-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Jul 2026 22:28:07 +0300 Source: protobuf Binary: libprotobuf-dev libprotobuf-lite32t64 libprotobuf-lite32t64-dbgsym libprotobuf32t64 libprotobuf32t64-dbgsym libprotoc-dev libprotoc32t64 libprotoc32t64-dbgsym protobuf-compiler protobuf-compiler-dbgsym python3-protobuf python3-protobuf-dbgsym ruby-google-protobuf ruby-google-protobuf-dbgsym Architecture: amd64 Version: 3.21.12-11+deb13u1 Distribution: trixie Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Adrian Bunk Description: libprotobuf-dev - protocol buffers C++ library (development files) and proto files libprotobuf-lite32t64 - protocol buffers C++ library (lite version) libprotobuf32t64 - protocol buffers C++ library libprotoc-dev - protocol buffers compiler library (development files) libprotoc32t64 - protocol buffers compiler library protobuf-compiler - compiler for protocol buffer definition files python3-protobuf - Python 3 bindings for protocol buffers ruby-google-protobuf - Protocol Buffers Closes: 1082381 1108057 1126302 1134895 Changes: protobuf (3.21.12-11+deb13u1) trixie; urgency=medium . * Non-maintainer upload. * Fix CVE-2026-0994: JSON recursion depth bypass (closes: #1126302). * Fix CVE-2026-6409: PHP Denial of Service (closes: #1134895). . [ Hlib Korzhynskyy ] * Complete fix of CVE-2024-7254 (closes: #1082381): - add recursion checks and recursion limit, - add tests. . [ Laszlo Boszormenyi (GCS) ] * Fix CVE-2025-4565: data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit (closes: #1108057). Checksums-Sha1: 5802289d43d0c7426b69c63d6e3f4119f966a295 1329372 libprotobuf-dev_3.21.12-11+deb13u1_amd64.deb 437fbd57b919a087064a54641146ecd2a15bc743 1894252 libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_amd64.deb 52db6f5803c679d0c830e7f255f83977273603c1 274600 libprotobuf-lite32t64_3.21.12-11+deb13u1_amd64.deb a0a75f883bdbc9d46abc34a8ab25a3572e066001 11971664 libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_amd64.deb 1d7aa021c5e717f2f746f5038057d8dbaa9cfaa4 981280 libprotobuf32t64_3.21.12-11+deb13u1_amd64.deb 7c1a9e6aedf635c8bc84d8fbfe946c4f0b674d74 1025020 libprotoc-dev_3.21.12-11+deb13u1_amd64.deb d3f569e4246d443d7447bba8d963e1f1ef59b70d 17005712 libprotoc32t64-dbgsym_3.21.12-11+deb13u1_amd64.deb 2a1daf74d3e7623349249e3132bbf9651353aecb 922092 libprotoc32t64_3.21.12-11+deb13u1_amd64.deb ea65b1fc4bf5381179809dd07666cc4e94fd7ed7 118048 protobuf-compiler-dbgsym_3.21.12-11+deb13u1_amd64.deb 90204975db5531e345b932e3058e42c5a4aca7c1 84956 protobuf-compiler_3.21.12-11+deb13u1_amd64.deb d96cc2d9614d001be75ecc2b252e64adaa6620e0 13897 protobuf_3.21.12-11+deb13u1_amd64-buildd.buildinfo 2625c2bd50a760e4340608f4bb80826682ae1998 1465292 python3-protobuf-dbgsym_3.21.12-11+deb13u1_amd64.deb b61c73047e785ac2bcb9bd10f774fee81d075c7e 251448 python3-protobuf_3.21.12-11+deb13u1_amd64.deb 528289e988d3e536f559679025fec726bd7d944c 536288 ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_amd64.deb b9233caa74bf345a1cadaee1e748737f60789f0c 168060 ruby-google-protobuf_3.21.12-11+deb13u1_amd64.deb Checksums-Sha256: c0328550b6ccd7b09d4e50bc2b325a43638bf8fa5f74148ab6e63d49af7543f3 1329372 libprotobuf-dev_3.21.12-11+deb13u1_amd64.deb e5ab0c9f56d3a247383ae27a8c2ebc4b4810acdaf1a5aeb15d3379c55701b6bf 1894252 libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_amd64.deb 74ed82b17475a1411ac79b27bd8b0223b3727d55660f77b8a5f6d5598e2dd7c2 274600 libprotobuf-lite32t64_3.21.12-11+deb13u1_amd64.deb 878b4c0cc27423ac922a2010816a5692955eee8fee7e05d04c7d8935c67add80 11971664 libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_amd64.deb 38c43ec79a043d2b2659fed321725049a7e457096a66691cf6eb0d3a1a8f0e85 981280 