-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Jul 2026 22:51:59 +0300 Source: protobuf Binary: libprotobuf-dev libprotobuf-lite32 libprotobuf-lite32-dbgsym libprotobuf32 libprotobuf32-dbgsym libprotoc-dev libprotoc32 libprotoc32-dbgsym protobuf-compiler protobuf-compiler-dbgsym python3-protobuf python3-protobuf-dbgsym ruby-google-protobuf ruby-google-protobuf-dbgsym Architecture: s390x Version: 3.21.12-3+deb12u1 Distribution: bookworm Urgency: medium Maintainer: s390x Build Daemon (ziehrer) Changed-By: Adrian Bunk Description: libprotobuf-dev - protocol buffers C++ library (development files) and proto files libprotobuf-lite32 - protocol buffers C++ library (lite version) libprotobuf32 - protocol buffers C++ library libprotoc-dev - protocol buffers compiler library (development files) libprotoc32 - protocol buffers compiler library protobuf-compiler - compiler for protocol buffer definition files python3-protobuf - Python 3 bindings for protocol buffers ruby-google-protobuf - Protocol Buffers Closes: 1082381 1108057 1126302 1134895 Changes: protobuf (3.21.12-3+deb12u1) bookworm; urgency=medium . * Non-maintainer upload. * Fix CVE-2026-0994: JSON recursion depth bypass (closes: #1126302). * Fix CVE-2026-6409: PHP Denial of Service (closes: #1134895). . [ Hlib Korzhynskyy ] * Complete fix of CVE-2024-7254 (closes: #1082381): - add recursion checks and recursion limit, - add tests. . [ Laszlo Boszormenyi (GCS) ] * Fix CVE-2025-4565: data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit (closes: #1108057). Checksums-Sha1: 4e6d326bf827fff6cfd85c971dfa2b3b4f8d6c57 1169040 libprotobuf-dev_3.21.12-3+deb12u1_s390x.deb 0a778ee13e277c335e3bba9f378e20caf2816043 1832924 libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_s390x.deb bd2a057ebb46aa9f697f170cc66293eeac62074a 243036 libprotobuf-lite32_3.21.12-3+deb12u1_s390x.deb f0c154c58e575d0d5bf8fce84aebb7efe371737b 11617920 libprotobuf32-dbgsym_3.21.12-3+deb12u1_s390x.deb 7c4b998e3f0463deeff3695f46f32a30735e7527 841672 libprotobuf32_3.21.12-3+deb12u1_s390x.deb e1d77c10567122fd7b1a952c5a487d362f9299de 859344 libprotoc-dev_3.21.12-3+deb12u1_s390x.deb f16bee69b714aa18318d9b4eb1904c98fc33ff76 16129708 libprotoc32-dbgsym_3.21.12-3+deb12u1_s390x.deb 2a4b9790b1a05830b727025b3043b6432c23f4dd 759764 libprotoc32_3.21.12-3+deb12u1_s390x.deb bfdd30f693e548436c8f475fc395e3b9d16ec594 118916 protobuf-compiler-dbgsym_3.21.12-3+deb12u1_s390x.deb 1c56a2cbcb833c6f0b54a1a10e1776529298f8a7 83924 protobuf-compiler_3.21.12-3+deb12u1_s390x.deb 625c4dc36b5b470b5619e4d2fd7e2e9851331ff6 16206 protobuf_3.21.12-3+deb12u1_s390x-buildd.buildinfo 8c9bf2c8213771c3fa7a07f144dac5e55ac1f420 1447180 python3-protobuf-dbgsym_3.21.12-3+deb12u1_s390x.deb 8e926f9c66b9ad297db06e0042758fa01b8e79fa 238980 python3-protobuf_3.21.12-3+deb12u1_s390x.deb 2f186ea2df4e809ee61beed933f5cfd5c25e6489 536104 ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_s390x.deb 9cd888c5394602f4d5663225524e074d6dfb8a87 161200 ruby-google-protobuf_3.21.12-3+deb12u1_s390x.deb Checksums-Sha256: 68fbefa0e696df7e6d7df4719d6a359cd7c864b02c25a218d26592f4a81f9c09 1169040 libprotobuf-dev_3.21.12-3+deb12u1_s390x.deb ceb7629683f345988085b552aefe9cd5b8f45e8836e53e8a98bdfa34c8da74d3 1832924 libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_s390x.deb 427ced7d413619ba6ba0734b4b2af7655a6166057935030d3ac17b1659c05f93 243036 libprotobuf-lite32_3.21.12-3+deb12u1_s390x.deb 78a9d564c434922bd47f87810ad66353fca26f13eb086bf22608f481b3d6f8e6 11617920 libprotobuf32-dbgsym_3.21.12-3+deb12u1_s390x.deb 50c3ce4f4b1a239e2e38b66c98d7e223f3ef822dceff4373bc0e3728d41ad447 841672 