This Red Hat security advisory updates haproxy RPM packages in Red Hat Hardened Images to version 3.0.25-0.1.hum1, addressing two vulnerabilities (CVE-2026-55203 and CVE-2026-55204) related to integer overflow and NULL pointer dereference. The advisory does not provide detailed technical descriptions or CVSS scores but indicates a high severity level. The update is intended to fix these issues and enhance the package stability. No exploits are currently known in the wild. The advisory references the Red Hat errata RHSA-2026:35453 and openSUSE advisory openSUSE-SU-2026:11090-1 for additional context.

The vulnerabilities involve potential integer overflow and NULL pointer dereference issues, which could lead to application crashes or unexpected behavior in haproxy within Red Hat Hardened Images. While no active exploits are known, the high severity rating suggests these issues could impact system stability or security if left unpatched.

A fixed version of haproxy (3.0.25-0.1.hum1) is available and should be applied to affected Red Hat Hardened Images installations. Administrators should update their systems using the official Red Hat update channels as described in the advisory. No additional mitigation steps are indicated or required beyond applying this update.