UbuntuUpdates.org

Package "rabbitmq-server"

Name: rabbitmq-server

Description:

AMQP server written in Erlang
Latest version: 4.0.5-10ubuntu5.1
Release: resolute (26.04)
Level: updates
Repository: main
Homepage: https://www.rabbitmq.com/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "rabbitmq-server"

All arch deb package
APT INSTALL

Other versions of "rabbitmq-server" in Resolute

Repository Area Version
base main 4.0.5-10ubuntu5
security main 4.0.5-10ubuntu5.2

Changelog

Version: 4.0.5-10ubuntu5.1 2026-10-07 15:39:06 UTC

rabbitmq-server (4.0.5-10ubuntu5.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Allocation of resources without limits
    - debian/patches/CVE-2026-59248.patch: add a hard limit for HPACK
      integer decoding in bundled cowlib to prevent memory exhaustion
      via crafted HPACK/QPACK prefixed-integer encoding.
    - CVE-2026-59248

 -- Leonidas Da Silva Barbosa Tue, 29 Sep 2026 07:43:48 -0300
CVE-2026-59248 Allocation of resources without limits vulnerability in ninenines cowlib allows an unauthenticated remote HTTP/2 or HTTP/3 peer to exhaust memory on


About   -   Send Feedback to @ubuntu_updates