https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-31T22:14:34.065326+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-105031 CVE-2026-105031 — Apache Qpid Proton C: The OpenSSL TLS implementation adds a locally trusted certificate authority to the existing trust… 2026-10-31T22:14:34.067040+00:00

Affected: Apache Software Foundation Apache Qpid Proton C

When using the OpenSSL TLS implementation, both the pn_ssl_domain_set_trusted_ca_db() & pn_tls_config_set_trusted_certs() APIs added to rather than replaced the default system trust anchors. Leading to potentially trusting unexpected peer certificates.

This can be worked around by setting the SSL_CERT_FILE environment variable for the application to /dev/null.

This issue does not affect the Win32 SChannel TLS implementation.

This issue affects Apache Qpid Proton C: through 0.40.0.

Users are recommended to upgrade to version 0.41.1, which fixes the issue.