Linux
haproxy security updates
Patch Radar has 103 security fixes for haproxy, closing 30 CVEs, 1 of which is being exploited. The newest is haproxy 2.8.30-0ubuntu0.24.04.2 (2.8.30-0ubuntu0.24.04.2), released November 4, 2026.
1 exploited CVEs
Latest version
n/a
Release date not known
Security fixes
103
On record in Patch Radar
CVEs
30
Closed by those fixes
Exploited
1
Vendor report or CISA KEV
Security fixes, newest first
| Priority | Fix | Release | Fixed in | CVEs | Exploited | Released |
|---|---|---|---|---|---|---|
| High | haproxy 2.8.30-0ubuntu0.24.04.2 | Ubuntu 24.04.5 LTS (noble) | 2.8.30-0ubuntu0.24.04.2 | 2 | Nov 4, 2026 | |
| High | haproxy 2.4.30-0ubuntu0.22.04.3 | Ubuntu 22.04.1 LTS (jammy) | 2.4.30-0ubuntu0.22.04.3 | 2 | Nov 4, 2026 | |
| High | DEBIAN-CVE-2026-110354 | Debian 12.15 (bookworm) | 2.6.12-1+deb12u4 | 1 | Oct 27, 2026 | |
| High | DEBIAN-CVE-2026-110354 | Debian 13.5 (trixie) | 3.0.11-1+deb13u4 | 1 | Oct 27, 2026 | |
| High | DEBIAN-CVE-2026-110354 | Debian 14 | 3.2.26-1 | 1 | Oct 27, 2026 | |
| High | DEBIAN-CVE-2026-110353 | Debian 14 | 3.2.26-1 | 1 | Oct 25, 2026 | |
| High | RHSA-2026:55772 | RHEL 9 | 0:2.8.14-3.el9_8.2 | 2 | Aug 19, 2026 | |
| High | RHSA-2026:55859 | RHEL 8 | 0:1.8.27-5.el8_10.2 | 1 | Aug 19, 2026 | |
| Routine | DEBIAN-CVE-2026-26080 | Debian 14 | 3.2.11-2 | 1 | Jul 21, 2026 | |
| Routine | DEBIAN-CVE-2026-26081 | Debian 14 | 3.2.11-2 | 1 | Jul 21, 2026 | |
| High | DEBIAN-CVE-2026-55204 | Debian 14 | 3.2.20-1 | 1 | Jun 29, 2026 | |
| High | DEBIAN-CVE-2026-55203 | Debian 14 | 3.2.20-1 | 1 | Jun 29, 2026 | |
| High | haproxy 3.0.12-0ubuntu0.25.10.5 | Ubuntu 25.10 (questing) | 3.0.12-0ubuntu0.25.10.5 | 2 | Jun 24, 2026 | |
| High | haproxy 2.8.16-0ubuntu0.24.04.3 | Ubuntu 24.04.5 LTS (noble) | 2.8.16-0ubuntu0.24.04.3 | 2 | Jun 24, 2026 | |
| High | haproxy 2.4.30-0ubuntu0.22.04.2 | Ubuntu 22.04.1 LTS (jammy) | 2.4.30-0ubuntu0.22.04.2 | 2 | Jun 24, 2026 | |
| High | RHSA-2026:55800 | RHEL 10 | 3.0.5-4.el10_0.3 | 2 | Jun 18, 2026 | |
| Routine | DEBIAN-CVE-2026-33555 | Debian 12.15 (bookworm) | 2.6.12-1+deb12u4 | 1 | Apr 13, 2026 | |
| Routine | DEBIAN-CVE-2026-33555 | Debian 14 | 3.2.15-1 | 1 | Apr 13, 2026 | |
| Routine | DEBIAN-CVE-2026-33555 | Debian 13.5 (trixie) | 3.0.11-1+deb13u3 | 1 | Apr 13, 2026 | |
| Routine | haproxy 2.8.16-0ubuntu0.24.04.2 | Ubuntu 24.04.5 LTS (noble) | 2.8.16-0ubuntu0.24.04.2 | 1 | Apr 13, 2026 | |
| Routine | haproxy 3.0.12-0ubuntu0.25.10.4 | Ubuntu 25.10 (questing) | 3.0.12-0ubuntu0.25.10.4 | 1 | Apr 13, 2026 | |
