-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Jul 2026 22:51:59 +0300 Source: protobuf Binary: libprotobuf-dev libprotobuf-lite32 libprotobuf-lite32-dbgsym libprotobuf32 libprotobuf32-dbgsym libprotoc-dev libprotoc32 libprotoc32-dbgsym protobuf-compiler protobuf-compiler-dbgsym python3-protobuf python3-protobuf-dbgsym ruby-google-protobuf ruby-google-protobuf-dbgsym Architecture: armhf Version: 3.21.12-3+deb12u1 Distribution: bookworm Urgency: medium Maintainer: armhf Build Daemon (arm-conova-01) Changed-By: Adrian Bunk Description: libprotobuf-dev - protocol buffers C++ library (development files) and proto files libprotobuf-lite32 - protocol buffers C++ library (lite version) libprotobuf32 - protocol buffers C++ library libprotoc-dev - protocol buffers compiler library (development files) libprotoc32 - protocol buffers compiler library protobuf-compiler - compiler for protocol buffer definition files python3-protobuf - Python 3 bindings for protocol buffers ruby-google-protobuf - Protocol Buffers Closes: 1082381 1108057 1126302 1134895 Changes: protobuf (3.21.12-3+deb12u1) bookworm; urgency=medium . * Non-maintainer upload. * Fix CVE-2026-0994: JSON recursion depth bypass (closes: #1126302). * Fix CVE-2026-6409: PHP Denial of Service (closes: #1134895). . [ Hlib Korzhynskyy ] * Complete fix of CVE-2024-7254 (closes: #1082381): - add recursion checks and recursion limit, - add tests. . [ Laszlo Boszormenyi (GCS) ] * Fix CVE-2025-4565: data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit (closes: #1108057). Checksums-Sha1: 1e6b0d5ee38fd5b20e2037b8c3b61e8c1ee7fa3b 1247212 libprotobuf-dev_3.21.12-3+deb12u1_armhf.deb af98004eddb889138cf50f4245932673037be6ae 1779976 libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_armhf.deb 9305cca851a08a025d0027b3c55ce831fd5d89d7 239276 libprotobuf-lite32_3.21.12-3+deb12u1_armhf.deb 9588ea01ec59ba746e81827a90baf320ac3d9737 11548092 libprotobuf32-dbgsym_3.21.12-3+deb12u1_armhf.deb cb1d5b1ddf0e43ca6e5bc52d71f75a1ab2a472f3 823108 libprotobuf32_3.21.12-3+deb12u1_armhf.deb cfb32b20beca17e29d28fedf6e5e50aec7f84503 900720 libprotoc-dev_3.21.12-3+deb12u1_armhf.deb 7154870ec97a105a9ef855817045ae1c5c322387 16096740 libprotoc32-dbgsym_3.21.12-3+deb12u1_armhf.deb a10b22ee6a2a44660ce45db0b03e2696a38f7853 751020 libprotoc32_3.21.12-3+deb12u1_armhf.deb bdcc07707fa0f473e9f904ab91fc8cd4b383489e 119952 protobuf-compiler-dbgsym_3.21.12-3+deb12u1_armhf.deb da4b66c01fb3e1c99826a03d12758a3942b87ed7 83924 protobuf-compiler_3.21.12-3+deb12u1_armhf.deb 05fdacbcefc0e5091a73912cb9ae7494a2e8de63 16213 protobuf_3.21.12-3+deb12u1_armhf-buildd.buildinfo 0e19b4c5ea5f6eea3da9aa413b28f875cf42b160 1431540 python3-protobuf-dbgsym_3.21.12-3+deb12u1_armhf.deb 8efd40f8270f6c91b853973518ed77683eaf14be 232096 python3-protobuf_3.21.12-3+deb12u1_armhf.deb 79d43708fc3f8aa4c9cef814c004b58eb69f7c15 523888 ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_armhf.deb 03fdbe52008676e008e7ab26e898e3c77c4592e9 152804 ruby-google-protobuf_3.21.12-3+deb12u1_armhf.deb Checksums-Sha256: 2a747d392860d800c7e7a72fcd3ba86d3c9fe561ab499a7ea63fe1493386c4e9 1247212 libprotobuf-dev_3.21.12-3+deb12u1_armhf.deb 4be567425680027efd501f0b8b9f12d916f1683d18041879b693cf8227a48cb1 1779976 libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_armhf.deb 24860dc4387a094d47b1ef7f594237a34b47a67deeeafe0d0a85a0bb66e77578 239276 libprotobuf-lite32_3.21.12-3+deb12u1_armhf.deb ef760dc343904f3b11d9b0e94a898290a04d3a410e121c47b1be6fadb7c669f2 11548092 libprotobuf32-dbgsym_3.21.12-3+deb12u1_armhf.deb c0675b82fc78f26af7810162877aef1ac5a6cb586d3feb036bfdbe30a2e642df 823108 