Skip to content
OpenAdvisories
High ALSA-2026:82094 1 CVE

Important: librabbitmq security update

Published Oct 13, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1.

Security Fix(es):

* rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service (CVE-2026-44236)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 3

ReleasePackageFixed in
AlmaLinux · 9 librabbitmq 0.11.0-7.el9_8.1
AlmaLinux · 9 librabbitmq-devel 0.11.0-7.el9_8.1
AlmaLinux · 9 librabbitmq-tools 0.11.0-7.el9_8.1

Vulnerabilities 1

  • High 7.1
    CVE-2026-44236

    rabbitmq-c: Heap buffer overflow in AMQP login handshake via undersized connection.tune.frame_max

    rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.frame_max value during amqp_login(), and rabbitmq-c accepts the value in amqp_login_inner() in librabbitmq/amqp_socket…

    alanxz rabbitmq-c librabbitmq librabbitmq Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-44236
  • report
    https://bugzilla.redhat.com/2536500
  • advisory
    https://errata.almalinux.org/9/ALSA-2026-82094.html