-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 15 Aug 2026 12:27:08 +0200 Source: librabbitmq Binary: amqp-tools amqp-tools-dbgsym librabbitmq-dev librabbitmq4 librabbitmq4-dbgsym Architecture: riscv64 Version: 0.15.0-1+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: riscv64 Build Daemon (rv-osuosl-03) Changed-By: Florian Ernst Description: amqp-tools - Command-line utilities for interacting with AMQP servers librabbitmq-dev - AMQP client library written in C - Dev Files librabbitmq4 - AMQP client library written in C Changes: librabbitmq (0.15.0-1+deb13u2) trixie-security; urgency=medium . * [9bc0956] d/patches/CVE-2026-59986.patch: added from upstream. Fix amqp_decode_bytes size_t integer overflow bypasses bounds check on 32-bit (OOB read) (GHSA-jgjf-7fwf-f3c7, CVE-2026-59986) * [58e0219] d/patches/CVE-2026-61547.patch: added from upstream. Fix Heap Buffer Overflow in amqp_send_frame() When Serializing Oversized AMQP_FRAME_BODY (GHSA-hfjv-vcp3-39wh, CVE-2026-61547) Checksums-Sha1: 9d3798ec1a007af69eddd71d7278dd708b754f5f 66224 amqp-tools-dbgsym_0.15.0-1+deb13u2_riscv64.deb de8bee14ba32ebe4a016a33c60daa551f1d4edd7 37636 amqp-tools_0.15.0-1+deb13u2_riscv64.deb c476ad6ba27cebf5c107276b8bd399f2164aad1a 150868 librabbitmq-dev_0.15.0-1+deb13u2_riscv64.deb b1c7da6b59314cb9e5dd4864a4038ee32d2c570d 143592 librabbitmq4-dbgsym_0.15.0-1+deb13u2_riscv64.deb 9c3db7471d6b6847e3646f65645b6466bd583635 46636 librabbitmq4_0.15.0-1+deb13u2_riscv64.deb 8bd7ac4ced36bde05acf88d945dc64e37269b94e 8370 librabbitmq_0.15.0-1+deb13u2_riscv64-buildd.buildinfo Checksums-Sha256: 0c9894e99dc85fdbefd9fd12807c141157cc5de57bac5ad78c3df91f61477458 66224 amqp-tools-dbgsym_0.15.0-1+deb13u2_riscv64.deb e6c4bfd7631409b636c314f0971c91e3b53030e98607cf7ac5204aaefa647b22 37636 amqp-tools_0.15.0-1+deb13u2_riscv64.deb 19c834afc29b843753c921e9f4694c7c27300c216f8c27debb0ed3afb2141f7d 150868 librabbitmq-dev_0.15.0-1+deb13u2_riscv64.deb a7a5c0df2ae249e2740d4e6a179368bfadfdc253f1fd24efaabcc84b89938bb8 143592 librabbitmq4-dbgsym_0.15.0-1+deb13u2_riscv64.deb 617020c227381514007792b9b48a0e26bfea30cbbd99a8c75a5ad149801d183f 46636 librabbitmq4_0.15.0-1+deb13u2_riscv64.deb 62500d33473fb0fe8adeb260fd0e79e810c91d1974624e1b84127ab9b8e2f6bb 8370 librabbitmq_0.15.0-1+deb13u2_riscv64-buildd.buildinfo Files: 1e0201f038abd0dba0a29b32a4f4dd69 66224 debug optional amqp-tools-dbgsym_0.15.0-1+deb13u2_riscv64.deb 761dc3d3c5e427923b7e95aad8fa4e2b 37636 net optional amqp-tools_0.15.0-1+deb13u2_riscv64.deb 83edc0bb57e31d869c4fdad973b7eece 150868 libdevel optional librabbitmq-dev_0.15.0-1+deb13u2_riscv64.deb ca87aa41a89f7f395d1acf635d2f74d8 143592 debug optional librabbitmq4-dbgsym_0.15.0-1+deb13u2_riscv64.deb 945b2c9bcf01445230e84aaa4c9640b3 46636 libs optional librabbitmq4_0.15.0-1+deb13u2_riscv64.deb cea5f0c20f062352f1f9c5e8a156d489 8370 libs optional librabbitmq_0.15.0-1+deb13u2_riscv64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEExv8RwtKAmv8J56r/6ETk30hvxtkFAmqEjfkACgkQ6ETk30hv xtmY2Q//ZQKaezkc1MVNYIfA55L87jI1s9Ra70D2fXMY24YNuKfxb6TvJdQOXjXV us2Gstpzj/43N4cHPUKEFm6K99kYQHD/7w/GCzBJnVUg8vyuDqIVIfFymKEWFp1f NwvnNBprzuG2O72rSwfRF51Tv2lw97v8yjl1WCTgwt+B/vevXx2nBkPnaC99MaKF /JKYsJwOTzkkQF5hS28SKueJJeA61OvVTGe5nCZrGgWevKRkW2Wxjo95m6DjYhzf RwvQumDptIPQdUQzLsimXSyRiFOK6KqTyyytyRO31PdWi0rMnXmfGoIAoIDqTDH1 8Gh6+E2kBjPfxLwFVMp0Zt/0cvqZBIZX5/stXeC+BCsw6vmn4nPUV4F2YSOoMOil mkE3PrM4UgZgnmtfsSVeNDUld0SY+YtN3C7bNOKCezh8zQ34zpBH5PckWllmtqqY b1U17nwAE+wC/edfRQpJopbyZT4um2WEZRNN5NTomObq9zNG8IZN+6qSvTSVIs6+ WmUBJv33bxEQd7/Z6vyfB1yeehUoItfYWAB9Qa6QbNyepEENGRqgaRHkZT7B8snm pebFOQP9TbCNRbzge9LnPuDyYQrqFMYV6ea/5W/C4SuzuBbuVgfSoLbbV6+FOr1w zcGp2ZhHn8ng1haprjxK1lozwCfVvHx477ArjEu6VP8kT1n5tEs= =sx2U -----END PGP SIGNATURE-----