Red Hat Service Interconnect 2/qpid-proton

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Incorrect parsing of IPv6 host literals in net/urlCVE-2026-25679 · GO-2026-4601	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9	GoRed Hat	High	Fix reported	2026-10-16
Memory exhaustion in query parameter parsing in net/urlCVE-2025-61726 · GO-2026-4341	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	High	Fix reported	2026-10-03
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unixCVE-2026-32282 · GO-2026-4864	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance	GoRed Hat	Medium	Fix reported	2026-09-29
Crash when handling long CNAME response in netCVE-2026-33811 · GO-2026-4981	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9	GoRed Hat	High	Fix reported	2026-09-29
Parsing DER payload can cause memory exhaustion in encoding/asn1CVE-2025-58185 · GO-2025-4011	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9	GoRed Hat	Medium	Fix reported	2026-05-15
qpid-proton-c: qpid-proton-c: Denial of Service via stack overflow in pn_message_body()CVE-2026-105042	Red Hat AMQ Clients/python3-qpid-proton Red Hat AMQ Clients/python39-qpid-proton	Red Hat	High	No fix reported	Not recorded
qpid-proton: qpid-proton: improper certificate validation via retention of default system trust anchorsCVE-2026-105031	Red Hat AMQ Clients/qpid-proton Red Hat OpenStack Platform 13 (Queens)/qpid-proton	Red Hat	High	No fix reported	Not recorded