-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Jul 2026 22:51:59 +0300 Source: protobuf Binary: libprotobuf-dev libprotobuf-lite32 libprotobuf-lite32-dbgsym libprotobuf32 libprotobuf32-dbgsym libprotoc-dev libprotoc32 libprotoc32-dbgsym protobuf-compiler protobuf-compiler-dbgsym python3-protobuf python3-protobuf-dbgsym ruby-google-protobuf ruby-google-protobuf-dbgsym Architecture: arm64 Version: 3.21.12-3+deb12u1 Distribution: bookworm Urgency: medium Maintainer: arm64 Build Daemon (arm-ubc-02) Changed-By: Adrian Bunk Description: libprotobuf-dev - protocol buffers C++ library (development files) and proto files libprotobuf-lite32 - protocol buffers C++ library (lite version) libprotobuf32 - protocol buffers C++ library libprotoc-dev - protocol buffers compiler library (development files) libprotoc32 - protocol buffers compiler library protobuf-compiler - compiler for protocol buffer definition files python3-protobuf - Python 3 bindings for protocol buffers ruby-google-protobuf - Protocol Buffers Closes: 1082381 1108057 1126302 1134895 Changes: protobuf (3.21.12-3+deb12u1) bookworm; urgency=medium . * Non-maintainer upload. * Fix CVE-2026-0994: JSON recursion depth bypass (closes: #1126302). * Fix CVE-2026-6409: PHP Denial of Service (closes: #1134895). . [ Hlib Korzhynskyy ] * Complete fix of CVE-2024-7254 (closes: #1082381): - add recursion checks and recursion limit, - add tests. . [ Laszlo Boszormenyi (GCS) ] * Fix CVE-2025-4565: data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit (closes: #1108057). Checksums-Sha1: b7456ff2c08d9aeefa8f479195d91b28ba9f333c 1217744 libprotobuf-dev_3.21.12-3+deb12u1_arm64.deb 20c21454008a233b0d14cfbd5013f92cc24ac69c 1801384 libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_arm64.deb ecf43130c23ac4dda737027948b0793976aab07a 240664 libprotobuf-lite32_3.21.12-3+deb12u1_arm64.deb 53ef5798ae612cb6c20c3d72c5787384e4bea3f3 11458472 libprotobuf32-dbgsym_3.21.12-3+deb12u1_arm64.deb edf3d262f25d67e9e1fbb9812f6094a6c7b6e2e0 821936 libprotobuf32_3.21.12-3+deb12u1_arm64.deb 2e642d9aff594d9111836f293180b287003e9b63 863800 libprotoc-dev_3.21.12-3+deb12u1_arm64.deb c8afbc68b0b0b4eed7cd0743f216f7928f310ad4 15512308 libprotoc32-dbgsym_3.21.12-3+deb12u1_arm64.deb b7ce05611756ffbd8eef92149008a086fa291a60 717228 libprotoc32_3.21.12-3+deb12u1_arm64.deb fcea5b760a4f2d1603e06f557e4329ea107a57b6 119620 protobuf-compiler-dbgsym_3.21.12-3+deb12u1_arm64.deb 8ac21bf5ffd53849843237197c8a01153d451540 84196 protobuf-compiler_3.21.12-3+deb12u1_arm64.deb 17029b193d6ae9471b5b655326d1e855cc6d0e97 16369 protobuf_3.21.12-3+deb12u1_arm64-buildd.buildinfo abd7dfd901b8ed630f1551c37ec74a71caf6048c 1432528 python3-protobuf-dbgsym_3.21.12-3+deb12u1_arm64.deb 92daf4406e4a7bc829f97716497059599019343e 237244 python3-protobuf_3.21.12-3+deb12u1_arm64.deb 39ee7eb114d2b425b72e268873183b4aeaf4f719 533032 ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_arm64.deb 9ebf4e231994b5e9456eedb694455c49a001c2df 158740 ruby-google-protobuf_3.21.12-3+deb12u1_arm64.deb Checksums-Sha256: 92b1c87b95d99a06ba9e7ac2f29d791a6992d65ae41725438197f61d97404228 1217744 libprotobuf-dev_3.21.12-3+deb12u1_arm64.deb 2ee25eea389cf0aa84a4258ef0ce1f7bfa359303f58f9a6ddc5e68d51261e1f3 1801384 libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_arm64.deb c854436ba2ebc40976fda685252908deeb6d41ce6a79e2b42d501ae8f6bcce1c 240664 libprotobuf-lite32_3.21.12-3+deb12u1_arm64.deb b5597647e2585dc4560961eb5c47dfa47d4908cd61f4641b0a8c3c0a5c5f56c3 11458472 libprotobuf32-dbgsym_3.21.12-3+deb12u1_arm64.deb 1b0ee5895cda518b5ca1b9c38f33c5d303869f861c42a749f94d4c177d867954 821936 libprotobuf32_3.21.12-3+deb12u1_arm64.deb 