-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 15 Aug 2026 12:27:08 +0200 Source: librabbitmq Binary: amqp-tools amqp-tools-dbgsym librabbitmq-dev librabbitmq4 librabbitmq4-dbgsym Architecture: arm64 Version: 0.15.0-1+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: arm64 Build Daemon (arm-conova-03) Changed-By: Florian Ernst Description: amqp-tools - Command-line utilities for interacting with AMQP servers librabbitmq-dev - AMQP client library written in C - Dev Files librabbitmq4 - AMQP client library written in C Changes: librabbitmq (0.15.0-1+deb13u2) trixie-security; urgency=medium . * [9bc0956] d/patches/CVE-2026-59986.patch: added from upstream. Fix amqp_decode_bytes size_t integer overflow bypasses bounds check on 32-bit (OOB read) (GHSA-jgjf-7fwf-f3c7, CVE-2026-59986) * [58e0219] d/patches/CVE-2026-61547.patch: added from upstream. Fix Heap Buffer Overflow in amqp_send_frame() When Serializing Oversized AMQP_FRAME_BODY (GHSA-hfjv-vcp3-39wh, CVE-2026-61547) Checksums-Sha1: b6661e06217c1d660b378c2aa57513963a2fbb51 69004 amqp-tools-dbgsym_0.15.0-1+deb13u2_arm64.deb ecb554746a4e992b880429b32c12539a3cf86f06 37636 amqp-tools_0.15.0-1+deb13u2_arm64.deb a3fd4be3c6e48b6b2e2b0570bae11bc16f6d5730 78084 librabbitmq-dev_0.15.0-1+deb13u2_arm64.deb d13169157c5796d0a20a86cc40497809a4d0ab9e 151884 librabbitmq4-dbgsym_0.15.0-1+deb13u2_arm64.deb a434b1d159c2a65cc050ed9dc761602c84bf7315 41500 librabbitmq4_0.15.0-1+deb13u2_arm64.deb 5a5a00b54efcb7ae56377a1b00fc6bea0c083cdd 8389 librabbitmq_0.15.0-1+deb13u2_arm64-buildd.buildinfo Checksums-Sha256: b39a823cab1e03aaff2c859f8723a934144b1425b663c5988b1f72b662bf2cd2 69004 amqp-tools-dbgsym_0.15.0-1+deb13u2_arm64.deb 7bc8abed8ac708670a489156cb9851bfa60cfe8dd954d9a0cbf7a4a7f64f8e71 37636 amqp-tools_0.15.0-1+deb13u2_arm64.deb 10da446286bc591ae7594694dca54e4a1f784a8f54b536a9e5aed00c7ab7cdaf 78084 librabbitmq-dev_0.15.0-1+deb13u2_arm64.deb 8dad46ce950cdeb701a0669f3a442d64234f44b6f118e64d8777b88cda3cd957 151884 librabbitmq4-dbgsym_0.15.0-1+deb13u2_arm64.deb 5407e9b4347ac405211c5719898aedcaf2d701c45977ec49704f3dc2ad281e2f 41500 librabbitmq4_0.15.0-1+deb13u2_arm64.deb 008e62013ab6aafaf4b7a75d71c69304e6efe714e61bb07d8a76a6964142ec1e 8389 librabbitmq_0.15.0-1+deb13u2_arm64-buildd.buildinfo Files: d48d97da82d563030c857ea181529167 69004 debug optional amqp-tools-dbgsym_0.15.0-1+deb13u2_arm64.deb b828b9d56087fd08652096c2ddf74af5 37636 net optional amqp-tools_0.15.0-1+deb13u2_arm64.deb c5bea2c7092c13abb32909c3cf24e3f9 78084 libdevel optional librabbitmq-dev_0.15.0-1+deb13u2_arm64.deb 8ab6a16878da9626c5306750c5504eca 151884 debug optional librabbitmq4-dbgsym_0.15.0-1+deb13u2_arm64.deb db28228df2c597c70abbec56cf89be35 41500 libs optional librabbitmq4_0.15.0-1+deb13u2_arm64.deb 57d24ac612a34508e4c06f5e1b0e30c3 8389 libs optional librabbitmq_0.15.0-1+deb13u2_arm64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEElFiH1oZRZh1t4FSiXVp1sEH/1mIFAmqEjNsACgkQXVp1sEH/ 1mKHFw//Y1VpAG9NYsp/+HW0F+JfM5aANJTb2s7yJFZzuKeEPMqBW7ZdWZ9YdI6x GXM/e8F7JxmPe459y5m+RKC7OBb42e3A1hdvEWQdmDS3SJ7maZsiEvhywmK2ogiR fw9Gk/ZmKuDqgDrtFQmlur9nbKBj2gcY677xQZLE70Jrh2hmt3JmA/itTYdWSTI0 XIvGGt3XdLnj0IWR+uStH3Uo0DN2E/D7Wd4aFrGtAYfSY4mxxXa214d2peOZN/AL GXkt5t80dOmnZm4OhNFsEhzW5xAs3vYmICJv+Ec4XZv4FYr+f6lRI5kH8C/niBCS RQQhyp9JLfMSuWqqdv9gughI7l3z+/CP9+3bicK29/iGJqbIV0IMtH8ER+DGNBTM wuCT7lY3VQdsYLP4hue5l4YHUkRGwR7Nb7F+OsNB5hUGHileqDjgBna/EOj8cuKz wRhQ0oiU8LDeOGTGDdWS0pAnmfjOHEGLNC3xiYzDAhMuJB+3/D9YGuzeif4eKZsz fir5TRsTb82a0MkpiOstaqfaDQJjSlvc2qivd8+pzAaD9Z2R0HowHVz93FI2E1AH beyRhv64Rjxmc/o6Wq/lxO6n4asoZq2QctzkatPI5k3Wgr5wJmMZAx7fZzCW3YFr spC7YOQ2oJ24R1GcGS4nd1dq+Li+kOwq8wlsVo7CtUp4+ALtKyI= =EK5+ -----END PGP SIGNATURE-----