| Routine | haproxy 3.0.12-0ubuntu0.25.10.3 | Ubuntu 25.10 (questing) | 3.0.12-0ubuntu0.25.10.3 | 1 | Mar 12, 2026 | |
| Routine | DSA-6130-1 | Debian 13.5 (trixie) | 3.0.11-1+deb13u2 | 1 | Feb 12, 2026 | |
| Routine | haproxy 3.0.8-1ubuntu1.1 | Ubuntu 25.04 (plucky) | 3.0.8-1ubuntu1.1 | 1 | Jan 16, 2026 | |
| Routine | haproxy 2.9.10-1ubuntu1.2 | Ubuntu 24.10 (oracular) | 2.9.10-1ubuntu1.2 | 1 | Jan 16, 2026 | |
| High | haproxy 2.6.9-1ubuntu1 | Ubuntu 24.10 (oracular) | 2.6.9-1ubuntu1 | 1 | Jan 16, 2026 | |
| High | DEBIAN-CVE-2025-11230 | Debian 14 | 3.2.5-2 | 1 | Nov 19, 2025 | |
| High | RHSA-2025:21693 | RHEL 9 | 0:2.8.14-1.el9_7.1 | 1 | Nov 18, 2025 | |
| High | DSA-6017-1 | Debian 12.15 (bookworm) | 2.6.12-1+deb12u3 | 1 | Oct 3, 2025 | |
| High | DSA-6017-1 | Debian 13.5 (trixie) | 3.0.11-1+deb13u1 | 1 | Oct 3, 2025 | |
| High | RHSA-2025:21692 | RHEL 10 | 3.0.5-4.el10_0.1 | 1 | Oct 3, 2025 | |
| High | haproxy 3.0.8-1ubuntu1.2 | Ubuntu 25.04 (plucky) | 3.0.8-1ubuntu1.2 | 1 | Oct 2, 2025 | |
| High | haproxy 2.4.24-0ubuntu0.22.04.3 | Ubuntu 22.04.1 LTS (jammy) | 2.4.24-0ubuntu0.22.04.3 | 1 | Oct 1, 2025 | |
| High | haproxy 2.8.5-1ubuntu3.4 | Ubuntu 24.04.5 LTS (noble) | 2.8.5-1ubuntu3.4 | 1 | Oct 1, 2025 | |
| Routine | DLA-4135-1 | Debian 11.6 (bullseye) | 2.2.9-2+deb11u7 | 1 | Apr 23, 2025 | |
| Routine | DEBIAN-CVE-2025-32464 | Debian 12.15 (bookworm) | 2.6.12-1+deb12u2 | 1 | Apr 9, 2025 | |
| Routine | DEBIAN-CVE-2025-32464 | Debian 13.5 (trixie) | 3.0.10-1 | 1 | Apr 9, 2025 | |
| Routine | DEBIAN-CVE-2025-32464 | Debian 14 | 3.0.10-1 | 1 | Apr 9, 2025 | |
| Routine | haproxy 2.4.24-0ubuntu0.22.04.2 | Ubuntu 22.04.1 LTS (jammy) | 2.4.24-0ubuntu0.22.04.2 | 1 | Apr 8, 2025 | |
| Routine | haproxy 2.8.5-1ubuntu3.3 | Ubuntu 24.04.5 LTS (noble) | 2.8.5-1ubuntu3.3 | 1 | Apr 8, 2025 | |
| Routine | DEBIAN-CVE-2024-53008 | Debian 13.5 (trixie) | 2.9.10-1 | 1 | Nov 28, 2024 | |
| Routine | DEBIAN-CVE-2024-53008 | Debian 14 | 2.9.10-1 | 1 | Nov 28, 2024 | |
| Routine | haproxy 2.8.5-1ubuntu3.2 | Ubuntu 24.04.5 LTS (noble) | 2.8.5-1ubuntu3.2 | 1 | Nov 27, 2024 | |
| High | RHSA-2024:8849 | RHEL 8 | 0:1.8.27-5.el8_10.1 | 1 | Nov 5, 2024 | |
| Routine | DEBIAN-CVE-2024-49214 | Debian 13.5 (trixie) | 2.9.11-1 | 1 | Oct 14, 2024 | |
| Routine | DEBIAN-CVE-2024-49214 | Debian 14 | 2.9.11-1 | 1 | Oct 14, 2024 | |
| High | DEBIAN-CVE-2024-45506 | Debian 13.5 (trixie) | 2.9.10-1 | 1 | Sep 4, 2024 | |
