Qpid Proton C

Search everything

Mentions · 7d4
Mentions · 30d4
All mentions4
First seenOct 28, 2026
Last mentioned2d ago

Timeline

4 articles · newest first

Qpid Proton C through 0.40.0 can overflow on bad TLS wildcards

Apache rates the stack read overflow low and says only non-RFC9525 wildcard certificates trigger it; 0.41.1 fixes it.

oss-securityOct 28, 20:47 UTC · 2d agoVulnerability 4 sourcesCVE-2026-1159421

Qpid Proton C through 0.40.0 can treat AMQP frames as SASL

Apache calls the flaw important: peers can send regular AMQP frames that Proton dispatches as SASL, with no username set.

oss-securityOct 28, 20:46 UTC · 2d agoVulnerability 4 sourcesCVE-2026-1142301

Apache Qpid Proton C through 0.40.0 can crash on nested AMQP bodies

Deeply nested message bodies decoded by pn_message_body() can overflow the stack; 0.41.1 fixes PROTON-2976.

oss-securityOct 28, 20:44 UTC · 2d agoVulnerability 4 sourcesCVE-2026-1050421

Qpid Proton C OpenSSL APIs keep default trust anchors (CVE-2026-105031)

pn_ssl_domain_set_trusted_ca_db() and pn_tls_config_set_trusted_certs() add CAs instead of replacing system anchors.

oss-securityOct 28, 20:42 UTC · 2d agoVulnerability 4 sourcesCVE-2026-1050311

Related CVEs

by mentions

CVE-2026-115942—
Stack read overflow in Apache Qpid Proton C via wildcard TLS cert
published 1d agoApache Qpid Proton C
CVE-2026-105042—
Unbounded recursion crash in Apache Qpid Proton C through 0.40.0
published 1d agoApache Qpid Proton C
CVE-2026-105031—
Extra system trust anchors in Apache Qpid Proton C OpenSSL TLS
published 1d agoApache Qpid Proton C
CVE-2026-114230—
SASL authentication bypass in Apache Qpid Proton C through 0.40.0
published 1d agoApache Qpid Proton C

Appears with

Apachevendor · 4

Entities are extracted by the model from each article. First seen Oct 28, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.