-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Jul 2026 22:28:07 +0300 Source: protobuf Binary: libprotobuf-dev libprotobuf-lite32t64 libprotobuf-lite32t64-dbgsym libprotobuf32t64 libprotobuf32t64-dbgsym libprotoc-dev libprotoc32t64 libprotoc32t64-dbgsym protobuf-compiler protobuf-compiler-dbgsym python3-protobuf python3-protobuf-dbgsym ruby-google-protobuf ruby-google-protobuf-dbgsym Architecture: i386 Version: 3.21.12-11+deb13u1 Distribution: trixie Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Adrian Bunk Description: libprotobuf-dev - protocol buffers C++ library (development files) and proto files libprotobuf-lite32t64 - protocol buffers C++ library (lite version) libprotobuf32t64 - protocol buffers C++ library libprotoc-dev - protocol buffers compiler library (development files) libprotoc32t64 - protocol buffers compiler library protobuf-compiler - compiler for protocol buffer definition files python3-protobuf - Python 3 bindings for protocol buffers ruby-google-protobuf - Protocol Buffers Closes: 1082381 1108057 1126302 1134895 Changes: protobuf (3.21.12-11+deb13u1) trixie; urgency=medium . * Non-maintainer upload. * Fix CVE-2026-0994: JSON recursion depth bypass (closes: #1126302). * Fix CVE-2026-6409: PHP Denial of Service (closes: #1134895). . [ Hlib Korzhynskyy ] * Complete fix of CVE-2024-7254 (closes: #1082381): - add recursion checks and recursion limit, - add tests. . [ Laszlo Boszormenyi (GCS) ] * Fix CVE-2025-4565: data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit (closes: #1108057). Checksums-Sha1: bb41fe6abc1be64c9a000e122d7a2e9d50d1ffcb 1434632 libprotobuf-dev_3.21.12-11+deb13u1_i386.deb 9d0c7fccbb589a79fcf0dacdbacd20354335bce2 1780884 libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_i386.deb 8bb653ad1a0780289fdfb11330f9535fe871243c 296428 libprotobuf-lite32t64_3.21.12-11+deb13u1_i386.deb 8b5096fdbe8013106bcfc2a33b97f4c01e90f979 11574600 libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_i386.deb 81be7f7b886633616f30bdbbfa5d5fba9b81621b 1066996 libprotobuf32t64_3.21.12-11+deb13u1_i386.deb 7b54efd103b6c71edb365d99fe99cc55a00b9537 1106468 libprotoc-dev_3.21.12-11+deb13u1_i386.deb 8eb6b0e1b0e2505e11265c70f14c7813bd59faf5 16652240 libprotoc32t64-dbgsym_3.21.12-11+deb13u1_i386.deb 5c6aabb7d0170e3ee23fad599918762cdb48ae2a 986392 libprotoc32t64_3.21.12-11+deb13u1_i386.deb 9af97b479979aa3196bd07e61e8977e1da32a0bb 116744 protobuf-compiler-dbgsym_3.21.12-11+deb13u1_i386.deb 656045be5a3f9f1ebee41f00953f897e8f7a0b58 85088 protobuf-compiler_3.21.12-11+deb13u1_i386.deb a7078f386f7489e8b2e786fe15bee555925b0154 13765 protobuf_3.21.12-11+deb13u1_i386-buildd.buildinfo f1bf66963b257d85580cc9509f438ecee51d17c7 1439424 python3-protobuf-dbgsym_3.21.12-11+deb13u1_i386.deb ac3c3d202e6a23470a16c143c604ba781ba79b39 256724 python3-protobuf_3.21.12-11+deb13u1_i386.deb 97b6bf25cfbaa85ab8a70f55ae2ddb39090c45ba 510928 ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_i386.deb c0e4bae1e162977ce4cecaa4193916180d891366 179380 ruby-google-protobuf_3.21.12-11+deb13u1_i386.deb Checksums-Sha256: 988315aa2f481ca1c56ce30841586c0e50541542fa7d7cff12530f011f865d15 1434632 libprotobuf-dev_3.21.12-11+deb13u1_i386.deb e6deb4122e1a9bf39a3fe3dfe8e3240e6444aa0ef091efc9fe6c204e4be8a1be 1780884 libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_i386.deb 44c434dbe427da218f22585e4d79116842f8aa8f37d584cbab8425c932943f3d 296428 libprotobuf-lite32t64_3.21.12-11+deb13u1_i386.deb b90f6ce9be2fc26e687b1694e172dab016fb030bfa9d9d03a4bd2e39e9592cf7 11574600 libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_i386.deb 4c893e81cef76dd072529e2e18740af928a26af94e5f83421ee29b504a39ebc6 1066996 