Skip to content
OpenAdvisories
High RHSA-2026:60854 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Sep 6, 2026 · Updated Oct 10, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 opentelemetry-collector-contrib 0:0.159.0-0.1.1.hum1

Vulnerabilities 1

  • High 8.9
    CVE-2026-79921

    amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload

    amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames that exceed the negotiated frame_max limit. This can lead to unexpected memory c…

    rabbitmq amqp091-go guac minio Debian Ubuntu Azure Linux Wolfi Go

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-79921
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_60854.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2524713
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-79921
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-79921
  • article
    https://github.com/rabbitmq/amqp091-go/commit/6beb7b51f59e46ddcf8066ad498dad32491d3be0
  • article
    https://github.com/rabbitmq/amqp091-go/pull/353
  • article
    https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0
  • article
    https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-6c5v-hqjr-5xxp