-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Jul 2026 22:51:59 +0300 Source: protobuf Binary: libprotobuf-dev libprotobuf-lite32 libprotobuf-lite32-dbgsym libprotobuf32 libprotobuf32-dbgsym libprotoc-dev libprotoc32 libprotoc32-dbgsym protobuf-compiler protobuf-compiler-dbgsym python3-protobuf python3-protobuf-dbgsym ruby-google-protobuf ruby-google-protobuf-dbgsym Architecture: armel Version: 3.21.12-3+deb12u1 Distribution: bookworm Urgency: medium Maintainer: armel Build Daemon (arm-conova-03) Changed-By: Adrian Bunk Description: libprotobuf-dev - protocol buffers C++ library (development files) and proto files libprotobuf-lite32 - protocol buffers C++ library (lite version) libprotobuf32 - protocol buffers C++ library libprotoc-dev - protocol buffers compiler library (development files) libprotoc32 - protocol buffers compiler library protobuf-compiler - compiler for protocol buffer definition files python3-protobuf - Python 3 bindings for protocol buffers ruby-google-protobuf - Protocol Buffers Closes: 1082381 1108057 1126302 1134895 Changes: protobuf (3.21.12-3+deb12u1) bookworm; urgency=medium . * Non-maintainer upload. * Fix CVE-2026-0994: JSON recursion depth bypass (closes: #1126302). * Fix CVE-2026-6409: PHP Denial of Service (closes: #1134895). . [ Hlib Korzhynskyy ] * Complete fix of CVE-2024-7254 (closes: #1082381): - add recursion checks and recursion limit, - add tests. . [ Laszlo Boszormenyi (GCS) ] * Fix CVE-2025-4565: data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit (closes: #1108057). Checksums-Sha1: 26ea79da8a173c7922b19ccdf75aa0f2d776493b 1233488 libprotobuf-dev_3.21.12-3+deb12u1_armel.deb fc961dd028b3a4fe58b480118e6163ab43b72dbb 1782172 libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_armel.deb 2382e77d34f729423b5f6b9558b7922fa5faa0d4 238644 libprotobuf-lite32_3.21.12-3+deb12u1_armel.deb ecbe768e7b8305dffaac3d1b4a285e7748f52c1c 11531844 libprotobuf32-dbgsym_3.21.12-3+deb12u1_armel.deb c01dcc710da7f939d021557a5fcd4bc0cbb1bb73 799836 libprotobuf32_3.21.12-3+deb12u1_armel.deb 33da91ec7cb0e0a191ccc8a99a199adb385d1d1b 878928 libprotoc-dev_3.21.12-3+deb12u1_armel.deb 7eec0aa03bfa1b28368cb83bc04d239c1f81f069 16123380 libprotoc32-dbgsym_3.21.12-3+deb12u1_armel.deb e025f38288a37cdffac7142c3059e04c6271c65c 724252 libprotoc32_3.21.12-3+deb12u1_armel.deb 387f8b2d290fa2e730d3b052883d631e57f12ae2 118948 protobuf-compiler-dbgsym_3.21.12-3+deb12u1_armel.deb 15810bc7abbc9560f261145fcba4d2d3e4aabca1 83736 protobuf-compiler_3.21.12-3+deb12u1_armel.deb 1f02de2590ff86806ae6912a9b52575d5aa044e7 16211 protobuf_3.21.12-3+deb12u1_armel-buildd.buildinfo ed4e760fb9b70bc61306149cc3f647b035a7651f 1431116 python3-protobuf-dbgsym_3.21.12-3+deb12u1_armel.deb 5af9517a03cb7b75a3076f6f66f837bc83300d74 230084 python3-protobuf_3.21.12-3+deb12u1_armel.deb 3a5703cf0b80f5b0061b6a33d7d491052f320110 521856 ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_armel.deb 686b092021b2d547c03bae41857bd82485fa9e35 152772 ruby-google-protobuf_3.21.12-3+deb12u1_armel.deb Checksums-Sha256: c3615e48f096490a5f58983187f5f803c3bf5d7e9d93c3ddf66314e391b632fd 1233488 libprotobuf-dev_3.21.12-3+deb12u1_armel.deb f3ea01d595629fb3a4fe37bff6f722d05a59e5048dd43b3a869569cbab4a789b 1782172 libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_armel.deb a20a2e6d346f6331bf1b073d7e838bc38682c5b55794a290251d0cd8dbafc516 238644 libprotobuf-lite32_3.21.12-3+deb12u1_armel.deb 0c3ba425ebe119037aab4390eb8680fd6fecc514d58f93e3e48dc72afd8c2a3e 11531844 libprotobuf32-dbgsym_3.21.12-3+deb12u1_armel.deb d7bd4122b5098b843826dfa906775aaed7d5cadb4766bfaea4e8fe53003b2abc 799836 