RHSA-2026:98467: Important: librabbitmq security update
The librabbitmq packages provide an Advanced Message Queuing Protocol (AMQP) client library that allows you to communicate with AMQP servers using protocol version 0-9-1.Security Fix(es): rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service (CVE-2026-44236) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/librabbitmqto a version that resolves this vulnerability.Fixed in 0.11.0-7.el9_9.1 - Upgrade
Upgrade
redhat/librabbitmq-debuginfoto a version that resolves this vulnerability.Fixed in 0.11.0-7.el9_9.1 - Upgrade
Upgrade
redhat/librabbitmq-debugsourceto a version that resolves this vulnerability.Fixed in 0.11.0-7.el9_9.1 - Upgrade
Upgrade
redhat/librabbitmq-toolsto a version that resolves this vulnerability.Fixed in 0.11.0-7.el9_9.1 - Upgrade
Upgrade
redhat/librabbitmq-tools-debuginfoto a version that resolves this vulnerability.Fixed in 0.11.0-7.el9_9.1 - Upgrade
Upgrade
redhat/librabbitmqto a version that resolves this vulnerability.Fixed in 0.11.0-7.el9_9.1.aa - Upgrade
Upgrade
redhat/librabbitmq-debuginfoto a version that resolves this vulnerability.Fixed in 0.11.0-7.el9_9.1.aa - Upgrade
Upgrade
redhat/librabbitmq-debugsourceto a version that resolves this vulnerability.Fixed in 0.11.0-7.el9_9.1.aa - Upgrade
Upgrade
redhat/librabbitmq-toolsto a version that resolves this vulnerability.Fixed in 0.11.0-7.el9_9.1.aa - Upgrade
Upgrade
redhat/librabbitmq-tools-debuginfoto a version that resolves this vulnerability.Fixed in 0.11.0-7.el9_9.1.aa - Upgrade
Upgrade
redhat/librabbitmq-develto a version that resolves this vulnerability.Fixed in 0.11.0-7.el9_9.1 - Upgrade
Upgrade
redhat/librabbitmq-develto a version that resolves this vulnerability.Fixed in 0.11.0-7.el9_9.1.aa
Event History
Frequently Asked Questions
Which deployed components should be prioritized for updates?
Prioritize systems with the librabbitmq runtime packages installed, especially applications that use the AMQP 0-9-1 client library to communicate with AMQP servers. The advisory also lists librabbitmq-tools, development, debug, debuginfo, and debugsource packages.
What is the known impact of successful exploitation?
The identified issue is a heap buffer overflow in rabbitmq-c that can lead to denial of service. The provided advisory data does not state additional impacts or exploitation prerequisites.