librabbitmq (0.11.0-1ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: Passwords can only be specified on command-line
    - debian/patches/CVE-2023-35789.patch: Add option to read username/password
      from file in tools/common.c.
    - CVE-2023-35789
  * SECURITY UPDATE: size_t underflow in AMQP frame length computation
    - debian/patches/CVE-2026-44235.patch: amqp_connection: reject undersized
      frames in amqp_handle_input in librabbitmq/amqp_connection.c.
    - CVE-2026-44235
  * SECURITY UPDATE: Heap buffer overflow in AMQP login handshake
    - debian/patches/CVE-2026-44236-1.patch: enforce minimum frame_max in
      README.md, librabbitmq/amqp_connection.c, librabbitmq/amqp_socket.c,
      tests/CMakeLists.txt, tests/test_tune_connection.c.
    - debian/patches/CVE-2026-44236-2.patch: docs: remove frame_max readme note
      in README.md.
    - CVE-2026-44236

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Sun, 14 Jun 2026 11:42:09 -0400

librabbitmq (0.11.0-1build2) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 31 Mar 2024 07:57:24 +0000

librabbitmq (0.11.0-1build1) noble; urgency=medium

  * No-change rebuild against libssl3t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Mon, 04 Mar 2024 18:27:06 +0000

librabbitmq (0.11.0-1) unstable; urgency=low

  * New upstream release (Closes: #1004590, #1006244).
  * Add debian/gbp.conf.
  * Update d/watch to work with github again.
  * Bump debhelper version to 13.
  * Bump Standards-Version to 4.6.0.1.
  * Update year in d/copyright.
  * Install cmake files in librabbitmq-dev.
  * Update symbols for librabbitmq4.
  * Refresh patches and re-export with gbp numbering.
  * Add patch to fix typo in amqp-publish.1 manpage.
  * Install examples in librabbitmq-dev.
  * Add d/upstream/metadata.
  * Use uscan version 4.
  * Enable upstream testsuite for autopkgtests.

 -- Michael Fladischer <fladi@debian.org>  Mon, 21 Feb 2022 22:42:45 +0000

librabbitmq (0.10.0-1) unstable; urgency=high

  * New upstream release, fixing CVE-2019-18609 (Closes: #946005).
  * Refresh patches.
  * Update symbols for librabbitmq4.
  * Bump debhelper compatibility and version to 12 and switch to
    debhelper-compat.
  * Bump Standards-Version to 4.4.1.
  * Run wrap-and-sort -bast to reduce diff size of future changes.
  * Enable hardening build options.
  * Rename Expat as name for license.
  * Remove unused lintian overrides.
  * Set Rules-Requires-Root: no.
  * Use https:// for copyright-format 1.0 URL.
  * Remove unused filename patterns from d/copyright.
  * Set Build-Depends-Package in symbols file.

 -- Michael Fladischer <fladi@debian.org>  Sat, 11 Jan 2020 20:13:36 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog librabbitmq4`.