libprotobuf32_3.21.12-3+deb12u1_armel.deb 49241bf1d4648e46723e71e6cca8b6f29e858eb9d356fb9aae5784236613ddff 878928 libprotoc-dev_3.21.12-3+deb12u1_armel.deb 9bf48635d1db0a7f63e791f2c2b9dcd03adcbe554b0d2b45212027a8e2fdda9c 16123380 libprotoc32-dbgsym_3.21.12-3+deb12u1_armel.deb f380c08ce98c89f3cd901e66c169fd5f960591d22de4b3bf730cb34974a192a2 724252 libprotoc32_3.21.12-3+deb12u1_armel.deb 9f1046f98addae083512fe70a213c144f9675d104de5fea0a78cb751d7e6e4a5 118948 protobuf-compiler-dbgsym_3.21.12-3+deb12u1_armel.deb b817a7b619a3b52cb6ac5403af31b82e41442ca987ed8f32f3e8ddecda105dcb 83736 protobuf-compiler_3.21.12-3+deb12u1_armel.deb 40fc1f7b0c771e227fe9c7d90f612c4b2eb7cf26c7b76be0cc8c0079f2054d10 16211 protobuf_3.21.12-3+deb12u1_armel-buildd.buildinfo b2b90c9d3f960b78067d04e2f30132bcf23036ee8b5259ae5c5eeec403f7d8a2 1431116 python3-protobuf-dbgsym_3.21.12-3+deb12u1_armel.deb c6766f264f243c8aa1102e574f25af8d7b72d411f4eedbff9e6c448a439129d2 230084 python3-protobuf_3.21.12-3+deb12u1_armel.deb c98ab769b8dc936abda236a9d957b0eeb80d890b63b57a1ec5d1d34329f19793 521856 ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_armel.deb 72ba382b6012a12e10141a7ec643937d5df4a23481c9f7a6be19d94ded199be1 152772 ruby-google-protobuf_3.21.12-3+deb12u1_armel.deb Files: df88587db4f7163eef212af451d0fc30 1233488 libdevel optional libprotobuf-dev_3.21.12-3+deb12u1_armel.deb f5beba40869766f2bd68f1838a7ebbf0 1782172 debug optional libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_armel.deb c4b4ab918d0c7301caa064e286663d5f 238644 libs optional libprotobuf-lite32_3.21.12-3+deb12u1_armel.deb bf6f804fda74ca34176c550556d0f9e8 11531844 debug optional libprotobuf32-dbgsym_3.21.12-3+deb12u1_armel.deb d2123a828b6f0ee317f3686d3489a445 799836 libs optional libprotobuf32_3.21.12-3+deb12u1_armel.deb 154e70ef3e6de9e633b60f91a1579288 878928 libdevel optional libprotoc-dev_3.21.12-3+deb12u1_armel.deb 2c00f220e4736a8de17117086ffc85b9 16123380 debug optional libprotoc32-dbgsym_3.21.12-3+deb12u1_armel.deb f45340517bae6c68e8f74e793cc8fc17 724252 libs optional libprotoc32_3.21.12-3+deb12u1_armel.deb 7e56aaae569fbe5eba510d3ce8371609 118948 debug optional protobuf-compiler-dbgsym_3.21.12-3+deb12u1_armel.deb 593f2edd284aedf8d9ab8f938ea28716 83736 devel optional protobuf-compiler_3.21.12-3+deb12u1_armel.deb 62639b3a1bee2aa28982024204b8b86d 16211 devel optional protobuf_3.21.12-3+deb12u1_armel-buildd.buildinfo 56c9d64537084e66a6c4a3b973e2dac3 1431116 debug optional python3-protobuf-dbgsym_3.21.12-3+deb12u1_armel.deb 345e17694b65642efea715d3ceafface 230084 python optional python3-protobuf_3.21.12-3+deb12u1_armel.deb 4dee9164eb6529402b02e1507fccff35 521856 debug optional ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_armel.deb c88874d64fb2a481cea531096a58206e 152772 ruby optional ruby-google-protobuf_3.21.12-3+deb12u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEElFiH1oZRZh1t4FSiXVp1sEH/1mIFAmpI9Y8ACgkQXVp1sEH/ 1mIKSw/9Gx1txKuNTGug8xwJcEbsTk5vPZqlh38FVMmwqvxd5Pzz2zLaM4FjvTLK tbSjZD5AZMgShz9KwYE+xt8wY2ktwibNoF/pK8IzFFBcKFL/C8gs9gHPrQ5pjdPa lkRqQG0HZAgpp78RaQQSC1TQR7XjA5TrP8IwNTDXFzRB+cHktTiZ91zu39je+m8o ds/eciJ2I8WACVKkRqfmxg+sSUROEPYh8rlyhDHJHRt5k76M8HAN3TbRQfyIyfpG 84ydqaQOxt/l3wviGU2shFtNlljhrTwamCuHv6dDQCcRCGunhEqJNQOj9zcAjA69 CjPlC8NbWun5lTU+ZITXU9nbrpDo+yQZkh8xLZQJxgYaPXiBt43i0fiBZbtkVqtW N1l9Kvu9K13h8j04is5mEidcZHkuE5a25f9zpcJY3/k5XRwJTISNldZh/4J3Ln7J l9tSeEqqKZAL75TE2EpU254rC5W1OVkzPnvLCVYywX2+GBPqArczkbplsbnygq77 GfDIo13eEY5OAMNCzcMZcd2uVKUY5vONlROBIBL90eYeXfBU97b4t+Y3Btt3dqCz tBFAl7BzOv2fpBrNo9FFgiACLUYmL3Xqck5rcXcVYnx368h8IB0FiL3UeBKi7kua eaUCkePZlXtbmVwEGcpNng6VGJC0lKuBeCTHA5NA9WN4A91+hTw= =34cD -----END PGP SIGNATURE-----