"identifier": "USN-8724-1",: vulnerabilidades no rabbitmq-c
O aviso de segurança "identifier": "USN-8724-1",, do projeto "project": "ubuntu",, trata de vulnerabilidades no rabbitmq-c e traz as versões corrigidas dos pacotes para as versões do Ubuntu listadas abaixo. O aviso foi publicado em "announcementDate": "2026-09-03 15:51:03+00", e sua referência oficial é "officialSource": "https://ubuntu.com/security/notices/USN-8724-1",.
Vulnerabilidades
- "CVE-2023-35789",
- "CVE-2026-44235",
- "CVE-2026-44236",
- "CVE-2026-59986",
- "CVE-2026-61547"
Pacotes corrigidos
| Versão do Ubuntu | Pacote | Versão corrigida | Acesso |
|---|---|---|---|
| "release": "26.04 LTS resolute", | "package": "amqp-tools", | "version": "0.15.0-1ubuntu0.26.04.2", | "access": "standard update" |
| "release": "26.04 LTS resolute", | "package": "librabbitmq-dev", | "version": "0.15.0-1ubuntu0.26.04.2", | "access": "standard update" |
| "release": "26.04 LTS resolute", | "package": "librabbitmq4", | "version": "0.15.0-1ubuntu0.26.04.2", | "access": "standard update" |
| "release": "24.04 LTS noble", | "package": "amqp-tools", | "version": "0.11.0-1ubuntu0.2", | "access": "standard update" |
| "release": "24.04 LTS noble", | "package": "librabbitmq-dev", | "version": "0.11.0-1ubuntu0.2", | "access": "standard update" |
| "release": "24.04 LTS noble", | "package": "librabbitmq4", | "version": "0.11.0-1ubuntu0.2", | "access": "standard update" |
| "release": "22.04 LTS jammy", | "package": "amqp-tools", | "version": "0.10.0-1ubuntu2.2", | "access": "standard update" |
| "release": "22.04 LTS jammy", | "package": "librabbitmq-dev", | "version": "0.10.0-1ubuntu2.2", | "access": "standard update" |
| "release": "22.04 LTS jammy", | "package": "librabbitmq4", | "version": "0.10.0-1ubuntu2.2", | "access": "standard update" |
| "release": "20.04 LTS focal", | "package": "amqp-tools", | "version": "0.10.0-1ubuntu0.20.04.1~esm1", | "access": "Ubuntu Pro / ESM (see official notice)" |
| "release": "20.04 LTS focal", | "package": "librabbitmq-dev", | "version": "0.10.0-1ubuntu0.20.04.1~esm1", | "access": "Ubuntu Pro / ESM (see official notice)" |
| "release": "20.04 LTS focal", | "package": "librabbitmq4", | "version": "0.10.0-1ubuntu0.20.04.1~esm1", | "access": "Ubuntu Pro / ESM (see official notice)" |
| "release": "18.04 LTS bionic", | "package": "amqp-tools", | "version": "0.8.0-1ubuntu0.18.04.2+esm1", | "access": "Ubuntu Pro / ESM (see official notice)" |
| "release": "18.04 LTS bionic", | "package": "librabbitmq-dev", | "version": "0.8.0-1ubuntu0.18.04.2+esm1", | "access": "Ubuntu Pro / ESM (see official notice)" |
| "release": "18.04 LTS bionic", | "package": "librabbitmq4", | "version": "0.8.0-1ubuntu0.18.04.2+esm1", | "access": "Ubuntu Pro / ESM (see official notice)" |
| "release": "16.04 LTS xenial", | "package": "amqp-tools", | "version": "0.7.1-1ubuntu0.2+esm1", | "access": "Ubuntu Pro / ESM (see official notice)" |
| "release": "16.04 LTS xenial", | "package": "librabbitmq-dev", | "version": "0.7.1-1ubuntu0.2+esm1", | "access": "Ubuntu Pro / ESM (see official notice)" |
| "release": "16.04 LTS xenial", | "package": "librabbitmq4", | "version": "0.7.1-1ubuntu0.2+esm1", | "access": "Ubuntu Pro / ESM (see official notice)" |
| "release": "14.04 LTS trusty", | "package": "amqp-tools", | "version": "0.4.1-1ubuntu0.1~esm2", | "access": "Ubuntu Pro / ESM (see official notice)" |
| "release": "14.04 LTS trusty", | "package": "librabbitmq-dev", | "version": "0.4.1-1ubuntu0.1~esm2", | "access": "Ubuntu Pro / ESM (see official notice)" |
| "release": "14.04 LTS trusty", | "package": "librabbitmq1", | "version": "0.4.1-1ubuntu0.1~esm2", | "access": "Ubuntu Pro / ESM (see official notice)" |
Acesso às atualizações
Nas versões "release": "26.04 LTS resolute",, "release": "24.04 LTS noble", e "release": "22.04 LTS jammy", as correções estão disponíveis como "access": "standard update". Em "release": "20.04 LTS focal",, "release": "18.04 LTS bionic",, "release": "16.04 LTS xenial", e "release": "14.04 LTS trusty",, o acesso é pelo "access": "Ubuntu Pro / ESM (see official notice)".
Registro de origem
- Evento: "event": "security",
- Versão do aviso: "version": null,
- Campo de CVEs: "cves": [
- Campo de pacotes corrigidos: "fixedPackages": [
- Limites editoriais do aviso: "editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue."
- Marcadores estruturais do registro: {, },, }, ],
