Skip to content
OpenAdvisories
High RHSA-2026:80217 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Oct 10, 2026 · Updated Oct 10, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 opentelemetry-collector-contrib 0:0.162.0-0.2.hum1

Vulnerabilities 2

  • High 8.9
    CVE-2026-79921

    amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload

    amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames that exceed the negotiated frame_max limit. This can lead to unexpected memory c…

    rabbitmq amqp091-go guac minio Debian Ubuntu Azure Linux Wolfi Go
  • Medium 6.3
    CVE-2026-107386

    amqp091-go: Pre-negotiation frame limit is not enforced to 4KB

    amqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation from the prior allocation advisory can be bypassed before connection.tune completes because Connection.maxFrameSize uses zero for both the not-yet-negotiated and negotia…

    rabbitmq amqp091-go guac guacone Debian Ubuntu Wolfi Go

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-107386
  • report
    https://access.redhat.com/security/cve/CVE-2026-79921
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_80217.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2524713
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-79921
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-79921
  • article
    https://github.com/rabbitmq/amqp091-go/commit/6beb7b51f59e46ddcf8066ad498dad32491d3be0
  • article
    https://github.com/rabbitmq/amqp091-go/pull/353
  • article
    https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0
  • article
    https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-6c5v-hqjr-5xxp
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2548205
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-107386
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-107386
  • article
    https://github.com/rabbitmq/amqp091-go/commit/6723e8cff8710f0a6bf5fb4af375e285052535b3
  • article
    https://github.com/rabbitmq/amqp091-go/pull/377
  • article
    https://github.com/rabbitmq/amqp091-go/releases/tag/v1.14.0
  • article
    https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-w6r9-248c-frg8