Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 1

Vulnerabilities 1

• Medium 4.0
  CVE-2026-33555 Public exploit

  An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches…

  HAProxy HAProxy haproxy haproxy Debian Ubuntu Azure Linux Wolfi
  Apr 13, 2026

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-33555
• article
  https://access.redhat.com/security/updates/classification/
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8749.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2457920
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-33555
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-33555
• article
  https://github.com/haproxy/haproxy/commit/05a295441c621089ffa4318daf0dbca2dd756a84
• article
  https://www.haproxy.com/documentation/haproxy-aloha/changelog/
• article
  https://www.haproxy.org
• article
  https://www.mail-archive.com/haproxy@formilux.org/msg46752.html