-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 02 Jul 2026 22:51:59 +0300
Source: protobuf
Binary: elpa-protobuf-mode libprotobuf-java php-google-protobuf
Architecture: all
Version: 3.21.12-3+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 elpa-protobuf-mode - Emacs addon for editing protocol buffers
 libprotobuf-java - Java bindings for protocol buffers
 php-google-protobuf - PHP bindings for protocol buffers
Closes: 1082381 1108057 1126302 1134895
Changes:
 protobuf (3.21.12-3+deb12u1) bookworm; urgency=medium
 .
   * Non-maintainer upload.
   * Fix CVE-2026-0994: JSON recursion depth bypass (closes: #1126302).
   * Fix CVE-2026-6409: PHP Denial of Service (closes: #1134895).
 .
   [ Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com> ]
   * Complete fix of CVE-2024-7254 (closes: #1082381):
     - add recursion checks and recursion limit,
     - add tests.
 .
   [ Laszlo Boszormenyi (GCS) ]
   * Fix CVE-2025-4565: data containing an arbitrary number of recursive
     groups, recursive messages or a series of SGROUP tags can be corrupted
     by exceeding the Python recursion limit (closes: #1108057).
Checksums-Sha1:
 ea57a8ec5f31e7d9038fc75c993607d53302bb97 63436 elpa-protobuf-mode_3.21.12-3+deb12u1_all.deb
 ffd72c1be2af188fe24e6dab2ea6e040b3be09e5 1257940 libprotobuf-java_3.21.12-3+deb12u1_all.deb
 cae8db81b6261fa5bd2b2e0fa7b71aba08ebb9eb 123816 php-google-protobuf_3.21.12-3+deb12u1_all.deb
 3bf763188c86ed82f23086a3eb1b446462a05cef 16065 protobuf_3.21.12-3+deb12u1_all-buildd.buildinfo
Checksums-Sha256:
 1d1e020d6e9695b27983da1669f0d0c1f2ef86cf6983b2b244a0dc198171f901 63436 elpa-protobuf-mode_3.21.12-3+deb12u1_all.deb
 7662f1f6b4b98c5bcc1a85b7fec0934753afb2f7feb7f6fdc95374168c68fd45 1257940 libprotobuf-java_3.21.12-3+deb12u1_all.deb
 ae7663ce1bb190b8ca47e76f2313a13ecf0b8665d2ee17ac679c4f2d5f47fadb 123816 php-google-protobuf_3.21.12-3+deb12u1_all.deb
 f60469eed056290b76af2e33ab8d87ab9d4dd1757534a48549e438739e888a30 16065 protobuf_3.21.12-3+deb12u1_all-buildd.buildinfo
Files:
 a4953f4f01a0c785f65b60731f8ca384 63436 editors optional elpa-protobuf-mode_3.21.12-3+deb12u1_all.deb
 9103d9937a76948afb1ce7ab30ac079f 1257940 java optional libprotobuf-java_3.21.12-3+deb12u1_all.deb
 cb0bbba8c3694eb25ce2ec529ee5a100 123816 php optional php-google-protobuf_3.21.12-3+deb12u1_all.deb
 b624b156c00abdebb38225544b6165f9 16065 devel optional protobuf_3.21.12-3+deb12u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=C/Ac
-----END PGP SIGNATURE-----