| High | DEBIAN-CVE-2024-45506 | Debian 14 | 2.9.10-1 | 1 | Sep 4, 2024 | |
| High | RHSA-2024:1142 | RHEL 9 | 0:2.4.22-3.el9_3 | 2 | Mar 5, 2024 | |
| High | DSA-5590-1 | Debian 11.6 (bullseye) | 2.2.9-2+deb11u6 | 1 | Dec 28, 2023 | |
| High | DSA-5590-1 | Debian 12.15 (bookworm) | 2.6.12-1+deb12u1 | 1 | Dec 28, 2023 | |
| High | haproxy 1.8.8-1ubuntu0.13+esm2 | Ubuntu 18.04.6 LTS (bionic) | 1.8.8-1ubuntu0.13+esm2 | 1 | Dec 3, 2023 | |
| High | haproxy 2.0.31-0ubuntu0.3 | Ubuntu 20.04 LTS (focal) | 2.0.31-0ubuntu0.3 | 1 | Dec 3, 2023 | |
| High | haproxy 2.4.22-0ubuntu0.22.04.3 | Ubuntu 22.04.1 LTS (jammy) | 2.4.22-0ubuntu0.22.04.3 | 1 | Dec 3, 2023 | |
| High | DEBIAN-CVE-2023-45539 | Debian 12.15 (bookworm) | 2.6.12-1+deb12u1 | 1 | Nov 28, 2023 | |
| High | DEBIAN-CVE-2023-45539 | Debian 13.5 (trixie) | 2.6.15-1 | 1 | Nov 28, 2023 | |
| High | DEBIAN-CVE-2023-45539 | Debian 14 | 2.6.15-1 | 1 | Nov 28, 2023 | |
| High | RHSA-2023:6496 | RHEL 9 | 0:2.4.22-1.el9 | 1 | Nov 7, 2023 | |
| Patch now | DEBIAN-CVE-2023-44487 | Debian 12.15 (bookworm) | 1.8.13-1 | 1 | 1 | Oct 10, 2023 |
| Patch now | DEBIAN-CVE-2023-44487 | Debian 13.5 (trixie) | 1.8.13-1 | 1 | 1 | Oct 10, 2023 |
| Patch now | DEBIAN-CVE-2023-44487 | Debian 14 | 1.8.13-1 | 1 | 1 | Oct 10, 2023 |
| Patch now | haproxy 1.8.8-1ubuntu0.13+esm3 | Ubuntu 18.04.6 LTS (bionic) | 1.8.8-1ubuntu0.13+esm3 | 1 | 1 | Oct 9, 2023 |
| High | DEBIAN-CVE-2023-40225 | Debian 13.5 (trixie) | 2.6.15-1 | 1 | Aug 10, 2023 | |
| High | DEBIAN-CVE-2023-40225 | Debian 14 | 2.6.15-1 | 1 | Aug 10, 2023 | |
| High | haproxy 2.0.31-0ubuntu0.2 | Ubuntu 20.04 LTS (focal) | 2.0.31-0ubuntu0.2 | 1 | Aug 10, 2023 | |
| High | haproxy 2.4.22-0ubuntu0.22.04.2 | Ubuntu 22.04.1 LTS (jammy) | 2.4.22-0ubuntu0.22.04.2 | 1 | Aug 10, 2023 | |
| High | DSA-5388-1 | Debian 11.6 (bullseye) | 2.2.9-2+deb11u5 | 1 | Apr 13, 2023 | |
| High | DEBIAN-CVE-2023-25950 | Debian 12.15 (bookworm) | 2.6.8-1 | 1 | Apr 11, 2023 | |
| High | DEBIAN-CVE-2023-25950 | Debian 13.5 (trixie) | 2.6.8-1 | 1 | Apr 11, 2023 | |
| High | DEBIAN-CVE-2023-25950 | Debian 14 | 2.6.8-1 | 1 | Apr 11, 2023 | |
| High | RHSA-2023:1696 | RHEL 9 | 0:2.4.17-3.el9_1.2 | 2 | Apr 11, 2023 | |
| High | DEBIAN-CVE-2023-0836 | Debian 12.15 (bookworm) | 2.6.8-1 | 1 | Mar 29, 2023 | |
| High | DEBIAN-CVE-2023-0836 | Debian 13.5 (trixie) | 2.6.8-1 | 1 | Mar 29, 2023 | |
| High | DEBIAN-CVE-2023-0836 | Debian 14 | 2.6.8-1 | 1 | Mar 29, 2023 | |
