4b2ac54ceeebdb542241c11bf84e33f54995070400537d4f0d634 haproxy-debugsource-3.0.5-6.el10_2.2.x86_64.rpm SHA-256: 11e5e089970319977b11a2ce1e26636a44cf941fccb6bdf02fc3c122788e20bc Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 SRPM haproxy-3.0.5-6.el10_2.2.src.rpm SHA-256: a19ae2d9f87a45a5024ae807faada6922c7ef04ad91c2a218068ae6bc6caae08 x86_64 haproxy-3.0.5-6.el10_2.2.x86_64.rpm SHA-256: c0f8ea02a50e64e925c6d1dee057be2af75a9e2731afde8907f19d0ae6fbecfa haproxy-debuginfo-3.0.5-6.el10_2.2.x86_64.rpm SHA-256: be3ed26d40b4b2ac54ceeebdb542241c11bf84e33f54995070400537d4f0d634 haproxy-debugsource-3.0.5-6.el10_2.2.x86_64.rpm SHA-256: 11e5e089970319977b11a2ce1e26636a44cf941fccb6bdf02fc3c122788e20bc Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 SRPM haproxy