Skip to content
OpenAdvisories
High ELSA-2026-55679 2 CVEs

Important: haproxy security update (Oracle Linux 10)

Published Aug 17, 2026 · Updated Aug 17, 2026

Ecosystem: Oracle Linux

Summary

[3.0.5-6.2]
- Fix uint16_t overflow in FCGI demux record length (CVE-2026-55203)
Resolves: RHEL-211068
- Fix NULL pointer dereference in hpack_dht_insert() (CVE-2026-55204)
Resolves: RHEL-211081

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 10 haproxy 0:3.0.5-6.el10_2.2

Vulnerabilities 2

  • High 7.5
    CVE-2026-55203

    HAProxy - Integer Overflow in FCGI Demux Record Length Field

    HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers. When contentLength is 65535 and paddingLength is 1 or more, the drl field…

    HAProxy HAProxy haproxy haproxy Debian Ubuntu Azure Linux Wolfi
  • High 7.5
    CVE-2026-55204

    HAProxy - NULL Pointer Dereference in hpack_dht_insert Function

    HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that fails to validate the return value of hpack_dht_defrag() when the memory pool is exhausted. An attacker can tri…

    HAProxy HAProxy haproxy haproxy Debian Ubuntu Azure Linux Wolfi