-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 02 Jul 2026 22:51:59 +0300
Source: protobuf
Binary: libprotobuf-dev libprotobuf-lite32 libprotobuf-lite32-dbgsym libprotobuf32 libprotobuf32-dbgsym libprotoc-dev libprotoc32 libprotoc32-dbgsym protobuf-compiler protobuf-compiler-dbgsym python3-protobuf python3-protobuf-dbgsym ruby-google-protobuf ruby-google-protobuf-dbgsym
Architecture: i386
Version: 3.21.12-3+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 libprotobuf-dev - protocol buffers C++ library (development files) and proto files
 libprotobuf-lite32 - protocol buffers C++ library (lite version)
 libprotobuf32 - protocol buffers C++ library
 libprotoc-dev - protocol buffers compiler library (development files)
 libprotoc32 - protocol buffers compiler library
 protobuf-compiler - compiler for protocol buffer definition files
 python3-protobuf - Python 3 bindings for protocol buffers
 ruby-google-protobuf - Protocol Buffers
Closes: 1082381 1108057 1126302 1134895
Changes:
 protobuf (3.21.12-3+deb12u1) bookworm; urgency=medium
 .
   * Non-maintainer upload.
   * Fix CVE-2026-0994: JSON recursion depth bypass (closes: #1126302).
   * Fix CVE-2026-6409: PHP Denial of Service (closes: #1134895).
 .
   [ Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com> ]
   * Complete fix of CVE-2024-7254 (closes: #1082381):
     - add recursion checks and recursion limit,
     - add tests.
 .
   [ Laszlo Boszormenyi (GCS) ]
   * Fix CVE-2025-4565: data containing an arbitrary number of recursive
     groups, recursive messages or a series of SGROUP tags can be corrupted
     by exceeding the Python recursion limit (closes: #1108057).
Checksums-Sha1:
 7115cd73e744e16671e15595b00857c1a49e1cfa 1398012 libprotobuf-dev_3.21.12-3+deb12u1_i386.deb
 f01e7de8da8897dd5d27043ca233251344aab444 1757120 libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_i386.deb
 1f2379a3668b1a4af79b2c27237412126b4ab68b 286148 libprotobuf-lite32_3.21.12-3+deb12u1_i386.deb
 c6c37a7b98165e3572005b37e9d6458c59a40c5a 11433952 libprotobuf32-dbgsym_3.21.12-3+deb12u1_i386.deb
 f519b40b497d52fc3c3a0835cb5bd5deccc226e4 1020584 libprotobuf32_3.21.12-3+deb12u1_i386.deb
 54d7d07dd8ee4b9cf6506c3566c05a46a344d66d 1067836 libprotoc-dev_3.21.12-3+deb12u1_i386.deb
 f065d7940e2eb74f5684e473f7e672c0d15cafc9 16226640 libprotoc32-dbgsym_3.21.12-3+deb12u1_i386.deb
 67e9c82001b7c34495f2d4524b42211e9acebccc 930800 libprotoc32_3.21.12-3+deb12u1_i386.deb
 bb416c54b08ac59ff992cc632add1f4a456728e0 117704 protobuf-compiler-dbgsym_3.21.12-3+deb12u1_i386.deb
 2197c3be50b6f945776a0159a3ad64193814959e 84424 protobuf-compiler_3.21.12-3+deb12u1_i386.deb
 1329faa0f18a5434a097dc95e665448a6c7b7f4c 16248 protobuf_3.21.12-3+deb12u1_i386-buildd.buildinfo
 1255520db4309a22a7ef5cbe1ea72d3906b76413 1421876 python3-protobuf-dbgsym_3.21.12-3+deb12u1_i386.deb
 a979618c628256409e905f96647c32a3893b9724 250884 python3-protobuf_3.21.12-3+deb12u1_i386.deb
 a6585cd0e97c1a91f91ab7bcfc1bb16bdf89a9c3 521032 ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_i386.deb
 28b2831dc50d316e1f0bcac85dc9a4a04421df96 179324 ruby-google-protobuf_3.21.12-3+deb12u1_i386.deb
Checksums-Sha256:
 ccf4fef53a6d60c8ee36f97ff03831783a07ed0706874a1247ad96c998605c8b 1398012 libprotobuf-dev_3.21.12-3+deb12u1_i386.deb
