A critical security update addresses two vulnerabilities (CVE-2026-44235 and CVE-2026-44236) in the librabbitmq AMQP client library, which could lead to denial of service or arbitrary code execution. For the Debian stable distribution (trixie), these issues are fixed in librabbitmq version 0.15.0-1+deb13u1. IT security professionals should upgrade their librabbitmq packages immediately.
[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index] [SECURITY] [DSA 6343-1] librabbitmq security update To: debian-security-announce@lists.debian.org Subject: [SECURITY] [DSA 6343-1] librabbitmq security update From: Moritz Muehlenhoff <jmm@debian.org> Date: Fri, 12 Jun 2026 18:50:44 +0000 Message-id: <[🔎] aixVBP7SBhC39ltY@seger.debian.org> Reply-to: debian-security-announce-request@lists.debian.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6343-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff June 12, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : librabbitmq CVE ID : CVE-2026-44235 CVE-2026-44236 Two security vulnberabilities were discovered in librabbitmq, an AMQP client library, which could result in denial of service or potentially the execution of arbitrary code. For the stable distribution (trixie), these problems have been fixed in version 0.15.0-1+deb13u1. We recommend that you upgrade your librabbitmq packages. For the detailed security status of librabbitmq please refer to its security tracker page at: https://security-tracker.debian.org/tracker/librabbitmq Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmosVKcACgkQEMKTtsN8 TjbJOhAAho2j55gtLt37N56bI7qBAc7UBe52fA+zklqGwtgTE0RzAuSqf3IM6KtR euOO9lCrQTa2uONqsdK/3lsyTvY7kReLHN9r+AOve+qvgeSCLDpcl6IZblcmUEOw QAFVwvDZOXFn+/Eae2genMGnvy3LwLzNf9f7s53wpshU7dmusJaUiUBBpnQyJvYM cYknmwHXXz2o3j/6S6RSPknvYPLBzZ9n3a7b71WRg57OZsNkBFmtCAvt1MmoQW64 LNhw+219Gr/0QWivpaNLCvS/OsregNj/fTUmiipxf9v1P8n2OOXhRDu2uiGNJBhm R1WiHJgYUceQZLqgnebGHmRUvMMy6zjYwZuHII5R15XooxWd9LoqO3/g6wDQS1R5 kVFwKIeRTfLCpjA7YXtJNLggWSvft92QtpYWEi4e8KZlHypGPOL6hMo8ABhbTGvi 24b0V0/A09WZ/XKt7tGEcmMTM71nkkxTAjkbEY0OAKnBvP+MR0lgr57KUwYvUyho A6ZoheCuOQ/qMKeg3ixISZZdCO83sHztU7oITlEB1N7D0Y2gHPWjCUJLODhomN6X aBxCbL/iiPp57HsRs956S0ZA61mpGFWuV94okjqicT7Q6wEVIuk3XCpMqbKerPnt 4U0j9gv70QNAZm2RprXlioI9z7n9sGzcCRjqkumQrjX9ZS5/p1I= =fH08 -----END PGP SIGNATURE----- Reply to: debian-security-announce@lists.debian.org Moritz Muehlenhoff (on-list) Moritz Muehlenhoff (off-list) Prev by Date: [SECURITY] [DSA 6342-1] jpeg-xl security update Previous by thread: [SECURITY] [DSA 6342-1] jpeg-xl security update Index(es): Date Thread