-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 02 Jul 2026 22:51:59 +0300
Source: protobuf
Binary: libprotobuf-dev libprotobuf-lite32 libprotobuf-lite32-dbgsym libprotobuf32 libprotobuf32-dbgsym libprotoc-dev libprotoc32 libprotoc32-dbgsym protobuf-compiler protobuf-compiler-dbgsym python3-protobuf python3-protobuf-dbgsym ruby-google-protobuf ruby-google-protobuf-dbgsym
Architecture: amd64
Version: 3.21.12-3+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 libprotobuf-dev - protocol buffers C++ library (development files) and proto files
 libprotobuf-lite32 - protocol buffers C++ library (lite version)
 libprotobuf32 - protocol buffers C++ library
 libprotoc-dev - protocol buffers compiler library (development files)
 libprotoc32 - protocol buffers compiler library
 protobuf-compiler - compiler for protocol buffer definition files
 python3-protobuf - Python 3 bindings for protocol buffers
 ruby-google-protobuf - Protocol Buffers
Closes: 1082381 1108057 1126302 1134895
Changes:
 protobuf (3.21.12-3+deb12u1) bookworm; urgency=medium
 .
   * Non-maintainer upload.
   * Fix CVE-2026-0994: JSON recursion depth bypass (closes: #1126302).
   * Fix CVE-2026-6409: PHP Denial of Service (closes: #1134895).
 .
   [ Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com> ]
   * Complete fix of CVE-2024-7254 (closes: #1082381):
     - add recursion checks and recursion limit,
     - add tests.
 .
   [ Laszlo Boszormenyi (GCS) ]
   * Fix CVE-2025-4565: data containing an arbitrary number of recursive
     groups, recursive messages or a series of SGROUP tags can be corrupted
     by exceeding the Python recursion limit (closes: #1108057).
Checksums-Sha1:
 beb08c9122eb1d3234407e1d92520c8dffec8251 1282804 libprotobuf-dev_3.21.12-3+deb12u1_amd64.deb
 e5211950726b919822e78fcaaed75f8cf49328cd 1881824 libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_amd64.deb
 13fa230e1c65cc08d0d98cbf6f24e059440b4193 261772 libprotobuf-lite32_3.21.12-3+deb12u1_amd64.deb
 9e5de140a808ff36648ec650c6ccc57baabd58f8 11869636 libprotobuf32-dbgsym_3.21.12-3+deb12u1_amd64.deb
 94f10995a0699f856ff6cf722f2fa76c2ce20ba7 931592 libprotobuf32_3.21.12-3+deb12u1_amd64.deb
 f943c2ac93311431cc4f8d9cf27c027aca394efc 950384 libprotoc-dev_3.21.12-3+deb12u1_amd64.deb
 d2be445abc8e2b025168e1b618f78a6bad13c213 16201540 libprotoc32-dbgsym_3.21.12-3+deb12u1_amd64.deb
 7b348357e3c22566a54f7f427c36c37514ea166b 830092 libprotoc32_3.21.12-3+deb12u1_amd64.deb
 d57f0436694251c27151419ffc579b1b277c925d 119016 protobuf-compiler-dbgsym_3.21.12-3+deb12u1_amd64.deb
 3cf20906efa02942cdfd1eabe9d193ce0b9ddb04 84212 protobuf-compiler_3.21.12-3+deb12u1_amd64.deb
 610f6fb34fc9c0e09356118c1cf002dd3cb24abd 16354 protobuf_3.21.12-3+deb12u1_amd64-buildd.buildinfo
 5179986a38c9dccc9c1f943291cd46d3fc6fbf3f 1457436 python3-protobuf-dbgsym_3.21.12-3+deb12u1_amd64.deb
 8dbe549acaef02ff29b133dd230a6fa65c625d48 245796 python3-protobuf_3.21.12-3+deb12u1_amd64.deb
 a6a41577b31b9ff4697afe26b266c4bfe4ca45ac 540264 ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_amd64.deb
 bcc58deb19e312cf12bc49414d4b318b667c86b2 166960 ruby-google-protobuf_3.21.12-3+deb12u1_amd64.deb
Checksums-Sha256:
 2f045f82e4ae0bdfce7f18f1f36613b9cd8c570024b8de68668bc255c32a2d88 1282804 libprotobuf-dev_3.21.12-3+deb12u1_amd64.deb