 ee6b42226344437eceee96c653799de9ea33267ff2c863141980c42b1817415b 1757120 libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_i386.deb
 97c86de77c602d234bb148904e0022951f48157cf09214031b3d5eef6771bc08 286148 libprotobuf-lite32_3.21.12-3+deb12u1_i386.deb
 9570649d0e64ee9d0ca611c4c67c559f07b4f496424c5d9e9b9f1b173bcacde3 11433952 libprotobuf32-dbgsym_3.21.12-3+deb12u1_i386.deb
 b4fc1710386c0d163ba07eee64b300c633c6233dcd1b10500da9137746ca626f 1020584 libprotobuf32_3.21.12-3+deb12u1_i386.deb
 25f592fbb9f25181bca9076b3547e6d1373a176f449b6b39ecd92e292d611f88 1067836 libprotoc-dev_3.21.12-3+deb12u1_i386.deb
 1c987e0379b7bba2bb6ed4b746218656be09857e4c0e68ea733b431892dae13e 16226640 libprotoc32-dbgsym_3.21.12-3+deb12u1_i386.deb
 3a00b22bf80ebf06275a2271022363440d47ed37b2a3a8c26f8dbdad5a908822 930800 libprotoc32_3.21.12-3+deb12u1_i386.deb
 708186cf10f03d55fb68e6585e81b9912951719965c8bf861de87594537c8807 117704 protobuf-compiler-dbgsym_3.21.12-3+deb12u1_i386.deb
 5204b53d207979b9599c12bbcf3d1520f93be22c276a75f66e25a2d01bacf743 84424 protobuf-compiler_3.21.12-3+deb12u1_i386.deb
 8dd942898c9d39cda7eab1da3e7242bb60b4295ef353c986f23778d1e0024643 16248 protobuf_3.21.12-3+deb12u1_i386-buildd.buildinfo
 b903f3f504fd26097491f6b7925b2f1b5e5548411df74d5fe0bd27cc446fd344 1421876 python3-protobuf-dbgsym_3.21.12-3+deb12u1_i386.deb
 bed195e52aa711587ed5af25c766bb02931d38571af9d7f58057fda6aa208d49 250884 python3-protobuf_3.21.12-3+deb12u1_i386.deb
 30873ca016e98bd7a852276e59cf68e3726db95e7a96d2ee4218bf0748976d14 521032 ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_i386.deb
 b7e806c3b0ffda8b4e95b73c83e46e08c875625aa9fbd7e87062a18bffd1c8a8 179324 ruby-google-protobuf_3.21.12-3+deb12u1_i386.deb
Files:
 8421bbd71315fd02d6539d04d0da3373 1398012 libdevel optional libprotobuf-dev_3.21.12-3+deb12u1_i386.deb
 c79e108f5c8c43aff0086ecd8afc69ae 1757120 debug optional libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_i386.deb
 1322e766f2ab2bdc4eba22b8dbc4f457 286148 libs optional libprotobuf-lite32_3.21.12-3+deb12u1_i386.deb
 ffacfb3cb838b97ba6bfcc8a7eea7593 11433952 debug optional libprotobuf32-dbgsym_3.21.12-3+deb12u1_i386.deb
 6af04caab494d9f5404a2f2f4a1353d1 1020584 libs optional libprotobuf32_3.21.12-3+deb12u1_i386.deb
 0388673e31d575f53576b0fabe888462 1067836 libdevel optional libprotoc-dev_3.21.12-3+deb12u1_i386.deb
 9c8d3d4d072b850f78a57d69a2f91bef 16226640 debug optional libprotoc32-dbgsym_3.21.12-3+deb12u1_i386.deb
 07de681688bfa1d0ad7caf825c4f6e8b 930800 libs optional libprotoc32_3.21.12-3+deb12u1_i386.deb
 98993cdcd9e20c29997d82313d515038 117704 debug optional protobuf-compiler-dbgsym_3.21.12-3+deb12u1_i386.deb
 e23a105b72cfe5c2c15fd6ef1946e17e 84424 devel optional protobuf-compiler_3.21.12-3+deb12u1_i386.deb
 a5bd4b241bfceba70a9d934a23f10b52 16248 devel optional protobuf_3.21.12-3+deb12u1_i386-buildd.buildinfo
 b94f60b211a6195c22da242590dcaaf8 1421876 debug optional python3-protobuf-dbgsym_3.21.12-3+deb12u1_i386.deb
 39b29ec055f60e32c422dcf0896aeda5 250884 python optional python3-protobuf_3.21.12-3+deb12u1_i386.deb
 c1ce0b2ce7819e2142d4e2d7f6fe2427 521032 debug optional ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_i386.deb
 1f4dfa8290cdaa13b94b57966ad4f3a3 179324 ruby optional ruby-google-protobuf_3.21.12-3+deb12u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=L0bM
-----END PGP SIGNATURE-----