| High | haproxy 2.4.18-0ubuntu1.3 | Ubuntu 22.04.1 LTS (jammy) | 2.4.18-0ubuntu1.3 | 1 | Mar 26, 2023 | |
| Routine | DEBIAN-CVE-2023-0056 | Debian 12.15 (bookworm) | 2.6.8-1 | 1 | Mar 23, 2023 | |
| Routine | DEBIAN-CVE-2023-0056 | Debian 13.5 (trixie) | 2.6.8-1 | 1 | Mar 23, 2023 | |
| Routine | DEBIAN-CVE-2023-0056 | Debian 14 | 2.6.8-1 | 1 | Mar 23, 2023 | |
| High | DEBIAN-CVE-2023-25725 | Debian 12.15 (bookworm) | 2.6.8-2 | 1 | Feb 14, 2023 | |
| High | DEBIAN-CVE-2023-25725 | Debian 13.5 (trixie) | 2.6.8-2 | 1 | Feb 14, 2023 | |
| High | DEBIAN-CVE-2023-25725 | Debian 14 | 2.6.8-2 | 1 | Feb 14, 2023 | |
| High | haproxy 1.8.8-1ubuntu0.13 | Ubuntu 18.04.6 LTS (bionic) | 1.8.8-1ubuntu0.13 | 1 | Feb 14, 2023 | |
| High | haproxy 2.0.29-0ubuntu1.3 | Ubuntu 20.04 LTS (focal) | 2.0.29-0ubuntu1.3 | 1 | Feb 14, 2023 | |
| High | haproxy 2.4.18-0ubuntu1.2 | Ubuntu 22.04.1 LTS (jammy) | 2.4.18-0ubuntu1.2 | 1 | Feb 14, 2023 | |
| Routine | DSA-5348-1 | Debian 11.6 (bullseye) | 2.2.9-2+deb11u4 | 1 | Feb 14, 2023 | |
| Routine | haproxy 2.0.29-0ubuntu1.1 | Ubuntu 20.04 LTS (focal) | 2.0.29-0ubuntu1.1 | 1 | Jan 17, 2023 | |
| Routine | haproxy 2.4.18-0ubuntu1.1 | Ubuntu 22.04.1 LTS (jammy) | 2.4.18-0ubuntu1.1 | 1 | Jan 17, 2023 | |
| High | DSA-5102-1 | Debian 11.6 (bullseye) | 2.2.9-2+deb11u3 | 1 | Mar 13, 2022 | |
| High | DEBIAN-CVE-2022-0711 | Debian 12.15 (bookworm) | 2.4.13-1 | 1 | Mar 2, 2022 | |
| High | DEBIAN-CVE-2022-0711 | Debian 13.5 (trixie) | 2.4.13-1 | 1 | Mar 2, 2022 | |
| High | DEBIAN-CVE-2022-0711 | Debian 14 | 2.4.13-1 | 1 | Mar 2, 2022 | |
| High | haproxy 2.0.13-2ubuntu0.5 | Ubuntu 20.04 LTS (focal) | 2.0.13-2ubuntu0.5 | 1 | Mar 1, 2022 | |
| Routine | haproxy 2.0.13-2ubuntu0.3 | Ubuntu 20.04 LTS (focal) | 2.0.13-2ubuntu0.3 | 1 | Sep 7, 2021 | |
| Routine | haproxy 2.2.9-2ubuntu2 | Ubuntu 22.04.1 LTS (jammy) | 2.2.9-2ubuntu2 | 1 | Sep 7, 2021 | |
| Routine | haproxy 2.0.13-2ubuntu0.2 | Ubuntu 20.04 LTS (focal) | 2.0.13-2ubuntu0.2 | 1 | Aug 17, 2021 | |
| Routine | RHSA-2020:1725 | RHEL 8 | 0:1.8.23-3.el8 | 2 | Apr 28, 2020 | |
| Urgent | RHSA-2020:1288 | RHEL 8 | 0:1.8.15-6.el8_1.1 | 1 | Apr 2, 2020 | |
| Urgent | haproxy 1.8.8-1ubuntu0.10 | Ubuntu 18.04.6 LTS (bionic) | 1.8.8-1ubuntu0.10 | 1 | Apr 1, 2020 | |
| Routine | haproxy 1.8.8-1ubuntu0.9 | Ubuntu 18.04.6 LTS (bionic) | 1.8.8-1ubuntu0.9 | 1 | Nov 27, 2019 | |
| Routine | haproxy 1.8.8-1ubuntu0.7 | Ubuntu 18.04.6 LTS (bionic) | 1.8.8-1ubuntu0.7 | 1 | Oct 23, 2019 |
Showing the newest 100 of 103 fixes.