mirror.gcr.io/library/rabbitmq:4.3.2

Base OS: ubuntu 24.0410 vulnerabilities fixed

Patched Image

ghcr.io/verity-org/library/rabbitmq:4.3.2

Supply Chain

SignedSLSA L3SBOMRekor

Verify this artifact

Cosign signature

cosign verify \
  --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  ghcr.io/verity-org/library/rabbitmq:4.3.2

Build provenance

gh attestation verify \
  oci://ghcr.io/verity-org/library/rabbitmq:4.3.2 \
  --owner verity-org

Before patching

Found 34 vulnerabilities in the original image. 10 fixed by Copa. 24 remaining after patching.

24 MEDIUM10 LOW

Awaiting upstream fix

No fix is available yet for these vulnerabilities. They can be suppressed in your compliance tooling until an upstream fix is released.

CVE-2026-27456MEDIUM
Package
bsdutils
Installed
1:2.39.3-9ubuntu6.5
Fixed
CVE-2026-27456MEDIUM
Package
libblkid1
Installed
2.39.3-9ubuntu6.5
Fixed
CVE-2026-4046MEDIUM
Package
libc-bin
Installed
2.39-0ubuntu8.7
Fixed
CVE-2026-4437MEDIUM
Package
libc-bin
Installed
2.39-0ubuntu8.7
Fixed
CVE-2026-4438MEDIUM
Package
libc-bin
Installed
2.39-0ubuntu8.7
Fixed
CVE-2026-5435MEDIUM
Package
libc-bin
Installed
2.39-0ubuntu8.7
Fixed
CVE-2026-6238MEDIUM
Package
libc-bin
Installed
2.39-0ubuntu8.7
Fixed
CVE-2026-4046MEDIUM
Package
libc6
Installed
2.39-0ubuntu8.7
Fixed
CVE-2026-4437MEDIUM
Package
libc6
Installed
2.39-0ubuntu8.7
Fixed
CVE-2026-4438MEDIUM
Package
libc6
Installed
2.39-0ubuntu8.7
Fixed
CVE-2026-5435MEDIUM
Package
libc6
Installed
2.39-0ubuntu8.7
Fixed
CVE-2026-6238MEDIUM
Package
libc6
Installed
2.39-0ubuntu8.7
Fixed
CVE-2026-27456MEDIUM
Package
libmount1
Installed
2.39.3-9ubuntu6.5
Fixed
CVE-2026-13757MEDIUM
Package
libp11-kit0
Installed
0.25.3-4ubuntu2.1
Fixed
CVE-2026-27456MEDIUM
Package
libsmartcols1
Installed
2.39.3-9ubuntu6.5
Fixed
CVE-2026-27456MEDIUM
Package
libuuid1
Installed
2.39.3-9ubuntu6.5
Fixed
CVE-2026-27456MEDIUM
Package
mount
Installed
2.39.3-9ubuntu6.5
Fixed
CVE-2026-27456MEDIUM
Package
util-linux
Installed
2.39.3-9ubuntu6.5
Fixed
CVE-2024-2236LOW
Package
libgcrypt20
Installed
1.10.3-2ubuntu0.1
Fixed
CVE-2026-40228LOW
Package
libsystemd0
Installed
255.4-1ubuntu8.16
Fixed
CVE-2026-40228LOW
Package
libudev1
Installed
255.4-1ubuntu8.16
Fixed
CVE-2024-56433LOW
Package
login
Installed
1:4.13+dfsg1-4ubuntu3.2
Fixed
CVE-2024-56433LOW
Package
passwd
Installed
1:4.13+dfsg1-4ubuntu3.2
Fixed
CVE-2026-27171LOW
Package
zlib1g
Installed
1:1.3.dfsg-3.1ubuntu2.1
Fixed

ID	Package	Installed	Severity
CVE-2026-27456	bsdutils	1:2.39.3-9ubuntu6.5	MEDIUM
CVE-2026-27456	libblkid1	2.39.3-9ubuntu6.5	MEDIUM
CVE-2026-4046	libc-bin	2.39-0ubuntu8.7	MEDIUM
CVE-2026-4437	libc-bin	2.39-0ubuntu8.7	MEDIUM
CVE-2026-4438	libc-bin	2.39-0ubuntu8.7	MEDIUM
CVE-2026-5435	libc-bin	2.39-0ubuntu8.7	MEDIUM
CVE-2026-6238	libc-bin	2.39-0ubuntu8.7	MEDIUM
CVE-2026-4046	libc6	2.39-0ubuntu8.7	MEDIUM
CVE-2026-4437	libc6	2.39-0ubuntu8.7	MEDIUM
CVE-2026-4438	libc6	2.39-0ubuntu8.7	MEDIUM
CVE-2026-5435	libc6	2.39-0ubuntu8.7	MEDIUM
CVE-2026-6238	libc6	2.39-0ubuntu8.7	MEDIUM
CVE-2026-27456	libmount1	2.39.3-9ubuntu6.5	MEDIUM
CVE-2026-13757	libp11-kit0	0.25.3-4ubuntu2.1	MEDIUM
CVE-2026-27456	libsmartcols1	2.39.3-9ubuntu6.5	MEDIUM
CVE-2026-27456	libuuid1	2.39.3-9ubuntu6.5	MEDIUM
CVE-2026-27456	mount	2.39.3-9ubuntu6.5	MEDIUM
CVE-2026-27456	util-linux	2.39.3-9ubuntu6.5	MEDIUM
CVE-2024-2236	libgcrypt20	1.10.3-2ubuntu0.1	LOW
CVE-2026-40228	libsystemd0	255.4-1ubuntu8.16	LOW
CVE-2026-40228	libudev1	255.4-1ubuntu8.16	LOW
CVE-2024-56433	login	1:4.13+dfsg1-4ubuntu3.2	LOW
CVE-2024-56433	passwd	1:4.13+dfsg1-4ubuntu3.2	LOW
CVE-2026-27171	zlib1g	1:1.3.dfsg-3.1ubuntu2.1	LOW

Original image reference

mirror.gcr.io/library/rabbitmq:4.3.2