-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Jul 2026 22:28:07 +0300 Source: protobuf Binary: libprotobuf-dev libprotobuf-lite32t64 libprotobuf-lite32t64-dbgsym libprotobuf32t64 libprotobuf32t64-dbgsym libprotoc-dev libprotoc32t64 libprotoc32t64-dbgsym protobuf-compiler protobuf-compiler-dbgsym python3-protobuf python3-protobuf-dbgsym ruby-google-protobuf ruby-google-protobuf-dbgsym Architecture: arm64 Version: 3.21.12-11+deb13u1 Distribution: trixie Urgency: medium Maintainer: arm64 Build Daemon (arm-ubc-01) Changed-By: Adrian Bunk Description: libprotobuf-dev - protocol buffers C++ library (development files) and proto files libprotobuf-lite32t64 - protocol buffers C++ library (lite version) libprotobuf32t64 - protocol buffers C++ library libprotoc-dev - protocol buffers compiler library (development files) libprotoc32t64 - protocol buffers compiler library protobuf-compiler - compiler for protocol buffer definition files python3-protobuf - Python 3 bindings for protocol buffers ruby-google-protobuf - Protocol Buffers Closes: 1082381 1108057 1126302 1134895 Changes: protobuf (3.21.12-11+deb13u1) trixie; urgency=medium . * Non-maintainer upload. * Fix CVE-2026-0994: JSON recursion depth bypass (closes: #1126302). * Fix CVE-2026-6409: PHP Denial of Service (closes: #1134895). . [ Hlib Korzhynskyy ] * Complete fix of CVE-2024-7254 (closes: #1082381): - add recursion checks and recursion limit, - add tests. . [ Laszlo Boszormenyi (GCS) ] * Fix CVE-2025-4565: data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit (closes: #1108057). Checksums-Sha1: 5dfb0fdd202ebea6a34dedf99df205c8099ce053 1260712 libprotobuf-dev_3.21.12-11+deb13u1_arm64.deb 0c038ecbb16039e3806abec40864ba9178e41a93 1821692 libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_arm64.deb 5a78dcb1bede20b2a8e6c4a931380fd3eb1eced3 250036 libprotobuf-lite32t64_3.21.12-11+deb13u1_arm64.deb 589c11aa9d6598a887c666ad6365bf89048a3e47 11589460 libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_arm64.deb 931847d98f9640b623043ac61df26ac395ba9fbd 858432 libprotobuf32t64_3.21.12-11+deb13u1_arm64.deb f8b76930a3937b5ba215f77a8e9b26071129778e 938100 libprotoc-dev_3.21.12-11+deb13u1_arm64.deb 7731838de045b6c9efd221d5b846a7f0657543eb 16348108 libprotoc32t64-dbgsym_3.21.12-11+deb13u1_arm64.deb 4df67b8a97c3df4dfdf742b97a79fa27a10fae74 790464 libprotoc32t64_3.21.12-11+deb13u1_arm64.deb 79163c11b97a4f5fc96a34e559a5c4edd1b1dd6e 118508 protobuf-compiler-dbgsym_3.21.12-11+deb13u1_arm64.deb a98be689f9da1830a64afff7bb1f49ba755a9c88 85040 protobuf-compiler_3.21.12-11+deb13u1_arm64.deb 05c232c0bf8fa5634860d0cac267780532405d69 13881 protobuf_3.21.12-11+deb13u1_arm64-buildd.buildinfo 07a071d98f361449a398bf5c2c45743b8c902c80 1442380 python3-protobuf-dbgsym_3.21.12-11+deb13u1_arm64.deb 3bef01f3e1d30a7a85659d0c6a74a3b5bb68ad4a 242228 python3-protobuf_3.21.12-11+deb13u1_arm64.deb 6175680b068963f95a1e1b701bf8facd41d9780c 527700 ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_arm64.deb 46a9980166f37c0e82e55b2c25022c57b8bf0b72 159916 ruby-google-protobuf_3.21.12-11+deb13u1_arm64.deb Checksums-Sha256: 26e311a867ef831d2378a33e772b1f21924261eedcefe08f7ce852c6176c2836 1260712 libprotobuf-dev_3.21.12-11+deb13u1_arm64.deb adb18012e55f74e24fd125ea0d860e9a610529422a3c4cb61596423ced9f9468 1821692 libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_arm64.deb 576ce2ca95e4aa98e135e02594a950e6381189d8b9702295ab8d505d49a503ad 250036 libprotobuf-lite32t64_3.21.12-11+deb13u1_arm64.deb 0bc63b566682cc55ef8bed7a2bb62c7ce6fab2820666e22dd66c196d2631c16d 11589460 libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_arm64.deb 51bf38fcca667be0deef732a903563ee6ffa9bfc04433310c2c49e4c92d06b09 858432 