libprotobuf32_3.21.12-3+deb12u1_armhf.deb 258c1e122a3191101f9eda36e8b77f5e1a95bb7a16e2d03f5bf8bcc60644b3d5 900720 libprotoc-dev_3.21.12-3+deb12u1_armhf.deb 7d9a789e90f6fd166488a4c2fa46cac7b842300ec332377ef911447303980678 16096740 libprotoc32-dbgsym_3.21.12-3+deb12u1_armhf.deb 53f01140cbf2a7c96021a7102135595d6f04c09b22a8dede8933698937dce728 751020 libprotoc32_3.21.12-3+deb12u1_armhf.deb 80e2d7e174e0a031b65bd5f20ce6aad67aafe91b622fb896f971ac494c665b9c 119952 protobuf-compiler-dbgsym_3.21.12-3+deb12u1_armhf.deb 72cc2746c6865548037450c327f044e2faaf61060c2738327515bd21bf479d0e 83924 protobuf-compiler_3.21.12-3+deb12u1_armhf.deb 570530aa82f10352f6014046fd3811f0ee577972e116a0177f1e71303ed254ba 16213 protobuf_3.21.12-3+deb12u1_armhf-buildd.buildinfo def08d41f03526d27e06bca44e1fc1a6dbdfed58b910bca19e986542b3d2ae8a 1431540 python3-protobuf-dbgsym_3.21.12-3+deb12u1_armhf.deb 9a0e881ce14b713c876fa7866f593e6ddd7224fdd060d077ac613276b834ac6e 232096 python3-protobuf_3.21.12-3+deb12u1_armhf.deb f8f2c78562070b6bc479b3d47b5633c66d0384fbb4ec222364d2d0830ec891db 523888 ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_armhf.deb 59169765a6ce572d3f43d6c41811c783c41e39965904ea61627d3c5d30272b63 152804 ruby-google-protobuf_3.21.12-3+deb12u1_armhf.deb Files: a9313b686e6e5b4ce359f2bdb0fb26ae 1247212 libdevel optional libprotobuf-dev_3.21.12-3+deb12u1_armhf.deb 2484aacef5ed4ba0ea4cd8898522fe9c 1779976 debug optional libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_armhf.deb 3bf6a3f54cc78c5c04a78b3af315bf6e 239276 libs optional libprotobuf-lite32_3.21.12-3+deb12u1_armhf.deb 302cd23d822aa972572a130f6f772e98 11548092 debug optional libprotobuf32-dbgsym_3.21.12-3+deb12u1_armhf.deb 599da63423e59292a8826c7d53903fa7 823108 libs optional libprotobuf32_3.21.12-3+deb12u1_armhf.deb 5e48a86fe388ff421925ab0195a47f82 900720 libdevel optional libprotoc-dev_3.21.12-3+deb12u1_armhf.deb 1e934e177dfa2b74bfbabbe3c21b8f73 16096740 debug optional libprotoc32-dbgsym_3.21.12-3+deb12u1_armhf.deb 309ebd95e92cf470be747f49fc761515 751020 libs optional libprotoc32_3.21.12-3+deb12u1_armhf.deb 04580252fc7a4070feeb4afd2947c5f5 119952 debug optional protobuf-compiler-dbgsym_3.21.12-3+deb12u1_armhf.deb 73948653e67d772131f2cdfb078b6551 83924 devel optional protobuf-compiler_3.21.12-3+deb12u1_armhf.deb 05b1d770e4bbc1b181ddc20d255594fb 16213 devel optional protobuf_3.21.12-3+deb12u1_armhf-buildd.buildinfo 8d05d479bd2b88b0f0a6200af65d34f8 1431540 debug optional python3-protobuf-dbgsym_3.21.12-3+deb12u1_armhf.deb 06de37806613161241fd083f034a084f 232096 python optional python3-protobuf_3.21.12-3+deb12u1_armhf.deb be04c868b9a64fa71d25116a30f3324a 523888 debug optional ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_armhf.deb 483ba196c344ef4c09de681325040e23 152804 ruby optional ruby-google-protobuf_3.21.12-3+deb12u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmpI9W4ACgkQ8U6eOZMp j68DHA//by25uKYwTWDzhutAjnFXR18UVkpareO2JfQQcM00w7+menT9y7sbB8nf 6jajPerB3qEaK6NYnSf670P9iX7dxCDCbRjLjmmQ6pgQGypRR9Sy/N/VsZo7tIr0 haEcrUIn8cwBlCKBgNlSeP36fXabT2WWbyb4TgEexYh1RCf58xiI3zUHsZmDB61f yHGZQ7voewShM4yCkPR+T20ilvHFF1sHj+PUO1MhVAi13i1Y3DCAxNYg2ptiN01g 6DsUg79kOTYdNg6DCoqCmcQSUl5f7jiJnTzUtYydIDp0mLEEPeg57HSWhYL8W3tz MwKZFB8leYCis4MDgOF1Owm1KB4DoQ9NAxg5PSBsTMXWtksOO29/C4Srbmf4lvkM CoGy0/fLupis7u5GPltNSTPHVv2ZuF8963UjVaqkv+n3sVmQ00SH2q0CG6lY0YPc 4mIWe2XMlkk8eWlXqVjprDqNHDAOW9+goEDbydi4eG5XUslTuUPe1IfQOe26GJ9F 6mIOZJpXP0s/svy+IkHyyLTrlDSHdZxRNBx/PtMfil78521x1w1nYk1iAXPmf5Qp 0L5qduVPUIk3RyDZ2iEMh8C15GVcpi5HH7kPS0+Ej+PuTpQqZYx4tTpUJObipiBz FMQcKk0T+51rBNq04fViwpUz4j8+aqm7ChE6fg6xT6STxcHCiKE= =Wq4B -----END PGP SIGNATURE-----