# HAProxy 3.4.7-alpine corresponding source and rebuild recipe

Image identity: `oci.thepeoples.io/hardened/haproxy:3.4.7-alpine-tpio.1` at
`sha256:5c14f9a8b26004f13288ddb97ff7b9380a63f7513c89afc0db19b3c4df4db65a`.

This source offer names the exact candidate built by harden run 723. Consult the
catalog for publication and validation status; a source offer alone is not a
release approval.

The overlay is ladder (a)+(c): official `haproxy:3.4.7-alpine` (3.4 LTS; 3.4.1+
fixes CVE-2026-55203 and CVE-2026-55204) plus `apk upgrade`. Never retag
`3.3.16-alpine-tpio.1`.

The upstream source archives and exact packaging/rebuild recipes are provided
here. Verify SHA256SUMS before rebuilding. Build-records contain the installed
package manifest from this candidate. Use the pinned inputs in Containerfile.
Archives retain their upstream licences.