-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 15 Aug 2026 12:27:08 +0200 Source: librabbitmq Binary: amqp-tools amqp-tools-dbgsym librabbitmq-dev librabbitmq4 librabbitmq4-dbgsym Architecture: i386 Version: 0.15.0-1+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Florian Ernst Description: amqp-tools - Command-line utilities for interacting with AMQP servers librabbitmq-dev - AMQP client library written in C - Dev Files librabbitmq4 - AMQP client library written in C Changes: librabbitmq (0.15.0-1+deb13u2) trixie-security; urgency=medium . * [9bc0956] d/patches/CVE-2026-59986.patch: added from upstream. Fix amqp_decode_bytes size_t integer overflow bypasses bounds check on 32-bit (OOB read) (GHSA-jgjf-7fwf-f3c7, CVE-2026-59986) * [58e0219] d/patches/CVE-2026-61547.patch: added from upstream. Fix Heap Buffer Overflow in amqp_send_frame() When Serializing Oversized AMQP_FRAME_BODY (GHSA-hfjv-vcp3-39wh, CVE-2026-61547) Checksums-Sha1: 50f8cad8f9fcd9833aeb70606d08e1dedb351e6f 60148 amqp-tools-dbgsym_0.15.0-1+deb13u2_i386.deb ae4aff4534030115316142b5eb2a0497e2f691ff 37584 amqp-tools_0.15.0-1+deb13u2_i386.deb ce6e9012f4b9502c31422d96c71ce9b12d2bbe27 83584 librabbitmq-dev_0.15.0-1+deb13u2_i386.deb 22240df0c5c787a52efd71cc1f08baf78d8d993d 130708 librabbitmq4-dbgsym_0.15.0-1+deb13u2_i386.deb dc0decfbe17cf3ba76eada913b49e74a6ec69a1c 46244 librabbitmq4_0.15.0-1+deb13u2_i386.deb 90b7ea8be6ea1523d29a48f3d6b002b9fd6bcfc0 8297 librabbitmq_0.15.0-1+deb13u2_i386-buildd.buildinfo Checksums-Sha256: 72f86ec45e284c86f97775fc46d06cc89f29c12da685a1037f6dc499e2874d64 60148 amqp-tools-dbgsym_0.15.0-1+deb13u2_i386.deb cf59e441ee606a82dd598d97afd11d53e3638e7f393eca18c3229e2f1a291191 37584 amqp-tools_0.15.0-1+deb13u2_i386.deb ae6d2cf99a2fc7e8fc3925cfc88bf59ad59f83190c364dada71b23f1c6918588 83584 librabbitmq-dev_0.15.0-1+deb13u2_i386.deb ad83f88a976f6015e3654b66236449554d96c3c8564be52fc133c82cf1623aa8 130708 librabbitmq4-dbgsym_0.15.0-1+deb13u2_i386.deb 36c286319ae5b9020c9645a8bb7665567b23b9c4d24c49c21c5b167a0b33e2c9 46244 librabbitmq4_0.15.0-1+deb13u2_i386.deb c6e5cffa8a13dd2449fcbacde392c5e6d33642122727b68a4a6f1f12c13434bc 8297 librabbitmq_0.15.0-1+deb13u2_i386-buildd.buildinfo Files: 451f9cef99cd14423d528a3b2f4f237a 60148 debug optional amqp-tools-dbgsym_0.15.0-1+deb13u2_i386.deb 3549044df82a7a1ee4dda763b1164a66 37584 net optional amqp-tools_0.15.0-1+deb13u2_i386.deb 1faddbde316057771ed2378a20b55d80 83584 libdevel optional librabbitmq-dev_0.15.0-1+deb13u2_i386.deb e3733d8bb0db4de617e5f8f7fcd3437a 130708 debug optional librabbitmq4-dbgsym_0.15.0-1+deb13u2_i386.deb c908ac1b54072339eb5d3bdd0378314d 46244 libs optional librabbitmq4_0.15.0-1+deb13u2_i386.deb 3a65655de6d324e245d96c7590f9cb92 8297 libs optional librabbitmq_0.15.0-1+deb13u2_i386-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBDWXQb2umOtH4DRpYg9P9sm2dfEFAmqEjK4ACgkQYg9P9sm2 dfHicBAAnTPoQDzpaA6hNDAWBEF3cqsb+LneYoXXF4r+EeHK3Q1gEac6LTGqVpg8 dMHMUdt+7HM7MhHEKEe+086vP8kcVTVQZ29QpoAq+4z+jaHHp//Sd4l4NymO/G2G 3qAMJHkIGzazC+awWO06Osd8g3E483vZzcEtinM0qGqsM7RZkX2XPoTfCKIwFLsa 2DdsvzUJRnDP9uPETDwLZf13MsmdleW8gfIAywx3+5Td3X/UzTx0qSOT8Cf3DcXr 27qcmq9DG4ggJ2olCPdt5RtrIUsoYHglxUMt+O1Gz1VR8og0reMOYRquPLvGJmN5 sCT+usETDObyfRCoxrQ1skhMAfKvuDJ7y7QrvhbR8XH1tl8MIAxzeJvNvEhRxcpq yFgUYNzV8PbtKq1FQLEErfw+r35j7zcOllRlxJk2TwhjESoph0RB9smbEVmSYICS UZtDqjady4gnjahKvZnSzVGJL0j4DUu7b6dw5dmWZRTRfUn+hStP9l9s6ToEIO04 kCQ3j+1b+vx1eO7fxFd4EzW5O8fax8UO6d/sXE4FpZCeLMMITwsHRD5/6Xhcdj0q osdM1A+QsjV1O/BGgwscd8t66ALM9E+Zbc745ju7cvwZR57+Xr0YMG2riS9sOq6I D92f0Aif5ttNG33PUWO6FDaz/QPe4X2AAFqEIrHCf9SUgiNZ/8c= =qsFo -----END PGP SIGNATURE-----