Skip to content
OpenAdvisories
High RHSA-2026:98467 1 CVE

Red Hat Security Advisory: librabbitmq security update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream librabbitmq 0:0.11.0-7.el9_9.1
Red Hat · RHEL 9 enterprise_linux:9::appstream librabbitmq-debuginfo 0:0.11.0-7.el9_9.1
Red Hat · RHEL 9 enterprise_linux:9::appstream librabbitmq-debugsource 0:0.11.0-7.el9_9.1
Red Hat · RHEL 9 enterprise_linux:9::appstream librabbitmq-tools 0:0.11.0-7.el9_9.1
Red Hat · RHEL 9 enterprise_linux:9::appstream librabbitmq-tools-debuginfo 0:0.11.0-7.el9_9.1
Red Hat · RHEL 9 enterprise_linux:9::crb librabbitmq-debuginfo 0:0.11.0-7.el9_9.1
Red Hat · RHEL 9 enterprise_linux:9::crb librabbitmq-debugsource 0:0.11.0-7.el9_9.1
Red Hat · RHEL 9 enterprise_linux:9::crb librabbitmq-devel 0:0.11.0-7.el9_9.1
Red Hat · RHEL 9 enterprise_linux:9::crb librabbitmq-tools-debuginfo 0:0.11.0-7.el9_9.1

Vulnerabilities 1

  • High 7.1
    CVE-2026-44236

    rabbitmq-c: Heap buffer overflow in AMQP login handshake via undersized connection.tune.frame_max

    rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.frame_max value during amqp_login(), and rabbitmq-c accepts the value in amqp_login_inner() in librabbitmq/amqp_socket…

    alanxz rabbitmq-c librabbitmq librabbitmq Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2536500
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_98467.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-44236
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-44236
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-44236
  • article
    https://github.com/alanxz/rabbitmq-c/commit/4777d0b5c58cb02966a04a85832436bd66ed5d1f
  • article
    https://github.com/alanxz/rabbitmq-c/pull/879
  • article
    https://github.com/alanxz/rabbitmq-c/releases/tag/v0.16.0
  • article
    https://github.com/alanxz/rabbitmq-c/security/advisories/GHSA-jh48-qjf5-fx5v