-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 15 Aug 2026 12:27:08 +0200 Source: librabbitmq Binary: amqp-tools amqp-tools-dbgsym librabbitmq-dev librabbitmq4 librabbitmq4-dbgsym Architecture: armhf Version: 0.15.0-1+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: armhf Build Daemon (arm-ubc-06) Changed-By: Florian Ernst Description: amqp-tools - Command-line utilities for interacting with AMQP servers librabbitmq-dev - AMQP client library written in C - Dev Files librabbitmq4 - AMQP client library written in C Changes: librabbitmq (0.15.0-1+deb13u2) trixie-security; urgency=medium . * [9bc0956] d/patches/CVE-2026-59986.patch: added from upstream. Fix amqp_decode_bytes size_t integer overflow bypasses bounds check on 32-bit (OOB read) (GHSA-jgjf-7fwf-f3c7, CVE-2026-59986) * [58e0219] d/patches/CVE-2026-61547.patch: added from upstream. Fix Heap Buffer Overflow in amqp_send_frame() When Serializing Oversized AMQP_FRAME_BODY (GHSA-hfjv-vcp3-39wh, CVE-2026-61547) Checksums-Sha1: 84edc1037383ca8e3b2527b5448190cf101ad5b3 62184 amqp-tools-dbgsym_0.15.0-1+deb13u2_armhf.deb 87903cebb32a47b0c52204a5509a7aeb92a59b26 36148 amqp-tools_0.15.0-1+deb13u2_armhf.deb 6d1f4a85685cc7f23f405ac8476f9282f69ef724 73980 librabbitmq-dev_0.15.0-1+deb13u2_armhf.deb d85ffbff97120b8a660a0edd39c05cb5337ce31e 149192 librabbitmq4-dbgsym_0.15.0-1+deb13u2_armhf.deb 77077f811c6474421fabe9ff16d4a155bf8f2a5a 37752 librabbitmq4_0.15.0-1+deb13u2_armhf.deb 49ec713dd567136ea8eb5a4cc161df5c62ad30b7 8271 librabbitmq_0.15.0-1+deb13u2_armhf-buildd.buildinfo Checksums-Sha256: 736c5ffa3681e93984aeb706c686526d160ef8c91fe4b30bcaa7b72530a78985 62184 amqp-tools-dbgsym_0.15.0-1+deb13u2_armhf.deb ad19f4fe5a3ae6ba0247ccb2266ff48a74197e93492e75d9c0ea3b7de471345e 36148 amqp-tools_0.15.0-1+deb13u2_armhf.deb bf062a5ffe08b3f5cf7ccefbfa2b21b110e4510c749d5b5d6df1f4f920ede13d 73980 librabbitmq-dev_0.15.0-1+deb13u2_armhf.deb acaf95643e945491838c62b24379a2cc35563c0e0c42ea6db2d3a0d4c5d341c0 149192 librabbitmq4-dbgsym_0.15.0-1+deb13u2_armhf.deb af9ce172fa7dae17c51a29e8e305d7ed3016cda6c7317e12fca1e24e35087a0e 37752 librabbitmq4_0.15.0-1+deb13u2_armhf.deb d092411ea0ad3f7abfe8d33d755b57dc7fcdd468f926f85506ec8582fd11f488 8271 librabbitmq_0.15.0-1+deb13u2_armhf-buildd.buildinfo Files: 0323114a1d91773f85945cd760bc3717 62184 debug optional amqp-tools-dbgsym_0.15.0-1+deb13u2_armhf.deb e782ad97818a69a883559e4e7fe79e0b 36148 net optional amqp-tools_0.15.0-1+deb13u2_armhf.deb 93f29f580517301dfa0d9b771ecc17af 73980 libdevel optional librabbitmq-dev_0.15.0-1+deb13u2_armhf.deb 9833aa3eac6ceecc77bc660101d0a21b 149192 debug optional librabbitmq4-dbgsym_0.15.0-1+deb13u2_armhf.deb c3b29cafa4d20622c8ce813b554c04bf 37752 libs optional librabbitmq4_0.15.0-1+deb13u2_armhf.deb 206b0f43e484fbb612872eff664c31ce 8271 libs optional librabbitmq_0.15.0-1+deb13u2_armhf-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBOUsBrtd5lcy6oRfutMAkCxKbL0FAmqEjMsACgkQutMAkCxK bL3GqA//W89IGW02LsTyO5wWG9NZcKbsz4W35VZ0MVEwIkdO5I/DFj/EPOeaRZRA rSI7Z5UQNb9f3ZfS3shT9IQ/L0wV8GSckBK3pn0xFAD6Md/LFBuVAFFlbUCmbRQo f773mQBU031gBsz3BrEIo56h99lC4mXf02gnYKefZP3p5L2AMkTq9uYqWkv4UYwH oXhVbWJWJDcYvJ5a3lKW7O9r0aLl51192kWYtJdGmrUCAmSAI9fSekM68u746Vbe 9vc05PwTRi+qxB/LBOhtGqv4Lyh6+UPD16aQ0xGu3CBO9PFODRw0FxL1FwMjqJVw DKT1ku2KpjpwQMUYdGnJej1bpQqjY5J3HaKePwnthW8c0sr0kSJhQbzF8qSMNaRd HS57QThhppUtLaBz98AZ7sXZYQcwjYPENe53rxXakgcIz4OiZzh9reLh3eyrOKRk B/FojJ3CIvl9ATFTo7DyW20OrIfQ028U6wTUWF526JL0d4Drr86PcEcfX7PV5m2n vHAtF8G+07XCWTKCgUzP5CFhY5PGox9kH3yxm+f8AA18Af1Ob554DxRa3flIh/Bx iYu833NtbbMtOa+e8e/hfYjXRALh3hVWTfNaFmklKkwvgHuFhPCOthv79vDXFJOE ED392Ogc379R4ayaF4Blpc+fqh4M5kbzQeAZvx0KJ+wgRxm/Yi0= =BBjd -----END PGP SIGNATURE-----