Moderate: librabbitmq security update

2023-11-0700:00:00

errata.almalinux.org

security fix amqp protocol cve-2023-35789 unix

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1.

Security Fix(es):

rabbitmq-c/librabbitmq: Insecure credentials submission (CVE-2023-35789)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9i686librabbitmq< 0.11.0-7.el9librabbitmq-0.11.0-7.el9.i686.rpm
almalinux9ppc64lelibrabbitmq< 0.11.0-7.el9librabbitmq-0.11.0-7.el9.ppc64le.rpm
almalinux9ppc64lelibrabbitmq-tools< 0.11.0-7.el9librabbitmq-tools-0.11.0-7.el9.ppc64le.rpm
almalinux9x86_64librabbitmq-tools< 0.11.0-7.el9librabbitmq-tools-0.11.0-7.el9.x86_64.rpm
almalinux9x86_64librabbitmq< 0.11.0-7.el9librabbitmq-0.11.0-7.el9.x86_64.rpm
almalinux9aarch64librabbitmq-tools< 0.11.0-7.el9librabbitmq-tools-0.11.0-7.el9.aarch64.rpm
almalinux9aarch64librabbitmq< 0.11.0-7.el9librabbitmq-0.11.0-7.el9.aarch64.rpm
almalinux9s390xlibrabbitmq-tools< 0.11.0-7.el9librabbitmq-tools-0.11.0-7.el9.s390x.rpm
almalinux9s390xlibrabbitmq< 0.11.0-7.el9librabbitmq-0.11.0-7.el9.s390x.rpm
almalinux9i686librabbitmq-devel< 0.11.0-7.el9librabbitmq-devel-0.11.0-7.el9.i686.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	i686	librabbitmq	< 0.11.0-7.el9	librabbitmq-0.11.0-7.el9.i686.rpm
almalinux	9	ppc64le	librabbitmq	< 0.11.0-7.el9	librabbitmq-0.11.0-7.el9.ppc64le.rpm
almalinux	9	ppc64le	librabbitmq-tools	< 0.11.0-7.el9	librabbitmq-tools-0.11.0-7.el9.ppc64le.rpm
almalinux	9	x86_64	librabbitmq-tools	< 0.11.0-7.el9	librabbitmq-tools-0.11.0-7.el9.x86_64.rpm
almalinux	9	x86_64	librabbitmq	< 0.11.0-7.el9	librabbitmq-0.11.0-7.el9.x86_64.rpm
almalinux	9	aarch64	librabbitmq-tools	< 0.11.0-7.el9	librabbitmq-tools-0.11.0-7.el9.aarch64.rpm
almalinux	9	aarch64	librabbitmq	< 0.11.0-7.el9	librabbitmq-0.11.0-7.el9.aarch64.rpm
almalinux	9	s390x	librabbitmq-tools	< 0.11.0-7.el9	librabbitmq-tools-0.11.0-7.el9.s390x.rpm
almalinux	9	s390x	librabbitmq	< 0.11.0-7.el9	librabbitmq-0.11.0-7.el9.s390x.rpm
almalinux	9	i686	librabbitmq-devel	< 0.11.0-7.el9	librabbitmq-devel-0.11.0-7.el9.i686.rpm