9350a9e43a74f0cdf89b21b9bf9d320520b7079808ee86a45bc5879d4ec58da6 863800 libprotoc-dev_3.21.12-3+deb12u1_arm64.deb 6342094210dc74ae907a38ae6b8b2a3e31ac1abeb12d4f50abee70aeac6c9b87 15512308 libprotoc32-dbgsym_3.21.12-3+deb12u1_arm64.deb 0c9c6ce5aaef97ae182dfe4b4d51bd03bb2f89e7958c4039c9388abb3f449d70 717228 libprotoc32_3.21.12-3+deb12u1_arm64.deb 9e54dc038fd8d1836d91bfe250ff86c953bc71f00c21ca3cdd58ca8eab5816d5 119620 protobuf-compiler-dbgsym_3.21.12-3+deb12u1_arm64.deb e85526fb690bdc01f99d2ae00526b63ad01b8a772e5adb4b359988ed759b1d62 84196 protobuf-compiler_3.21.12-3+deb12u1_arm64.deb eab8c2fd78ef85cd011f310f80ad546983ad42cb1e9e2fb8e6ed8a1b3185105e 16369 protobuf_3.21.12-3+deb12u1_arm64-buildd.buildinfo e1c602b7d6f2eb67613d9ff1575e4db2e6a20275c4ed08d4504e2678b98b7c9c 1432528 python3-protobuf-dbgsym_3.21.12-3+deb12u1_arm64.deb ad7af79abcd8805cce6b73d79496c6ec27354277af4094f4017c1e5c674d3fe4 237244 python3-protobuf_3.21.12-3+deb12u1_arm64.deb fd40662d9da0af9d1864d3461ce2e5b2e96682476ce630a25f92fa5a33375b7e 533032 ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_arm64.deb a39e3434b8a7b488d6da05ec6fa06efbb017271d87da6fb34c2a4042b3ee7329 158740 ruby-google-protobuf_3.21.12-3+deb12u1_arm64.deb Files: a569e231a353e2aed91371d1f5bfa012 1217744 libdevel optional libprotobuf-dev_3.21.12-3+deb12u1_arm64.deb 3cd00c8af3ff4924ee4200eececa571a 1801384 debug optional libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_arm64.deb c767ae1f24264026e2b789b08d4671eb 240664 libs optional libprotobuf-lite32_3.21.12-3+deb12u1_arm64.deb 5a713a2f4c597812e900f0da82f48d6b 11458472 debug optional libprotobuf32-dbgsym_3.21.12-3+deb12u1_arm64.deb ae21a850b3634f9fdc463748eb5b568c 821936 libs optional libprotobuf32_3.21.12-3+deb12u1_arm64.deb b2dc1f01d2f3660398635b66e0972eb1 863800 libdevel optional libprotoc-dev_3.21.12-3+deb12u1_arm64.deb aa08a8a2ca3e3f1f27a394d87600a9ad 15512308 debug optional libprotoc32-dbgsym_3.21.12-3+deb12u1_arm64.deb 932a45b5f96f1a689571b6f4952de647 717228 libs optional libprotoc32_3.21.12-3+deb12u1_arm64.deb dd5d5365d2b830e82481a7e3d75e751a 119620 debug optional protobuf-compiler-dbgsym_3.21.12-3+deb12u1_arm64.deb 759f68561c42ff34ea9e6c763d8d371e 84196 devel optional protobuf-compiler_3.21.12-3+deb12u1_arm64.deb 4d63e6d5895ecdab6d77bcd7cae29985 16369 devel optional protobuf_3.21.12-3+deb12u1_arm64-buildd.buildinfo 13ed9a531cb6d434dc76a568eace7860 1432528 debug optional python3-protobuf-dbgsym_3.21.12-3+deb12u1_arm64.deb 70fec173b92b285e874bb6a945e4a904 237244 python optional python3-protobuf_3.21.12-3+deb12u1_arm64.deb 1791a87087c38c9f980141597fc1bef2 533032 debug optional ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_arm64.deb d81fd613e3df7f37ac93d1691af8c3c4 158740 ruby optional ruby-google-protobuf_3.21.12-3+deb12u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEJkN0BnKzGWWW6tS+G5VHrWJmwgcFAmpI9bQACgkQG5VHrWJm wgdeZg/6Aq6FGaeItEUILEemU34X11GCA05LAgJSvCF7lkQoYroxOQo/BugfmEss g2DaWngI+h50faskEZ92JdyBFe3oaUg1XNnEo9i9ltNMBnnJw309gPcfu2XOkUgn 8LFarvPSFtBdHSsHtX6pav9yj0gbHb1W0jTXUD4v/rUygJ7gksr1DnqBW+3I9aG9 YyVe63c1ezD4jKSdWNzL9ptv6CtRc4ByHzlNifxAW7w/P0P7FFn8pgVZQMUwlbCJ E6QfIaWajMSk5iHgWAZjArfPQw4F+YF01UlUkcqArw7eXIU9XC46vaQ1IXCSRkwC 7o+oKp7RjXYE5vQASdxMs7WqPRB7boAwrXeTxUqycKuCMhuStsd34A3zChqr9vkx BjzBpaggAlLalKYH9M5+HoXkCeUpXyhuZtAyzifBj9zg12KzLEsg+G4SsuURos/u TFh4SvA+t80v54uK9lBMEmd/7WuW+1OfBfZ/ff7ZFMrJPr8w9N4GR3QSLDxY6nbI wNDBDFlTyF/NBGsJT6JsW59P28sUtCQaYkbkvrUOmZajSX4NYMeDvcruLQ4qkGoM F0bGEanF0i4gXUxL8IuhFyIkVgZTgyGPJZ1ti02x2gUJ2b891OI+C0EZCeOCo509 05fzyRnz4ur3Av5JqeAEggsrseF9LtEk+T8DkBVK2jjIJo+aD0c= =AaNP -----END PGP SIGNATURE-----