Skip to content
OpenAdvisories
High ELSA-2026-55859 1 CVE

Important: haproxy security update (Oracle Linux 8)

Published Aug 17, 2026 · Updated Aug 17, 2026

Ecosystem: Oracle Linux

Summary

[1.8.27-5.2]
- Fix NULL pointer dereference in hpack_dht_insert() (CVE-2026-55204,
RHEL-211083)

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 haproxy 0:1.8.27-5.el8_10.2

Vulnerabilities 1

  • High 7.5
    CVE-2026-55204

    HAProxy - NULL Pointer Dereference in hpack_dht_insert Function

    HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that fails to validate the return value of hpack_dht_defrag() when the memory pool is exhausted. An attacker can tri…

    HAProxy HAProxy haproxy haproxy Debian Ubuntu Azure Linux Wolfi