-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 15 Aug 2026 12:27:08 +0200 Source: librabbitmq Architecture: source Version: 0.15.0-1+deb13u2 Distribution: trixie-security Urgency: medium Maintainer: Florian Ernst <[email protected]> Changed-By: Florian Ernst <[email protected]> Changes: librabbitmq (0.15.0-1+deb13u2) trixie-security; urgency=medium . * [9bc0956] d/patches/CVE-2026-59986.patch: added from upstream. Fix amqp_decode_bytes size_t integer overflow bypasses bounds check on 32-bit (OOB read) (GHSA-jgjf-7fwf-f3c7, CVE-2026-59986) * [58e0219] d/patches/CVE-2026-61547.patch: added from upstream. Fix Heap Buffer Overflow in amqp_send_frame() When Serializing Oversized AMQP_FRAME_BODY (GHSA-hfjv-vcp3-39wh, CVE-2026-61547) Checksums-Sha1: a19420e5506735556fb2a7d843c87a8c4bd24fb6 2119 librabbitmq_0.15.0-1+deb13u2.dsc 3874a330f0118abec914590136c77de456d080ac 10560 librabbitmq_0.15.0-1+deb13u2.debian.tar.xz cdb68f2c343ce141f5d40803422e67061966cba3 8559 librabbitmq_0.15.0-1+deb13u2_amd64.buildinfo Checksums-Sha256: 773644bd292a0e84116a2e70dbe04470c162a0a1b86c69deee14261801518fe7 2119 librabbitmq_0.15.0-1+deb13u2.dsc 379c5a83477ee5f09f5d82fcd80d689b683ba5f5e024caa3a8f3cd664c3a72a6 10560 librabbitmq_0.15.0-1+deb13u2.debian.tar.xz 425498f556bf43562e8a55da390b9d449df5912df456d25e6a3d45d71388bf81 8559 librabbitmq_0.15.0-1+deb13u2_amd64.buildinfo Files: b04b4f384614b2aa21fc4ee529fc3701 2119 libs optional librabbitmq_0.15.0-1+deb13u2.dsc 3828584ccb457fad51ef8fc9613cb70c 10560 libs optional librabbitmq_0.15.0-1+deb13u2.debian.tar.xz d873be86010a31c241ba0d915f221fa8 8559 libs optional librabbitmq_0.15.0-1+deb13u2_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBn03XtJwVyplJ26xBjdBuvXdHs4FAmqEhk4ACgkQBjdBuvXd Hs7vKhAArZN5I/9/k8kwUhoI1II9B8Ga1/c49Niftsjn/VYJNglbhjfVfWF8YqNv 0V96lxaJdGNUficzknQaG1Xqb9URpFf+4SQU7HEJELcO4iDWrY++nZEhDxNHHHC8 zisuqTckmI69GmpyBTNwAyvYc1iiwOQFfH5SQ2snTgfyrOs8/1q8xCy9UbWgyDvM Dsiu7kbnsw7khyQAGmPdygpqdrvoXTEpSVEATdOqb5EQH4yVeVN5PyuVjYhdnoyE X3T8SM+HEdYAbUT8mi9UivAP6XTUnE43U7ZW//fy/ZRSBYohUo6cubCgaouokWge 7kjqe3QVw7DYMC12rhCRdaMOlqJLUNgMBJY4cEDol+nRNYWW3/Vgeg4fIa9gqTqC sgBDTw4ZoSiO36lKm7u6ktKGUu0lC6bOLtZ+WyOuqOyj3zYsZvveqQUuDBErPngj h3p6it6F6YWlwN+KwrsYTw4edB2SEmU3KKyCTqt9gHGkV5kt+PHmBBaO7J6nQ14O p4B5uy4oxNnhNJYao8sGfXxKBUT8FEiE2bQo8Ir9ZFz6Tj04WpmO99jdpUFCi0Ml GX8QT80EEDImFHcuFDZmPVcPZ0KVUniOEShqWSK/hvxG2F7cUxl7VKyVAoEogodE TWaco17eHo80C3s29aofOmUSz9JXTUEcgNPRFnW1glZbrbm6zOY= =UWZq -----END PGP SIGNATURE-----
pgpEs2cFI4noi.pgp
Description: PGP signature
