Alerts This Week
Warning Icon 1 401
Alerts This Week
Warning Icon 1 401

Fedora 43 librabbitmq Important Security Heap Overflow Fix 2026-436ef78874

fedora
Calendar Grey July 6, 2026
Dist Fedora Esm H88
Critical security fixes for librabbitmq in Fedora addressing buffer overflow and out-of-bounds read issues.
Version 0.17.0 - 2026-07-01 Security Fix size_t overflow in amqp_decode_bytes bounds check leading to out-of-bounds read (GHSA-jgjf-7fwf-f3c7, #888) Fix heap buffer overflow in amq...

Summary

This is a C-language AMQP client library for use with AMQP servers

speaking protocol versions 0-9-1.

Update Information:

Version 0.17.0 - 2026-07-01 Security Fix size_t overflow in amqp_decode_bytes bounds check leading to out-of-bounds read (GHSA-jgjf-7fwf-f3c7, #888) Fix heap buffer overflow in amqp_frame_to_bytes for oversized body frames (GHSA- hfjv-vcp3-39wh, #892) Added librabbitmq-tools fall back to the AMQP_URL environment variable when no connection options are given on the command line (#887) Fixed Fix undefined behavior in amqp_decode_properties when decoding content-header property flags (#883, #885) Fix ioctlsocket type mismatch on Windows (#890) Document buffer lifetime requirement of amqp_decode_table's encoded buffer to prevent use-after-free misuse (#895) Changed librabbitmq-tools now enable default SSL certificate verification paths unless --no-default-cert-paths is passed (fixes #868, #893) Building the tools now requires POPT v1.14 or newer (#889)

Topics%20covered

Topics Covered

security advisory fedora critical out-of-bounds read heap buffer overflow amqp-client

Change Log

* Thu Jul 2 2026 Remi Collet - 0.17.0-1 - update to 0.17.0

References

Fedora Update Notification FEDORA-2026-436ef78874 2026-07-07 01:08:27.509763+00:00 Name : librabbitmq Product : Fedora 43 Version : 0.17.0 Release : 1.fc43 URL : https://github.com/alanxz/rabbitmq-c Summary : Client library for AMQP Description : This is a C-language AMQP client library for use with AMQP servers speaking protocol versions 0-9-1.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-436ef78874' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: librabbitmq
Product: Fedora 43
Version: 0.17.0
Release: 1.fc43
URL: https://github.com/alanxz/rabbitmq-c
Summary: Client library for AMQP

Topics%20covered

Topics Covered

security advisory fedora critical out-of-bounds read heap buffer overflow amqp-client

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here