openSUSE-SU-2026:10187-1

csafDEsuse_csaf

haproxy-3.3.3+git0.465d8e2fc-1.1 on GA media

view advisory published 2026-02-12

haproxy-3.3.3+git0.465d8e2fc-1.1 on GA media

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-26081US——
HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected.
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • Fixedhaproxy-0:3.3.3+git0.465d8e2fc-1.1.aarch64 as component of openSUSE Tumbleweed

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedhaproxy-0:3.3.3+git0.465d8e2fc-1.1.ppc64le as component of openSUSE Tumbleweed

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedhaproxy-0:3.3.3+git0.465d8e2fc-1.1.s390x as component of openSUSE Tumbleweed

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedhaproxy-0:3.3.3+git0.465d8e2fc-1.1.x86_64 as component of openSUSE Tumbleweed

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan