DockerState

Home › Databases, caches and queues › rabbitmq › 4

rabbitmq:4

The RabbitMQ message broker, tag 4, built on Ubuntu 26.04. Pushed to Docker Hub 4 days ago.

Medium 38Low 4Starts as root5 platforms

131 MBdownload (compressed)
286 MBunpacked on disk
10filesystem layers
103packages
7,576files
docker pull rabbitmq:4rabbitmq@sha256:485319d42170eab53d8a030e1cc49d95e41f5d325479fa504736db8091981eb7

Size per platform

Compressed download size on Docker Hub for each architecture.

  • amd64131 MB
  • ppc64le131 MB
  • arm64129 MB
  • s390x123 MB
  • arm/v7114 MB

Where the bytes go

Unpacked bytes by directory in the final amd64 filesystem.

  • /opt/erlang99 MB
  • /usr/lib/x86_64-linux-gnu44 MB
  • /usr/bin42 MB
  • /opt/rabbitmq34 MB
  • /opt/openssl30 MB
  • /usr/sbin6.8 MB
  • /var/lib3.4 MB
  • /usr/share/coreutils2.3 MB
  • /var/cache1.7 MB
  • /usr/share/doc1.7 MB

Layers

The 10 filesystem layers of the amd64 image, in build order, with each layer's compressed size and the build step that made it.

Full build steps
  1. 42 MBumoci raw add-layer --image /home/buildd/rockcraft-ubuntu-cc003627bc5bab71b42ff0f8e1a41f88/images/ubuntu:rockcraft-base /home/buildd/rockcraft-ubuntu-cc003627bc5bab71b42ff0f8e1a41f88/images/.temp_layer.9587.tar --tag 26.04
  2. 392 Bumoci raw add-layer --image /home/buildd/rockcraft-ubuntu-cc003627bc5bab71b42ff0f8e1a41f88/images/ubuntu:26.04 /home/buildd/rockcraft-ubuntu-cc003627bc5bab71b42ff0f8e1a41f88/images/.temp_layer.control_data.9587.tar
  3. 51 MBCOPY /opt/erlang /opt/erlang # buildkit
  4. 9.1 MBCOPY /opt/openssl /opt/openssl # buildkit
  5. 9 kBRUN /bin/sh -c set -eux; ln -vsf /etc/ssl/certs /etc/ssl/private "$OPENSSL_INSTALL_PATH_PREFIX/etc/ssl"; ldconfig; sed -i.ORIG -e "/\.include.*fips/ s!.*!.include $OPENSSL_INSTALL_PATH_PREFIX/etc/ssl/fipsmodule.cnf!" -e '/# fips =/s/.*/fips = fips_sect/' "$OPENSSL_INSTALL_PATH_PREFIX/etc/ssl/openssl.cnf"; sed -i.ORIG -e '/^activate/s/^/#/' "$OPENSSL_INSTALL_PATH_PREFIX/etc/ssl/fipsmodule.cnf"; [ "$(command -v openssl)" = "$OPENSSL_INSTALL_PATH_PREFIX/bin/openssl" ]; openssl version; openssl version -d; erl -noshell -eval 'ok = crypto:start(), ok = io:format("~p~n~n~p~n~n", [crypto:
  6. 29 MBRUN /bin/sh -c set -eux; export DEBIAN_FRONTEND=noninteractive; apt-get update; apt-get install --yes --no-install-recommends ca-certificates gosu tzdata ; gosu nobody true; savedAptMark="$(apt-mark showmanual)"; apt-get install --yes --no-install-recommends gnupg wget xz-utils ; rm -rf /var/lib/apt/lists/*; RABBITMQ_SOURCE_URL="https://github.com/rabbitmq/rabbitmq-server/releases/download/v$RABBITMQ_VERSION/rabbitmq-server-generic-unix-latest-toolchain-$RABBITMQ_VERSION.tar.xz"; RABBITMQ_PATH="/usr/local/src/rabbitmq-$RABBITMQ_VERSION"; wget --progress dot:giga --ou
  7. 190 BRUN /bin/sh -c gosu rabbitmq rabbitmq-plugins enable --offline rabbitmq_prometheus # buildkit
  8. 109 BRUN /bin/sh -c ln -sf /opt/rabbitmq/plugins /plugins # buildkit
  9. 620 BCOPY --chown=rabbitmq:rabbitmq 10-defaults.conf 20-management_agent.disable_metrics_collector.conf /etc/rabbitmq/conf.d/ # buildkit
  10. 834 BCOPY docker-entrypoint.sh /usr/local/bin/ # buildkit

Known vulnerabilities

0Critical0 with a fix
0High0 with a fix
38Medium0 with a fix
4Low0 with a fix
0Unknown0 with a fix

42 findings across 103 packages; 0 have a fixed version upstream, so rebuilding or updating packages clears them. The rest have no fix released yet; distributions often mark these “will not fix” or “deferred” for issues that do not affect the packaged build.

