Publishing details

Published on 2021-06-24
Copied from ubuntu bionic in PPA for Ubuntu Security Proposed by Leonidas S. Barbosa

Changelog

rabbitmq-server (3.6.10-1ubuntu0.5) bionic-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2021-22116.patch: treat arrays with extra or
      missing input as fatal errors in deps/rabbitmq_amqp1_0/src/rabbit_amqp1_0_binary_parser.erl.
    - CVE-2021-22116
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2019-11287.patch: Format `Explanation` before passing it
      deps/rabbit_common/src/rabbit_reader.erl.
    - CVE-2019-11287

 -- Leonidas Da Silva Barbosa <email address hidden>  Wed, 23 Jun 2021 10:32:24 -0300

Available diffs

diff from 3.6.10-1ubuntu0.4 (in Ubuntu) to 3.6.10-1ubuntu0.5 (2.3 KiB)
diff from 3.6.10-1 (in Debian) to 3.6.10-1ubuntu0.5 (3.7 KiB)

Builds

amd64

Built packages

rabbitmq-server AMQP server written in Erlang

Package files

rabbitmq-server_3.6.10-1ubuntu0.5.debian.tar.xz (18.5 KiB)
rabbitmq-server_3.6.10-1ubuntu0.5.dsc (2.3 KiB)
rabbitmq-server_3.6.10-1ubuntu0.5_all.deb (4.4 MiB)
rabbitmq-server_3.6.10.orig.tar.xz (1.4 MiB)