tocsin

Debian/librabbitmq: high 7.1

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.frame_max value during amqp_login(), and rabbitmq-c accepts

Action: Upgrade librabbitmq to 0.11.0-1+deb12u2 or later.

Affected

introducedfixedlast affected
00.11.0-1+deb12u2-

Fixed versions

0.11.0-1+deb12u2

Sources

published · modified · JSON