[ubuntu/focal-updates] rabbitmq-server 3.8.3-0ubuntu0.2 (Accepted)

[Ubuntu Archive Robot]

rabbitmq-server (3.8.3-0ubuntu0.2) focal-security; urgency=medium

  * SECURITY UPDATE: Cross site scripting.
    - debian/patches/CVE-2021-32718.patch: Escape html in
      res.req_params.username in .../www/js/dispatcher.js.
    - debian/patches/CVE-2021-32719.patch: Format
      upstream.value['consumer-tag'] in
      .../www/js/tmpl/federation-upstream.ejs.
    - CVE-2021-32718
    - CVE-2021-32719

Date: 2024-12-06 15:10:12.393280+00:00
Changed-By: Hlib Korzhynskyy <hlib.korzhynskyy at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/rabbitmq-server/3.8.3-0ubuntu0.2
-------------- next part --------------
Sorry, changesfile not available.