UbuntuUpdates.org

Package "librabbitmq4"

Name: librabbitmq4

Description:

AMQP client library written in C
Latest version: 0.7.1-1ubuntu0.2
Release: xenial (16.04)
Level: security
Repository: universe
Head package: librabbitmq
Homepage: https://github.com/alanxz/rabbitmq-c

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "librabbitmq4"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "librabbitmq4" in Xenial

Repository Area Version
base universe 0.7.1-1
updates universe 0.7.1-1ubuntu0.2

Changelog

Version: 0.7.1-1ubuntu0.2 2019-12-11 18:07:35 UTC

  librabbitmq (0.7.1-1ubuntu0.2) xenial-security; urgency=medium

  * SECURITY UPDATE: Integer overflow
    - debian/patches/CVE-2019-18609.patch: check frame_size is >= INT32_MAX
      in librabbitmq/amqp_connection.c.
    - CVE-2019-18609

 -- Eduardo Barretto <email address hidden> Tue, 10 Dec 2019 11:10:37 -0300
CVE-2019-18609 An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corrupt


About   -   Send Feedback to @ubuntu_updates