-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 15 Aug 2026 12:27:08 +0200 Source: librabbitmq Binary: amqp-tools amqp-tools-dbgsym librabbitmq-dev librabbitmq4 librabbitmq4-dbgsym Architecture: amd64 Version: 0.15.0-1+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Florian Ernst Description: amqp-tools - Command-line utilities for interacting with AMQP servers librabbitmq-dev - AMQP client library written in C - Dev Files librabbitmq4 - AMQP client library written in C Changes: librabbitmq (0.15.0-1+deb13u2) trixie-security; urgency=medium . * [9bc0956] d/patches/CVE-2026-59986.patch: added from upstream. Fix amqp_decode_bytes size_t integer overflow bypasses bounds check on 32-bit (OOB read) (GHSA-jgjf-7fwf-f3c7, CVE-2026-59986) * [58e0219] d/patches/CVE-2026-61547.patch: added from upstream. Fix Heap Buffer Overflow in amqp_send_frame() When Serializing Oversized AMQP_FRAME_BODY (GHSA-hfjv-vcp3-39wh, CVE-2026-61547) Checksums-Sha1: dfa801e5311014d904817272e7a7eca9617d948a 68676 amqp-tools-dbgsym_0.15.0-1+deb13u2_amd64.deb 163978c50de640d0cfe01c5d31ae786b140d1b53 38184 amqp-tools_0.15.0-1+deb13u2_amd64.deb c866acb4f3e3d19dc4d1fb6673fd0730356d63e6 79508 librabbitmq-dev_0.15.0-1+deb13u2_amd64.deb 9f30dc097e4244d4bff2e979e6b30636406fec87 144756 librabbitmq4-dbgsym_0.15.0-1+deb13u2_amd64.deb fe87836897f7a1f943fb1b1bbf37606fe5c81280 42508 librabbitmq4_0.15.0-1+deb13u2_amd64.deb 793c0a64a121001204c2c99d0d203ae4b2c98b4d 8405 librabbitmq_0.15.0-1+deb13u2_amd64-buildd.buildinfo Checksums-Sha256: 0a67f8cae47ae806ada8b886a300e105b43f95d19cae51d38f6fbc16a77f2448 68676 amqp-tools-dbgsym_0.15.0-1+deb13u2_amd64.deb fb861da4c462512d4149346bf48956931de4fdbf2aac3ef61812d82aec4cc831 38184 amqp-tools_0.15.0-1+deb13u2_amd64.deb 64d8798f7a5e983ed76a6095e53b82ae843098f2381d74660c65f96a23cf9a4e 79508 librabbitmq-dev_0.15.0-1+deb13u2_amd64.deb 1b9d96ccfe50ec27e807ab28fde08354d99bd0ff4721b14284103c4ac8552d05 144756 librabbitmq4-dbgsym_0.15.0-1+deb13u2_amd64.deb 7b81f891935c05a01ddca461564906dbc3c48f02519b2c20b8ca7590f2868112 42508 librabbitmq4_0.15.0-1+deb13u2_amd64.deb f3129ceae870715f2df17812ef10ea4eb6df57c3f1df6b503be909232edc5a22 8405 librabbitmq_0.15.0-1+deb13u2_amd64-buildd.buildinfo Files: 6465a8e393d4bb3fa8265ad0342fdedf 68676 debug optional amqp-tools-dbgsym_0.15.0-1+deb13u2_amd64.deb c6cf14f4ec60f9849637bf7a37008f5e 38184 net optional amqp-tools_0.15.0-1+deb13u2_amd64.deb d460f6c7ee30ccd75767b5240e18bd0f 79508 libdevel optional librabbitmq-dev_0.15.0-1+deb13u2_amd64.deb b659248e9d9f4fa91b3e755cad201810 144756 debug optional librabbitmq4-dbgsym_0.15.0-1+deb13u2_amd64.deb ac0753906fa924cf70f826e1498e1ed2 42508 libs optional librabbitmq4_0.15.0-1+deb13u2_amd64.deb 623d9de8930af933579d370c68495ce8 8405 libs optional librabbitmq_0.15.0-1+deb13u2_amd64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmqEjPkACgkQN8Ugyu9d QiRzThAAjOtyUsVcRGvfNM+BkwXNKfhUYH1i4hsoXT3qnvIybX5KKQOFhHfwTMXz lQh+2SYhdqC0GPuY2oJED36DQieMwojp+ETfT8EKvmuyhShYNhJNanMy1s1/xDhd hi4cauQ5ir9jvt7NLM7eBoUu5bv1ooqIwHrWlvgJZ37IWaw2oSqF5AIcPUYyh1uT RktB8YvlcdnyDk6sBTQgHkObM/ZNZ1uqhGysHu/J2Y/v+gyUToz4pJGiQbQTzGg8 0IYS2A0grY10g48tUkV1ds0UxI1jaTXYwYUWYzM+7INYi9wZhQ1sZbDmm6UMmtkJ r4SQOHoYzeDd7qzj034GldTRh65d1QBZ6QtA3L+QcxGzFM/ExtTmjWAHvUXDtuKl YTDfYjKYV+y7HuOwr8oK6v8LHJZsRpdhqglKw/70ch1VMzrp6uusP8GM6uwmihAS e3MIeNesHjBZ/+O/96s2pooPURxylwqxjZ8YyK2P8d5exBVETX7YkMPSIQl1aBtr qMsNZAgXBZqewe0uAcZF78zRqamCyHvLmgiuOzF/MvBs8LNyombLR3m+9QPjOEPH Il/6Do+6XOER6mJh5bykR07mX38HT5wJ6PGcYIIKBMDRoMExTHRt2M0tz4VTgnNW x2vcw8rTAQfrpxkMSyiMgLRH+R0oRjOQux+StjYvFEu+B2rZbhc= =OVIt -----END PGP SIGNATURE-----