libprotobuf32t64_3.21.12-11+deb13u1_i386.deb a617b154088d5167fc622a780d28e08d6ce49846c72cd2acde47bfeaa4129aca 1106468 libprotoc-dev_3.21.12-11+deb13u1_i386.deb ee3210ff11dbd081f1837c2051b6955cc25fe254856960721bc762c4a3cb1cad 16652240 libprotoc32t64-dbgsym_3.21.12-11+deb13u1_i386.deb c000812b937abd9aeedcecc048c4224ade832113d29f3f6aa0c84add7f89a1c7 986392 libprotoc32t64_3.21.12-11+deb13u1_i386.deb 1e66b1eae1d3f5e981a65b10f4ff1e56a8ce1b04db3445a8a07a1e6ecb4d0bf1 116744 protobuf-compiler-dbgsym_3.21.12-11+deb13u1_i386.deb 0f1e96fab3af009dc2d65fa21c47002ad00959c23cc0377d28f8a55b70e4e7a8 85088 protobuf-compiler_3.21.12-11+deb13u1_i386.deb 54db5f8e226a60303636e5b0d8f7cd0c5b6551da646c6a607c6267b75b4c8338 13765 protobuf_3.21.12-11+deb13u1_i386-buildd.buildinfo 0a01547b51a65f34aed3f7a3e7e58d644062641fa5b3a6fdcbd3c942d2fd2437 1439424 python3-protobuf-dbgsym_3.21.12-11+deb13u1_i386.deb 01f4d0ad6b49f4a8ee402f0864a3a065018b0ff2445cc3339779485029f2b0bc 256724 python3-protobuf_3.21.12-11+deb13u1_i386.deb 79addc2f193bbd9d1da577e5d20a697412444cc1eb0d790b835271f135eed7e8 510928 ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_i386.deb fe44e8eed8f764a2178c5d7807bdbe15793c685ac5b6c540915c310beb4d9a98 179380 ruby-google-protobuf_3.21.12-11+deb13u1_i386.deb Files: a0f4726ff9b03b3a4ade6b31da200441 1434632 libdevel optional libprotobuf-dev_3.21.12-11+deb13u1_i386.deb e436ec124112b04f7b0cfc833a1c1386 1780884 debug optional libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_i386.deb dabc941cf040e986218308840a2d66c2 296428 libs optional libprotobuf-lite32t64_3.21.12-11+deb13u1_i386.deb 1072d832223235d75ddeba82983372dc 11574600 debug optional libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_i386.deb 692679d545d9690cc8ceaeac9d297d94 1066996 libs optional libprotobuf32t64_3.21.12-11+deb13u1_i386.deb bba7f2a35fc8863ff4ccf65dc6060cd8 1106468 libdevel optional libprotoc-dev_3.21.12-11+deb13u1_i386.deb f0b3f7a6278f4665525af91381fb8e20 16652240 debug optional libprotoc32t64-dbgsym_3.21.12-11+deb13u1_i386.deb 5980ee0f512ec90d97644617161f44cb 986392 libs optional libprotoc32t64_3.21.12-11+deb13u1_i386.deb 97cad438539c5437d6f752b1156cc4aa 116744 debug optional protobuf-compiler-dbgsym_3.21.12-11+deb13u1_i386.deb 8ff057aa0707f351f7384b9153522707 85088 devel optional protobuf-compiler_3.21.12-11+deb13u1_i386.deb af013f6fd147b037bb248d82a11bbbc0 13765 devel optional protobuf_3.21.12-11+deb13u1_i386-buildd.buildinfo 4b985256459794af603fc7a0475fbca5 1439424 debug optional python3-protobuf-dbgsym_3.21.12-11+deb13u1_i386.deb 1b018c4c924b86ded9b41f1c43893c73 256724 python optional python3-protobuf_3.21.12-11+deb13u1_i386.deb 247d6fe18b74b3177235f91663e7aa65 510928 debug optional ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_i386.deb 73456ead0e805e5523da736d9339954b 179380 ruby optional ruby-google-protobuf_3.21.12-11+deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmpJCRUACgkQGNGWmfrq ILEKdQ//X95Ue7KWIq9Dz6P828JSzMv6Edbvswp60OtfdMfA0/hKGzIT60QbYSCj i7yQSZIEY/AHXhEx4r9ubxmrqh48KCqhy0bmmzUwPe8qSd8+LBzDE4XcXsFRt0AD NmljC5BAAncGioPUA7tes74F+AIzNrAJueo/H+DELmQyP71TvSzw8F9m1cNEW11q dtqqTOQKTXA2sv2FORL+v+hX2kDCgHQMQUSzqVrN+2DFj1flRZbLmhwNtfqe++U2 QGvhZzJPgxd/XwgqG6/VMQTWnaWpeFLtBAJPUEZynQoxFtAsC/JzUDe1pVQU0J7e NkBlkE0gA0FSif2/On7Tl8DBR0VKI0TE/o1gsIrReOconLGucyBL0RMVi6FhF2Tl uqijpM1jBppcH/SKhBqdYOJayvR3yjU3KkW9TPLUCTPST5e1joevR1zxjMLMGzXK IRmCooI+QhWGDjAhXmuCJmA9zRglfd7KWpYZVfmvWVh9h7LYrL0ATia/WdfSCoQv i2May55vAwkNwn3ycOxM5rzJBrgPlG63C80p4iJztTZ7MzylBDCeqoJkdkBXe499 BS4m4BPRYSxD8GFRKOANc4DFeqTDHXPguDhfsStWV9HC0lHP0DihGAY4PcLcDbLX RwfbwmpSL9YN6RDj++qnRjxuwhbGS38rGVbZrj+kFqLI80Y+bTg= =IVc2 -----END PGP SIGNATURE-----