Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

This security advisory from Red Hat addresses vulnerabilities in the haproxy package included in Red Hat Hardened Images RPMs. The update provides patched versions haproxy-3.0.25-0.1.1.hum1 for aarch64 and x86_64 architectures. The advisory references CVE-2026-26080 and CVE-2026-26081, indicating fixes for these vulnerabilities. The advisory does not detail the specific nature of the vulnerabilities beyond referencing CWE identifiers (CWE-252, CWE-835, CWE-120), which relate to unchecked return values, loop bounds issues, and buffer overflows respectively. The update is officially released by Red Hat and is available for application.

The vulnerabilities addressed could potentially allow attackers to exploit issues related to unchecked return values, improper loop bounds, or buffer overflows in haproxy within Red Hat Hardened Images. The advisory classifies the severity as medium. No known exploits in the wild have been reported at this time.

An official patch is available from Red Hat as part of the update to haproxy-3.0.25-0.1.1.hum1 RPMs. Users of affected Red Hat Hardened Images should apply this update promptly following Red Hat's guidance. No additional mitigation steps are specified in the advisory.