CVE-2026-58189
published 2026-07-29CVE-2026-58189: Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification. This issue affects Apache Traffic Server…
PriorityP347high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.63%
48.4th percentile
Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification.
This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3.
Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | traffic_server | >= 10.0.0 < 10.1.4 | 10.1.4 |
| apache | traffic_server | 8.0.0 – 8.1.9 | — |
| apache | traffic_server | >= 9.0.0 < 9.2.15 | 9.2.15 |
| apache_software_foundation | apache_traffic_server | 10.0.0 – 10.1.3 | — |
| apache_software_foundation | apache_traffic_server | 8.0.0 – 8.1.11 | — |
| apache_software_foundation | apache_traffic_server | 9.0.0 – 9.2.14 | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv4.08.2HIGHCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-58189 Apache Traffic Server: plugins resetting the redirect counter enable SSRF amplification
bugzilla·2026-07-29·CVSS 7.5
CVE-2026-58189 [HIGH] CVE-2026-58189 Apache Traffic Server: plugins resetting the redirect counter enable SSRF amplification
CVE-2026-58189 Apache Traffic Server: plugins resetting the redirect counter enable SSRF amplification
Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification.
This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3.
Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.
Bugzilla
CVE-2026-58189 trafficserver: plugins resetting the redirect counter enable SSRF amplification [fedora-all]
bugzilla·2026-07-29·CVSS 7.5
CVE-2026-58189 [HIGH] CVE-2026-58189 trafficserver: plugins resetting the redirect counter enable SSRF amplification [fedora-all]
CVE-2026-58189 trafficserver: plugins resetting the redirect counter enable SSRF amplification [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification.
This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3.
Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.
Bugzilla
CVE-2026-58189 trafficserver: plugins resetting the redirect counter enable SSRF amplification [epel-all]
bugzilla·2026-07-29·CVSS 7.5
CVE-2026-58189 [HIGH] CVE-2026-58189 trafficserver: plugins resetting the redirect counter enable SSRF amplification [epel-all]
CVE-2026-58189 trafficserver: plugins resetting the redirect counter enable SSRF amplification [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification.
This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3.
Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.
Bugzilla
CVE-2025-58189 dnscrypt-proxy: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 dnscrypt-proxy: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 dnscrypt-proxy: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is
Bugzilla
CVE-2025-58189 chisel: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 chisel: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 chisel: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's
Bugzilla
CVE-2025-58189 trivy: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 trivy: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43]
CVE-2025-58189 trivy: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
FEDORA-2026-868e266938 (trivy-0.69.3-1.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-868e266938
---
FEDORA-2026-868
Bugzilla
CVE-2025-58189 lw-cli: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 lw-cli: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 lw-cli: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's
Bugzilla
CVE-2025-58189 image-builder: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 image-builder: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 image-builder: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is F
Bugzilla
CVE-2025-58189 grafana: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 grafana: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 grafana: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora'
Bugzilla
CVE-2025-58189 golang-github-moby-buildkit: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-github-moby-buildkit: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-github-moby-buildkit: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-
Bugzilla
CVE-2025-58189 golang-ariga-atlas: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-ariga-atlas: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-ariga-atlas: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It
Bugzilla
CVE-2025-58189 golang-x-mobile: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-x-mobile: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-x-mobile: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is
Bugzilla
CVE-2025-58189 deepin-pw-check: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 deepin-pw-check: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 deepin-pw-check: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is
Bugzilla
CVE-2025-58189 golang-github-tenox7-wrp: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-github-tenox7-wrp: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-github-tenox7-wrp: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-
Bugzilla
CVE-2025-58189 golang-entgo-ent: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-entgo-ent: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-entgo-ent: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It i
Bugzilla
CVE-2025-58189 git-lfs: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 git-lfs: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 git-lfs: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora'
Bugzilla
CVE-2025-58189 cri-o1.31: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 cri-o1.31: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 cri-o1.31: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedor
Bugzilla
CVE-2025-58189 cri-tools1.32: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 cri-tools1.32: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 cri-tools1.32: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is F
Bugzilla
CVE-2025-58189 golang-x-text: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-x-text: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-x-text: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is F
Bugzilla
CVE-2025-58189 golang-x-perf: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-x-perf: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-x-perf: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is F
Bugzilla
CVE-2025-58189 cri-tools1.29: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 cri-tools1.29: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 cri-tools1.29: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is F
Bugzilla
CVE-2025-58189 kitty: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 kitty: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 kitty: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's
Bugzilla
CVE-2025-58189 syncthing: go crypto/tls ALPN negotiation error contains attacker controlled information [epel-10]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 syncthing: go crypto/tls ALPN negotiation error contains attacker controlled information [epel-10]
CVE-2025-58189 syncthing: go crypto/tls ALPN negotiation error contains attacker controlled information [epel-10]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
FEDORA-EPEL-2026-2c3b9215e1 (syncthing-2.1.1-1.el10_2) has been submitted as an update to Fedora EPEL 10.2.