libprotobuf32t64_3.21.12-11+deb13u1_amd64.deb adee6687ca34c473d13ccce0c2f5f5a19ab3abfc888b0e0b01b7bfb0e14adbeb 1025020 libprotoc-dev_3.21.12-11+deb13u1_amd64.deb b7344a6f76340922a6c2abdd2340aaadd0c47c8f08e06e07e10d9438a13dbefd 17005712 libprotoc32t64-dbgsym_3.21.12-11+deb13u1_amd64.deb 8a96715498f10f8e166411248164448c9a892fa1d5b25f1e02a93ea668fa72aa 922092 libprotoc32t64_3.21.12-11+deb13u1_amd64.deb b1e411928de0e1de24990c0aa3fab8968b75737c29a30be7478a7cc3b2d90589 118048 protobuf-compiler-dbgsym_3.21.12-11+deb13u1_amd64.deb 62c6085aeeb8cbcb16747fcf7170aaddcff344874a3aa60a272e423cbeb89b3a 84956 protobuf-compiler_3.21.12-11+deb13u1_amd64.deb c8953c271bb621d6f342e76a49373bf7560fe60081772d9d98b490e327fc36af 13897 protobuf_3.21.12-11+deb13u1_amd64-buildd.buildinfo daf21f70525a76b680760bf87979a0964635655ffa1998399db60823019209fc 1465292 python3-protobuf-dbgsym_3.21.12-11+deb13u1_amd64.deb 585ad06ad4c12846a2536eeb02d3ac8f83ddd8d2525b76d27e9e058cee8d77ce 251448 python3-protobuf_3.21.12-11+deb13u1_amd64.deb dd2df43c83b1121cce8f9dfa45f17a31df2bd31aec6807b8f26cfaac07e1ef6b 536288 ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_amd64.deb e32228b28d34f4ac9b38c0b4cb97c6ff2583fdf823da1510440671ee61076dd7 168060 ruby-google-protobuf_3.21.12-11+deb13u1_amd64.deb Files: b3de43b29cc9c6394dc0a6518e2a42b6 1329372 libdevel optional libprotobuf-dev_3.21.12-11+deb13u1_amd64.deb b3ee9d4e87f9b79f5ab51d7672afc6cd 1894252 debug optional libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_amd64.deb 8d75321f8231d07bc036c249e1970a07 274600 libs optional libprotobuf-lite32t64_3.21.12-11+deb13u1_amd64.deb 66430e89b2b856b89c9cde7f41a3d7a8 11971664 debug optional libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_amd64.deb cd5ee755782d8108c277d2949bb9d17f 981280 libs optional libprotobuf32t64_3.21.12-11+deb13u1_amd64.deb e63ce78b90f9ba90ce261a7c6fe9aa8c 1025020 libdevel optional libprotoc-dev_3.21.12-11+deb13u1_amd64.deb 124e6d51d1c75d5329830a6fd038ec34 17005712 debug optional libprotoc32t64-dbgsym_3.21.12-11+deb13u1_amd64.deb b646e4966af741009a6e00c60ad89dfc 922092 libs optional libprotoc32t64_3.21.12-11+deb13u1_amd64.deb b02ea8ac4a0d5f4329b8111101b436f3 118048 debug optional protobuf-compiler-dbgsym_3.21.12-11+deb13u1_amd64.deb 837a8731f911643b6cab788b93f88e22 84956 devel optional protobuf-compiler_3.21.12-11+deb13u1_amd64.deb 628cf51709dea003404a96d9257be6be 13897 devel optional protobuf_3.21.12-11+deb13u1_amd64-buildd.buildinfo 14593ac4e4111afb9aecf5662bfc84be 1465292 debug optional python3-protobuf-dbgsym_3.21.12-11+deb13u1_amd64.deb 7f7b6cdf1faf41311143c082077259f3 251448 python optional python3-protobuf_3.21.12-11+deb13u1_amd64.deb d46037d76fc3b09a584295496894021c 536288 debug optional ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_amd64.deb 9ebb105dea252deeb88f3df7ab71df1f 168060 ruby optional ruby-google-protobuf_3.21.12-11+deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmpJCK4ACgkQPkCWRKsh 20eENQ/+NVm8uDIcaKh7OQdBKezwrD/hVgV5B6mw08gY/+rygR96ks9X2yKG6Ghq aDGIb2+rAQfGEHD2xBpdGk0bmT+dI0/SFDdCk/ig77Y1KPWpy6rrkFRuiwwO8tT0 g02yhuMqDR0psgqOMT5R+XHiKxKu+tCc7jM8CAeLx6CU2uPWnsirQLD0hOij4EPv B+nPk/KqvUkxAWfJ3y7q1CO6SLvwDv9tii8jANo3fNjK/WSKI/3y7Eioil2OqO0z vrnWfYAvovRgoc/5Rhrsphxfi5Dnkol2t3pkDyRYGhq+sG9X0qA/RIvZRl92t8Dw /XjczkrL15QxPKKluwVUkHyMgdphJOkYJF9QPHN7EIqsgOb6J7nX8CRdVDGKZyli KQHZ0Jrp4ZRYuheKTXXVziZT1GDqcH6nQkvgom/tHZ2ByfgVmriUCobYvRZoGxpQ M7y4tdBV6WZh3Fk+Ekz0GhGp43k5gdnVglAYraB9vN5NlHYf69FlfbH1TbUebGon Z5DrjRV3p+ITtJsGDSSVO1k9o8vh6AxQIFqYXfyGr78Rt9657jQhGp+GY+nmoWm/ kjHDzdHzmyGP9UAUGLxXiXiDVJoCTcPcpIoVRxqPSGK2HBJBv1i2z3lv5aVGH3ab bRe9Nm89pOPJB9bl2ld+mIkrw+IZMKAOjibgq6KrpqaOjrNZkng= =O27k -----END PGP SIGNATURE-----