[ubuntu/noble-security] librabbitmq 0.11.0-1ubuntu0.2 (Accepted)

[John Breton]

librabbitmq (0.11.0-1ubuntu0.2) noble-security; urgency=medium

  * SECURITY UPDATE: heap out-of-bounds write
    - debian/patches/CVE-2026-61547.patch: Fix heap buffer overflow in
      amqp_frame_to_bytes for oversized body frames in
      librabbitmq/amqp_connection.c, tests/CMakeLists.txt,
      tests/test_send_frame.c.
    - CVE-2026-61547
  * SECURITY UPDATE: heap out-of-bounds read
    - debian/patches/CVE-2026-59986.patch: Fix size_t overflow in
      amqp_decode_bytes bounds check (GHSA-jgjf-7fwf-f3c7) in
      librabbitmq/amqp_private.h, tests/CMakeLists.txt,
      tests/test_decode_bytes.c.
    - CVE-2026-59986

Date: 2026-09-02 15:27:12.034754+00:00
Changed-By: Isabel Garcia <isabel.garcia at canonical.com>
Signed-By: John Breton <john.breton at canonical.com>
https://launchpad.net/ubuntu/+source/librabbitmq/0.11.0-1ubuntu0.2
-------------- next part --------------
Sorry, changesfile not available.