AZL-111745

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111745.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-111745
Upstream
  • CVE-2026-115942
Published
2026-10-29T11:17:30Z
Modified
2026-11-03T05:30:47Z
Summary
CVE-2026-115942 affecting package qpid-proton 0.40.0-15
Details

A misconfigured wildcard TLS certificate causes a stack read overflow.

This issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accepts certificates that comply to this standard.

This issue affects Apache Qpid Proton C: through 0.40.0.

Users are recommended to upgrade to version 0.41.1, which fixes the issue.

References

Affected packages

Azure Linux:3 / qpid-proton

Package

Name
qpid-proton
Purl
pkg:rpm/azure-linux/qpid-proton

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
0.40.0-15

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111745.json"