Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:22163-1

Опубликовано: 23 окт. 2026
Источник: suse-cvrf

Описание

Security update for rabbitmq-server

This update for rabbitmq-server fixes the following issue:

  • CVE-2026-57215: direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom (bsc#1271338).

Список пакетов

openSUSE Leap 16.0
erlang-rabbitmq-client-4.1.5-160000.3.1
rabbitmq-server-4.1.5-160000.3.1
rabbitmq-server-bash-completion-4.1.5-160000.3.1
rabbitmq-server-plugins-4.1.5-160000.3.1
rabbitmq-server-zsh-completion-4.1.5-160000.3.1

Ссылки

Описание

RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, RabbitMQ allows foreign bindings to amq.rabbitmq.reply-to destinations because volatile direct-reply-to queues can be accepted at bind and route time but are missing from Khepri-backed deletion checks, leaving persistent route entries after unbind. This issue is fixed in versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6.

Затронутые продукты
openSUSE Leap 16.0:erlang-rabbitmq-client-4.1.5-160000.3.1
openSUSE Leap 16.0:rabbitmq-server-4.1.5-160000.3.1
openSUSE Leap 16.0:rabbitmq-server-bash-completion-4.1.5-160000.3.1
openSUSE Leap 16.0:rabbitmq-server-plugins-4.1.5-160000.3.1
Ссылки