Package "amqp-tools"
| Name: |
amqp-tools
|
Description: |
Command-line utilities for interacting with AMQP servers
|
| Latest version: |
0.10.0-1ubuntu2.2 |
| Release: |
jammy (22.04) |
| Level: |
security |
| Repository: |
universe |
| Head package: |
librabbitmq |
| Homepage: |
https://github.com/alanxz/rabbitmq-c |
Links
Download "amqp-tools"
Other versions of "amqp-tools" in Jammy
Changelog
|
librabbitmq (0.10.0-1ubuntu2.2) jammy-security; urgency=medium
* SECURITY UPDATE: heap out-of-bounds write
- debian/patches/CVE-2026-61547.patch: Fix heap buffer overflow in
amqp_frame_to_bytes for oversized body frames in
librabbitmq/amqp_connection.c, tests/CMakeLists.txt,
tests/test_send_frame.c.
- CVE-2026-61547
* SECURITY UPDATE: heap out-of-bounds read
- debian/patches/CVE-2026-59986.patch: Fix size_t overflow in
amqp_decode_bytes bounds check (GHSA-jgjf-7fwf-f3c7) in
librabbitmq/amqp_private.h, tests/CMakeLists.txt,
tests/test_decode_bytes.c.
- CVE-2026-59986
-- Isabel Garcia Contreras Wed, 02 Sep 2026 11:38:36 -0400
|
| Source diff to previous version |
|
librabbitmq (0.10.0-1ubuntu2.1) jammy-security; urgency=medium
* SECURITY UPDATE: Passwords can only be specified on command-line
- debian/patches/CVE-2023-35789.patch: Add option to read username/password
from file in tools/common.c.
- CVE-2023-35789
* SECURITY UPDATE: size_t underflow in AMQP frame length computation
- debian/patches/CVE-2026-44235.patch: amqp_connection: reject undersized
frames in amqp_handle_input in librabbitmq/amqp_connection.c.
- CVE-2026-44235
* SECURITY UPDATE: Heap buffer overflow in AMQP login handshake
- debian/patches/CVE-2026-44236-1.patch: enforce minimum frame_max in
README.md, librabbitmq/amqp_connection.c, librabbitmq/amqp_socket.c,
tests/CMakeLists.txt, tests/test_tune_connection.c.
- debian/patches/CVE-2026-44236-2.patch: docs: remove frame_max readme note
in README.md.
- CVE-2026-44236
-- Marc Deslauriers <email address hidden> Sun, 14 Jun 2026 11:43:56 -0400
|
| CVE-2023-35789 |
An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command lin |
|
About
-
Send Feedback to @ubuntu_updates