 d0c752c8c43bfbddd50648512b60fbd8ddfe7d305e8335a4354a9589f4dcb644 1881824 libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_amd64.deb
 441812aa574e1baa4435a9b62c34a39e0fc4177994ccfb35fab5a03ef6ef1e8d 261772 libprotobuf-lite32_3.21.12-3+deb12u1_amd64.deb
 8ef48f7094d7083bc8c30222ce7f40eb36555d08c321c506fda8b26b36e58b63 11869636 libprotobuf32-dbgsym_3.21.12-3+deb12u1_amd64.deb
 e9e4e8cf0d2c48e2e3c17308e2093b3856f470b77e0022b7d906fb1b3551f213 931592 libprotobuf32_3.21.12-3+deb12u1_amd64.deb
 1bed3fec2c93bf28e06763cee0676fe01d1ca57e39b6ca233f6893cd5f103154 950384 libprotoc-dev_3.21.12-3+deb12u1_amd64.deb
 f5a0bac63f54e7ab69a42c464cd5f94a7e1fc9f037d5453bed1ff0950f44d3f0 16201540 libprotoc32-dbgsym_3.21.12-3+deb12u1_amd64.deb
 27770048715fdebe3dab2f6603ca6667ac72ab474989226d2f70153522286adf 830092 libprotoc32_3.21.12-3+deb12u1_amd64.deb
 832f4df2236070fd5bafb0838a005bea656266269c70413c84626a0456cecbe6 119016 protobuf-compiler-dbgsym_3.21.12-3+deb12u1_amd64.deb
 698e96f08152490ee576ead6a9116e1239514de66473305473f67ce2b5408e23 84212 protobuf-compiler_3.21.12-3+deb12u1_amd64.deb
 f41e4b3a1fc61078da50b6e448330c373a4888ffe7680e59b1fdbc5797bb58de 16354 protobuf_3.21.12-3+deb12u1_amd64-buildd.buildinfo
 01b11a180081262a013285e2c9771637106e4675e2a009860de812ca67356ed3 1457436 python3-protobuf-dbgsym_3.21.12-3+deb12u1_amd64.deb
 72bf1fadf5c026f60bf39ef6d150f4f37d5253f79ee79c22b9ed7bf13401c63d 245796 python3-protobuf_3.21.12-3+deb12u1_amd64.deb
 2ef579bf32e5cb7a44ee80e5dacfe0707cddc14fc61ae776cc0d0e87c741a905 540264 ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_amd64.deb
 4c7b64b7caebb2b63db259308435cc35d040266fc1e2125846163fe57cb297c8 166960 ruby-google-protobuf_3.21.12-3+deb12u1_amd64.deb
Files:
 9aeff99a04d00db17ac0aa2b4ccc7715 1282804 libdevel optional libprotobuf-dev_3.21.12-3+deb12u1_amd64.deb
 ea414e49dd0bf0f93d81ee23d8e8dc5a 1881824 debug optional libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_amd64.deb
 5ea41d8272e646dd8480691b48563823 261772 libs optional libprotobuf-lite32_3.21.12-3+deb12u1_amd64.deb
 da42e58da9a7958ba01a61c7aa24ae90 11869636 debug optional libprotobuf32-dbgsym_3.21.12-3+deb12u1_amd64.deb
 5d8d9fde7d714bdd78b66eca8c32de32 931592 libs optional libprotobuf32_3.21.12-3+deb12u1_amd64.deb
 0a8ee9b7d29817c4b440e00cd10a9cdf 950384 libdevel optional libprotoc-dev_3.21.12-3+deb12u1_amd64.deb
 8b36b9e40946174fc50373bc5f105a39 16201540 debug optional libprotoc32-dbgsym_3.21.12-3+deb12u1_amd64.deb
 26948438d1558d9aef998bdbb226ff63 830092 libs optional libprotoc32_3.21.12-3+deb12u1_amd64.deb
 26d18ef7368cdb59cdb6c442164d4193 119016 debug optional protobuf-compiler-dbgsym_3.21.12-3+deb12u1_amd64.deb
 570041b507d5ef9e7d25ed539cee6755 84212 devel optional protobuf-compiler_3.21.12-3+deb12u1_amd64.deb
 e7d6d26803c78801f07ec05bf8884d4b 16354 devel optional protobuf_3.21.12-3+deb12u1_amd64-buildd.buildinfo
 97d293d1de75555b27694bab495b07ec 1457436 debug optional python3-protobuf-dbgsym_3.21.12-3+deb12u1_amd64.deb
 c2ae4da714be802826aed8e80537a23c 245796 python optional python3-protobuf_3.21.12-3+deb12u1_amd64.deb
 46a98fb57d05e497067c0359645a95a8 540264 debug optional ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_amd64.deb
 266ffdcc5da4b56150582b8c2885eaac 166960 ruby optional ruby-google-protobuf_3.21.12-3+deb12u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=++VV
-----END PGP SIGNATURE-----