libprotobuf32t64_3.21.12-11+deb13u1_arm64.deb 405ec6e7b5dd99b73a84f4671af03b0b0d94b4a372c36a49c0f94457f40b36a9 938100 libprotoc-dev_3.21.12-11+deb13u1_arm64.deb b5c64469945a9e19cbf18860c324fa2281174e75738de58b39a88ad1ce446b49 16348108 libprotoc32t64-dbgsym_3.21.12-11+deb13u1_arm64.deb 0cf431ed1f7d48d6acd52e1532bc3f7c17048a737115dc9eb900edfa7a08ed7a 790464 libprotoc32t64_3.21.12-11+deb13u1_arm64.deb 875ecd050034bcf942b16e8157c474050929549dba47514e28c6315d611e45e0 118508 protobuf-compiler-dbgsym_3.21.12-11+deb13u1_arm64.deb a873f75cbdf8054a23687e7c9b39ca1a93545edd22a581f4caa560756678f658 85040 protobuf-compiler_3.21.12-11+deb13u1_arm64.deb afb965a057e268aa78c6f99df0e0f4ea6f4cc4dd7fc84b14b481536bbaeae761 13881 protobuf_3.21.12-11+deb13u1_arm64-buildd.buildinfo 0641fcfa2083d80a3bba7552c19e0476a9529f53a89a1d131e783de64d80f2ae 1442380 python3-protobuf-dbgsym_3.21.12-11+deb13u1_arm64.deb 4b2e993668de7c0a69dffe5cfb74c21643424810db083c5ed50f86b30699b552 242228 python3-protobuf_3.21.12-11+deb13u1_arm64.deb 25d18f511a080a737dc88beeb426002911d5ee4ac0f922fc1b35dd0208e870bf 527700 ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_arm64.deb f2aec34a510c54d28be9b4792791b43b239c84f99f95874b66ac5b4e2e73f419 159916 ruby-google-protobuf_3.21.12-11+deb13u1_arm64.deb Files: 11a0c8439c55e2a6177f695b084ef55b 1260712 libdevel optional libprotobuf-dev_3.21.12-11+deb13u1_arm64.deb 288eff316745603796a34dd8126d327e 1821692 debug optional libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_arm64.deb a1e246c8b23e7d64d12c45f17679770a 250036 libs optional libprotobuf-lite32t64_3.21.12-11+deb13u1_arm64.deb 16346b56c8316d5e28b89cb7ff3644c4 11589460 debug optional libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_arm64.deb adb19474adb6dcad5d770f513e89b92b 858432 libs optional libprotobuf32t64_3.21.12-11+deb13u1_arm64.deb f14268fb377a8b441a0e2d5f51b4fcf1 938100 libdevel optional libprotoc-dev_3.21.12-11+deb13u1_arm64.deb 5953600eaba3da17ad892716ac13132e 16348108 debug optional libprotoc32t64-dbgsym_3.21.12-11+deb13u1_arm64.deb 61b53133354473abace6fa7aa371eebe 790464 libs optional libprotoc32t64_3.21.12-11+deb13u1_arm64.deb 21a0708aad898ce25443858132f2ea45 118508 debug optional protobuf-compiler-dbgsym_3.21.12-11+deb13u1_arm64.deb 7d454428680090c33c7d3d4ae767d56a 85040 devel optional protobuf-compiler_3.21.12-11+deb13u1_arm64.deb e20296629803671fea9dfb90c1df3fa5 13881 devel optional protobuf_3.21.12-11+deb13u1_arm64-buildd.buildinfo 458cd64c5e5fa501bab5a6755f00303e 1442380 debug optional python3-protobuf-dbgsym_3.21.12-11+deb13u1_arm64.deb 363927de41f3208ac5cd4695de707670 242228 python optional python3-protobuf_3.21.12-11+deb13u1_arm64.deb 6bc1b24653be4fdfc923743d931b8f45 527700 debug optional ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_arm64.deb 1cfb04b51774c03d9aa06f6d99f0e3b5 159916 ruby optional ruby-google-protobuf_3.21.12-11+deb13u1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0Ha//LlsGOpbQ/H4xqCFmsOWgoYFAmpJCIcACgkQxqCFmsOW goZClw//ZKyrxZeknbkR1/BxU3HdYXE7U5tde65iE52SPUvAvOdhkIwXuJ1TbI1a SntxzU5FjGRsJ2QN01wj3iCFAn1uPbUhedIghJMQdFVBUC7e+khvsP2pd42VG2fp 0fQuIReTxAsZPzMlKOjx68rMSneFD7WU4gMtv0udVOwiRw+OXz0KRFE/krv8UBmS I5Sqkh/pXDP3hmcDzUM+SFYRMMzAwwiQXFVxCuRzKf9ge7LZDFRONKQ3XIUAK5tT 5Y5ihWLIxM6eghZ1Zr30i+ktHgmleTGZOHFGbji5GxMbCPzcl2wAJuww9Fn1HSF3 mK32W5NABK1CLW52bbR1HKRHzhYI8HudHGiQ2OV7gp8Ua7GUHB/ckJSNC5YSiuOR 9ngSSPBBERIFzKz33PrUNQi1UKk1GfaM5qmJ85hnox5adl8PRS3eLSu5Nwc0a5gn rRVbuTPocVl28rGgPGtUcKx1D7Q4p44JzaprscKsgEc8ztPttFdtGIFrqu7fv2db W9gUgxkfoFB8md5o3KfltY2L4uLjXJkvvUweuKN+ZSfMfTQ3O4cXOh1TuhDZLIvG VCy8v/wk8Nx25Q3CSpJATMue1LIi0dsyq5j1Dv02VPQURYwTDbaSeAUlZ2INhdNc cdVVXk7JxEb2sUTd9eikKiSm3euuhy32g6vh6mdy02pRtoACkC8= =z3iV -----END PGP SIGNATURE-----