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-2c3b9215
Bugzilla
CVE-2025-58189 golang-github-schollz-croc: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-github-schollz-croc: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-github-schollz-croc: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-0
Bugzilla
CVE-2025-58189 git-credential-oauth: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 git-credential-oauth: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 git-credential-oauth: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
Bugzilla
CVE-2025-58189 nebula: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 nebula: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 nebula: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's
Bugzilla
CVE-2025-58189 golang-github-apache-beam-2: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-github-apache-beam-2: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-github-apache-beam-2: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-
Bugzilla
CVE-2025-58189 exercism: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 exercism: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 exercism: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora
Bugzilla
CVE-2025-58189 thrift: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 thrift: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 thrift: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's
Bugzilla
CVE-2025-58189 golang-sr-emersion-gqlclient: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-sr-emersion-gqlclient: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-sr-emersion-gqlclient: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026
Bugzilla
CVE-2025-58189 cheat: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 cheat: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 cheat: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's
Bugzilla
CVE-2025-58189 golang-github-facebook-time: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-github-facebook-time: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-github-facebook-time: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-
Bugzilla
CVE-2025-58189 reposurgeon: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 reposurgeon: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 reposurgeon: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fed
Bugzilla
CVE-2025-58189 hut: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 hut: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43]
CVE-2025-58189 hut: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
FEDORA-2026-ed208f5337 (hut-0.8.0-1.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-ed208f5337
---
FEDORA-2026-32113d48
Bugzilla
CVE-2025-58189 grafana-pcp: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 grafana-pcp: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 grafana-pcp: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fed
Bugzilla
CVE-2025-58189 gron: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 gron: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 gron: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's p
Bugzilla
CVE-2025-58189 golang-x-mod: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-x-mod: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-x-mod: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fe
Bugzilla
CVE-2025-58189 transifex-client: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 transifex-client: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 transifex-client: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It i
Bugzilla
CVE-2025-58189 golang-github-cloudflare: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-github-cloudflare: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-github-cloudflare: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-
Bugzilla
CVE-2025-58189 asnmap: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 asnmap: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 asnmap: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's
Bugzilla
CVE-2025-58189 yggdrasil: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 yggdrasil: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 yggdrasil: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedor
Bugzilla
CVE-2025-58189 yubihsm-connector: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 yubihsm-connector: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 yubihsm-connector: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It
Bugzilla
CVE-2025-58189 cri-o1.29: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 cri-o1.29: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 cri-o1.29: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedor
Bugzilla
CVE-2025-58189 kubernetes1.30: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 kubernetes1.30: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 kubernetes1.30: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is
Bugzilla
CVE-2025-58189 golang-github-chromedp: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-github-chromedp: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-github-chromedp: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13
Bugzilla
CVE-2025-58189 golang-github-schollz-cli-2: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-github-schollz-cli-2: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-github-schollz-cli-2: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-
Bugzilla
CVE-2025-58189 ignition: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 ignition: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 ignition: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora
Bugzilla
CVE-2025-58189 cri-tools1.31: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 cri-tools1.31: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 cri-tools1.31: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is F
Bugzilla
CVE-2025-58189 go-fdo-client: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 go-fdo-client: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 go-fdo-client: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is F
Bugzilla
CVE-2025-58189 golang-github-google-pprof: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-github-google-pprof: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-github-google-pprof: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-0
Bugzilla
CVE-2025-58189 golang-github-task: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
bugzilla·2025-10-30·CVSS 5.3
CVE-2025-58189 [MEDIUM] CVE-2025-58189 golang-github-task: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
CVE-2025-58189 golang-github-task: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It
2026-07-29
Published