libprotobuf32_3.21.12-3+deb12u1_s390x.deb 9dba063868337895365f9c0af532566cf71a87c650a59447513fb1e2c31d1c28 859344 libprotoc-dev_3.21.12-3+deb12u1_s390x.deb 93a6e84b47ab19402968736c9ef84dceea06f88055fa4c90b256f31de0ba8dbf 16129708 libprotoc32-dbgsym_3.21.12-3+deb12u1_s390x.deb 9e59812269b1369a3a010fd483226234be20f9badd58f86ed0252778ba4f41f5 759764 libprotoc32_3.21.12-3+deb12u1_s390x.deb e8ec356cd52a03d893e59f73704c44621346b9e7aa2309353ac02138ff48a330 118916 protobuf-compiler-dbgsym_3.21.12-3+deb12u1_s390x.deb c1da586f7de4f6e030fbe08ba4eb225396af95ee42256644ee2d8622a30c9d0b 83924 protobuf-compiler_3.21.12-3+deb12u1_s390x.deb 08b6b1fed11e5fcaf954891ec2e4c5fc761e001e7877d8769ec1eb009c588dc4 16206 protobuf_3.21.12-3+deb12u1_s390x-buildd.buildinfo b575e048eaaa4ff6565f66180df41646587cf8135b749dc1d4a92d7d4f2b24e8 1447180 python3-protobuf-dbgsym_3.21.12-3+deb12u1_s390x.deb 4335a913aa114f6324e237401ae2ca8d117c3d5c7587666acbe7bfa2c8994d93 238980 python3-protobuf_3.21.12-3+deb12u1_s390x.deb c774ba3fb78551e6ada9b9f0b79d257bb97aa211ae9896f23dd07b1a36f4de47 536104 ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_s390x.deb dfd5d0e00e0c25d42bb930f2f992f6e61e3f0972df13b9333d0131e54c0804f0 161200 ruby-google-protobuf_3.21.12-3+deb12u1_s390x.deb Files: 0e24360dbea9053c14c281a534ba8d08 1169040 libdevel optional libprotobuf-dev_3.21.12-3+deb12u1_s390x.deb a290bf4fa3ce40b9941fe2380b51df19 1832924 debug optional libprotobuf-lite32-dbgsym_3.21.12-3+deb12u1_s390x.deb f81da1672670d1636e3dfe8bb698057a 243036 libs optional libprotobuf-lite32_3.21.12-3+deb12u1_s390x.deb 74e258d34c3d297af86fab1b14377b11 11617920 debug optional libprotobuf32-dbgsym_3.21.12-3+deb12u1_s390x.deb c43aac6fd776e8fb80ecab36bb52d53e 841672 libs optional libprotobuf32_3.21.12-3+deb12u1_s390x.deb 586c7faac28de0b993f5d5bdfd1031c6 859344 libdevel optional libprotoc-dev_3.21.12-3+deb12u1_s390x.deb dd971a97fa95452304c4def4ffe9a05a 16129708 debug optional libprotoc32-dbgsym_3.21.12-3+deb12u1_s390x.deb 00e6ac6967af741d7c32ece360316b1c 759764 libs optional libprotoc32_3.21.12-3+deb12u1_s390x.deb 76c71c12f0965daa61faf4e4045c2449 118916 debug optional protobuf-compiler-dbgsym_3.21.12-3+deb12u1_s390x.deb d3e825a26290f158b7b480548f7783c5 83924 devel optional protobuf-compiler_3.21.12-3+deb12u1_s390x.deb 36a4637cacd4d01c08041544ea5d58f9 16206 devel optional protobuf_3.21.12-3+deb12u1_s390x-buildd.buildinfo 7478a74b9e2ea7003dca0b93496c3431 1447180 debug optional python3-protobuf-dbgsym_3.21.12-3+deb12u1_s390x.deb 37fc973c463500701e79b9c3428723cb 238980 python optional python3-protobuf_3.21.12-3+deb12u1_s390x.deb 3017fe7685f22a053f293125f6156cd7 536104 debug optional ruby-google-protobuf-dbgsym_3.21.12-3+deb12u1_s390x.deb cded6b7866806e1e3e2fae30e8014017 161200 ruby optional ruby-google-protobuf_3.21.12-3+deb12u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEl0BM/nR+Oj597wRWMWUFebkHnoQFAmpI9kAACgkQMWUFebkH noTzxA//cUhRVvzknXJ7ppFg3RHqYAODvIVIVYX5Y+MyFoLIUbWGYMxDFXBIBVC/ v9sJw49ZT01QHTUYFp2jprXJdSsX/1gtX8YqkG0NdwG9SLxPlWwtuMSyVlrzaIxu 4qsNFXQ7QIaO3KlbE5veFBlfnueT3U5whu4Hrc8orWRyGGUdoAPBBcQT436j1Zkn ZJnBds1ixqoW4NDPiUnzEfDR++CAdW9xfvmN+r6INYM45Njcu6idGhg2eiui1U40 i/YUmdM/Kcse5RsH4MtLPhkm+R1nh5mibnmGRg97EHqU4LP3cRK1BLrjDrqgGAf9 C68yI7xny1ovi3GExDdAsnHCPXl0bI0WpIyAHuTdA2+3e/TIQf5H7bK/6K++Nn+D Xb0beaCW8/p4AjFJ440CkuyhshcjPe1WmkFw06yHpaHHsjh7Edib1B5bXtrBDSa9 qaWZmqWDYljK5hkFmNBH/r1gAq39iyEVCbr6nSGXNY9YzLQefpGaQ0ZBxa4wpgap z7WbzAsNAIA0NljZTdbdCgLfvIlCAMVeCCXWy9aT65XD0FTidlcGE+Eu4GghiBnl cBFMqmdt6Q+/wdi25Ade+TSw01MYPhfJsFGaP5nwqlmvLyYfqmc1UNaIzbUPqaoC 6BdFyCKPz91eiUfAG89HqmpC+a+KC6ZZsk40K3/EpzVjqpL2DW8= =Z82Y -----END PGP SIGNATURE-----