SeverityVulnerabilityAffected packagesFixed in
Medium CVE-2026-102473dash: dash: Super-polynomial backtracking in pmatch when libc fnmatch is disabled dashinstalled 0.5.12-12ubuntu3 no fix yet
Medium CVE-2026-102474dash: dash: Heap out-of-bounds write in conv_escape via undersized Unicode escape reservation dashinstalled 0.5.12-12ubuntu3 no fix yet
Medium CVE-2026-103111pcre2: pcre2: Out-of-bounds write via crafted regular expression libpcre2-8-0installed 10.46-1build1 no fix yet
Medium CVE-2026-18374glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string libc-bin, libc-gconv-modules-extra, libc6installed 2.43-2ubuntu2.4 no fix yet
Medium CVE-2026-18477tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape tarinstalled 1.35+dfsg-4ubuntu0.4 no fix yet
Medium CVE-2026-18508tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite tarinstalled 1.35+dfsg-4ubuntu0.4 no fix yet
Medium CVE-2026-35341rust-coreutils: uutils coreutils mkfifo: Information disclosure via unauthorized file permission modification rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35344The dd utility in uutils coreutils suppresses errors during file trunc ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35345A vulnerability in the tail utility of uutils coreutils allows for the ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35348The sort utility in uutils coreutils is vulnerable to a process panic ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35350The cp utility in uutils coreutils fails to properly handle setuid and ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35351The mv utility in uutils coreutils fails to preserve file ownership du ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35352A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35354A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35357The cp utility in uutils coreutils is vulnerable to an information dis ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35359A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utilit ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35360The touch utility in uutils coreutils is vulnerable to a Time-of-Check ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35363A vulnerability in the rm utility of uutils coreutils allows the bypas ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35364rust-coreutils: uutils coreutils mv utility: Arbitrary File Overwrite via TOCTOU Race Condition rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35367The nohup utility in uutils coreutils creates its default output file, ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35368rust-coreutils: uutils coreutils: Privilege escalation and arbitrary code execution in chroot utility rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35370The id utility in uutils coreutils miscalculates the groups= section o ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35371The id utility in uutils coreutils exhibits incorrect behavior in its ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35373A logic error in the ln utility of uutils coreutils causes the program ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35374A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the sp ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-35377A logic error in the env utility of uutils coreutils causes a failure ... rust-coreutilsinstalled 0.10.0-1ubuntu2~26.04.1 no fix yet
Medium CVE-2026-86145pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions libpcre2-8-0installed 10.46-1build1 no fix yet
Medium CVE-2026-89092glibc: nscd stack overflow leads to degraded DNS resolution libc-bin, libc-gconv-modules-extra, libc6installed 2.43-2ubuntu2.4 no fix yet
Medium CVE-2026-89156PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback libpcre2-8-0installed 10.46-1build1 no fix yet
Medium CVE-2026-89157pcre2: PCRE2: Out-of-bounds write via large pattern input libpcre2-8-0installed 10.46-1build1 no fix yet
Medium CVE-2026-89158PCRE2: PCRE2: Out-of-bounds write via integer overflow on 32-bit platforms libpcre2-8-0installed 10.46-1build1 no fix yet
Medium CVE-2026-89160pcre2: PCRE2: Denial of Service via out-of-bounds read during invalid UTF matching libpcre2-8-0installed 10.46-1build1 no fix yet
Medium CVE-2026-89161pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match libpcre2-8-0installed 10.46-1build1 no fix yet
Medium CVE-2026-89162pcre2: PCRE2: Information disclosure via pcre2_serialize_encode libpcre2-8-0installed 10.46-1build1 no fix yet
Low CVE-2024-56433shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise login.defs, passwdinstalled 1:4.17.4-2ubuntu3 no fix yet
Low CVE-2026-40228systemd: systemd-journald: Unintended output to user terminals via logger command libsystemd0, libudev1installed 259.9-0ubuntu0.1 no fix yet

Packages

Debian packages
92
Go modules
11

Image configuration

Base OS
Ubuntu 26.04
Default user
root (no USER set; the entrypoint may still drop privileges)
Entrypoint
docker-entrypoint.sh
Command
rabbitmq-server
Exposed ports
15691/tcp, 15692/tcp, 25672/tcp, 4369/tcp, 5671/tcp, 5672/tcp
Image created
2026-10-26
amd64 digest
sha256:184d4ae2a5d7fd4cbe1ad7165d1fb6c1377735ed2744c6be478deed5e8f0ba88

Other RabbitMQ tags

rabbitmq:4-alpine178 MB unpacked · 90 MB download✓ 0 known rabbitmq:4-management297 MB unpacked · 136 MB downloadM 38L 4

Platform sizes and layers: Docker Hub API, checked 2026-11-01. Unpacked size, files and SBOM: measured 2026-10-31 from digest sha256:184d4ae2a5d7. Vulnerabilities: Trivy re-scan 2026-11-01, database 2026-11-01. Methodology.