tocsin

Debian/librabbitmq: high 7.1

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.frame_max value during amqp_login(), and rabbitmq-c accepts

Action: Upgrade librabbitmq to 0.15.0-1+deb13u1 or later.

Affected

introducedfixedlast affected
00.15.0-1+deb13u1-

Fixed versions

0.15.0-1+deb13u1

Sources

published · modified · JSON