Vulnerability Bulletins

DSA-3761 rabbitmq-server - security update

   
Affected software Debian
 
It was discovered that RabbitMQ, an implementation of the AMQPprotocol, didnt correctly validate MQTT (MQ Telemetry Transport)connection authentication. This allowed anyone to login to an existinguser account without having to provide a password.

More info:

https://www.debian.org/security/2017/dsa-3761