-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 15 Aug 2026 12:27:08 +0200
Source: librabbitmq
Architecture: source
Version: 0.15.0-1+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: Florian Ernst <florian@debian.org>
Changed-By: Florian Ernst <florian@debian.org>
Changes:
 librabbitmq (0.15.0-1+deb13u2) trixie-security; urgency=medium
 .
   * [9bc0956] d/patches/CVE-2026-59986.patch: added from upstream.
     Fix amqp_decode_bytes size_t integer overflow bypasses bounds check on
     32-bit (OOB read) (GHSA-jgjf-7fwf-f3c7, CVE-2026-59986)
   * [58e0219] d/patches/CVE-2026-61547.patch: added from upstream.
     Fix Heap Buffer Overflow in amqp_send_frame() When Serializing Oversized
     AMQP_FRAME_BODY (GHSA-hfjv-vcp3-39wh, CVE-2026-61547)
Checksums-Sha1:
 a19420e5506735556fb2a7d843c87a8c4bd24fb6 2119 librabbitmq_0.15.0-1+deb13u2.dsc
 3874a330f0118abec914590136c77de456d080ac 10560 librabbitmq_0.15.0-1+deb13u2.debian.tar.xz
 cdb68f2c343ce141f5d40803422e67061966cba3 8559 librabbitmq_0.15.0-1+deb13u2_amd64.buildinfo
Checksums-Sha256:
 773644bd292a0e84116a2e70dbe04470c162a0a1b86c69deee14261801518fe7 2119 librabbitmq_0.15.0-1+deb13u2.dsc
 379c5a83477ee5f09f5d82fcd80d689b683ba5f5e024caa3a8f3cd664c3a72a6 10560 librabbitmq_0.15.0-1+deb13u2.debian.tar.xz
 425498f556bf43562e8a55da390b9d449df5912df456d25e6a3d45d71388bf81 8559 librabbitmq_0.15.0-1+deb13u2_amd64.buildinfo
Files:
 b04b4f384614b2aa21fc4ee529fc3701 2119 libs optional librabbitmq_0.15.0-1+deb13u2.dsc
 3828584ccb457fad51ef8fc9613cb70c 10560 libs optional librabbitmq_0.15.0-1+deb13u2.debian.tar.xz
 d873be86010a31c241ba0d915f221fa8 8559 libs optional librabbitmq_0.15.0-1+deb13u2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=UWZq
-----END PGP SIGNATURE-----