[Git][security-tracker-team/security-tracker][master] new rabbitmq-server issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
46df6197 by Moritz Muehlenhoff at 2026-09-24T13:18:02+02:00
new rabbitmq-server issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -755,55 +755,91 @@ CVE-2026-68492 (An untrusted search path vulnerability in Plesk from 18.0.34 bef
 CVE-2026-68490 (Incorrect permission assignment allows local users to obtain sensitive ...)
 	NOT-FOR-US: cPanel
 CVE-2026-67405 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-9c4f-rxxm-88q3
 CVE-2026-67404 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-37wx-r6q9-6fhj
 CVE-2026-67240 (RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7  ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	[trixie] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.2 and later)
+	[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.2 and later)
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-59c5-553c-57m2
 CVE-2026-67238 (RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7  ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	[trixie] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.2 and later)
+	[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.2 and later)
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-x96j-244m-mrr2
 CVE-2026-67235 (RabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-q8g2-pc7m-m3jw
 CVE-2026-67232 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-gmgx-hhg5-43gr
 CVE-2026-67231 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-cw8c-4m83-9c6w
 CVE-2026-67229 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-ggrw-qm45-hwpv
 CVE-2026-67228 (RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7  ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	[trixie] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.2 and later)
+	[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.2 and later)
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-73qp-fwh4-2q5g
 CVE-2026-67224 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-h7cq-qrr8-7vgc
 CVE-2026-67221 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-x5h5-588r-cv55
 CVE-2026-67220 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-r3qr-4h63-mvj2
 CVE-2026-67219 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-m8pg-4x2h-jvgr
 CVE-2026-67218 (RabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.0 and later)
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-34jw-rm7g-hph4
 CVE-2026-66080 (RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.11 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.1 and later)
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-wg79-5449-m728
 CVE-2026-66079 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-c66h-hf5j-8jf9
 CVE-2026-66077 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-rjcf-35r5-xw38
 CVE-2026-66076 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-j45q-v7g2-82ph
 CVE-2026-66075 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-g5v3-w5xg-62q2
 CVE-2026-66074 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-rg5q-vcgf-rfh7
 CVE-2026-66072 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-48hm-chgv-398r
 CVE-2026-66070 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-p3hp-v9wh-ghm7
 CVE-2026-66069 (RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.1 and later)
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-fhwq-9rvh-prj2
 CVE-2026-66068 (RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1 ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-9wm4-9m6g-w38x
 CVE-2026-66067 (RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7  ...)
-	TODO: check
+	- rabbitmq-server <unfixed>
+	[trixie] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.2 and later)
+	[bookworm] - rabbitmq-server <not-affected> (Vulnerable code not present, only affects 4.2 and later)
+	NOTE: https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-hwqx-2gfg-89qf
 CVE-2026-63132 (OpenBao is an open source identity-based secrets management system. Pr ...)
 	- openbao <itp> (bug #1069794)
 CVE-2026-63131 (OpenBao is an open source identity-based secrets management system. Pr ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/46df6197a9b304a6d8689d078e29cf3819373438

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/46df6197a9b304a6d8689d078e29cf3819373438
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260924/527515ed/attachment.htm>