Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 579
Alerts This Week
Warning Icon 1 579

Fedora 44 librabbitmq Critical Buffer Overflow Fix 2026-fc2f661416

fedora
Calendar Grey July 10, 2026
Dist Fedora Esm H88
Security fix for librabbitmq in Fedora 44 addresses critical buffer issues preventing out-of-bounds reads and overflows.
Version 0.17.0 - 2026-07-01 Security Fix size_t overflow in amqp_decode_bytes bounds check leading to out-of-bounds read (GHSA-jgjf-7fwf-f3c7, #888) Fix heap buffer overflow in amq...

Summary

This is a C-language AMQP client library for use with AMQP servers

speaking protocol versions 0-9-1.

Update Information:

Version 0.17.0 - 2026-07-01 Security Fix size_t overflow in amqp_decode_bytes bounds check leading to out-of-bounds read (GHSA-jgjf-7fwf-f3c7, #888) Fix heap buffer overflow in amqp_frame_to_bytes for oversized body frames (GHSA- hfjv-vcp3-39wh, #892) Added librabbitmq-tools fall back to the AMQP_URL environment variable when no connection options are given on the command line (#887) Fixed Fix undefined behavior in amqp_decode_properties when decoding content-header property flags (#883, #885) Fix ioctlsocket type mismatch on Windows (#890) Document buffer lifetime requirement of amqp_decode_table's encoded buffer to prevent use-after-free misuse (#895) Changed librabbitmq-tools now enable default SSL certificate verification paths unless --no-default-cert-paths is passed (fixes #868, #893) Building the tools now requires POPT v1.14 or newer (#889)

Topics%20covered

Topics Covered

security advisory fedora important heap overflow out-of-bounds amqp-client

Change Log

* Thu Jul 2 2026 Remi Collet - 0.17.0-1 - update to 0.17.0

References

Fedora Update Notification FEDORA-2026-fc2f661416 2026-07-11 01:06:30.201235+00:00 Name : librabbitmq Product : Fedora 44 Version : 0.17.0 Release : 1.fc44 URL : https://github.com/alanxz/rabbitmq-c Summary : Client library for AMQP Description : This is a C-language AMQP client library for use with AMQP servers speaking protocol versions 0-9-1.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-fc2f661416' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: librabbitmq
Product: Fedora 44
Version: 0.17.0
Release: 1.fc44
URL: https://github.com/alanxz/rabbitmq-c
Summary: Client library for AMQP

Topics%20covered

Topics Covered

security advisory fedora important heap overflow out-of-bounds amqp-client

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.