-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Jul 2026 22:28:07 +0300 Source: protobuf Binary: libprotobuf-dev libprotobuf-lite32t64 libprotobuf-lite32t64-dbgsym libprotobuf32t64 libprotobuf32t64-dbgsym libprotoc-dev libprotoc32t64 libprotoc32t64-dbgsym protobuf-compiler protobuf-compiler-dbgsym python3-protobuf python3-protobuf-dbgsym ruby-google-protobuf ruby-google-protobuf-dbgsym Architecture: armel Version: 3.21.12-11+deb13u1 Distribution: trixie Urgency: medium Maintainer: armel Build Daemon (arm-ubc-04) Changed-By: Adrian Bunk Description: libprotobuf-dev - protocol buffers C++ library (development files) and proto files libprotobuf-lite32t64 - protocol buffers C++ library (lite version) libprotobuf32t64 - protocol buffers C++ library libprotoc-dev - protocol buffers compiler library (development files) libprotoc32t64 - protocol buffers compiler library protobuf-compiler - compiler for protocol buffer definition files python3-protobuf - Python 3 bindings for protocol buffers ruby-google-protobuf - Protocol Buffers Closes: 1082381 1108057 1126302 1134895 Changes: protobuf (3.21.12-11+deb13u1) trixie; urgency=medium . * Non-maintainer upload. * Fix CVE-2026-0994: JSON recursion depth bypass (closes: #1126302). * Fix CVE-2026-6409: PHP Denial of Service (closes: #1134895). . [ Hlib Korzhynskyy ] * Complete fix of CVE-2024-7254 (closes: #1082381): - add recursion checks and recursion limit, - add tests. . [ Laszlo Boszormenyi (GCS) ] * Fix CVE-2025-4565: data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit (closes: #1108057). Checksums-Sha1: 79b1854c7daaa1738377e483f85f74e37c29025f 1271572 libprotobuf-dev_3.21.12-11+deb13u1_armel.deb c3849f991f210b7a0bea111acc8a957a6a835de8 1812496 libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_armel.deb 7fa6b924092b18585ae45b5311133de0b0ec9a47 254860 libprotobuf-lite32t64_3.21.12-11+deb13u1_armel.deb 3272c423a59bc4125534aa1d6ffffaf846ac6680 11675964 libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_armel.deb de1ac7e3a865574fdaf852f2b480425eb557be07 849908 libprotobuf32t64_3.21.12-11+deb13u1_armel.deb ab084d3aee655a8a3ff01df9c846d5b5af2f2805 906496 libprotoc-dev_3.21.12-11+deb13u1_armel.deb 1becdb8bcfb869c493dff01085e0836319bb441b 16502332 libprotoc32t64-dbgsym_3.21.12-11+deb13u1_armel.deb c868cc5036534cb035248e75e4768f5d087eb99d 769396 libprotoc32t64_3.21.12-11+deb13u1_armel.deb bff23ee94ec04066c3aec3b2d618c8bdf9a091f8 117960 protobuf-compiler-dbgsym_3.21.12-11+deb13u1_armel.deb 5970895ff18815266c38b9da743687ab0fbcb331 84548 protobuf-compiler_3.21.12-11+deb13u1_armel.deb 567992e9fde6372a484e6fae071a16e0669ccbcf 13746 protobuf_3.21.12-11+deb13u1_armel-buildd.buildinfo b0c2d79d6d6ccd183a4cd97643e2eb465a93d322 1441304 python3-protobuf-dbgsym_3.21.12-11+deb13u1_armel.deb 2cfdebd22dea2f941231f53bbb7de5df6223ba6e 237040 python3-protobuf_3.21.12-11+deb13u1_armel.deb 80d511f73a2590d9f4b01049d14e1624630d0560 519852 ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_armel.deb c14a0e35bc4a11e2c4c10cbf19cefe86b0183277 154032 ruby-google-protobuf_3.21.12-11+deb13u1_armel.deb Checksums-Sha256: 17789146dba70126ddd07533c5f35ec9a212e61966fa4f6a0456513a6709d932 1271572 libprotobuf-dev_3.21.12-11+deb13u1_armel.deb a426a8fb6eeb70652f7770d7ab3448c809bedd7d1edae73f47301616ec401101 1812496 libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_armel.deb 8433192a0f2a1315b8a4edb72e914e033a8a55b6dcbb46369440d37aba0bab30 254860 libprotobuf-lite32t64_3.21.12-11+deb13u1_armel.deb 881afe268d1232315cd6f61a6cd98b426e080872ab336e450eb9dc3720897e1c 11675964 libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_armel.deb c462614ee556347ca971f9cb3cb18a0eba859a6b5bc80e31d600a58b14ab9719 849908 libprotobuf32t64_3.21.12-11+deb13u1_armel.deb 6b012816bde67678178a36983faece702e8eb84aa157c15f1f259e032db3d096 906496 libprotoc-dev_3.21.12-11+deb13u1_armel.deb a1cbff9f0e212b9947ad86434007281871622ae7ae3cf6825f40bec6596a0ee8 16502332 libprotoc32t64-dbgsym_3.21.12-11+deb13u1_armel.deb c1c7b03915e5f37a7ed55e6f6bf43f8e15143903590b9960a68c9b60268830cc 769396 libprotoc32t64_3.21.12-11+deb13u1_armel.deb 4d27b742b94d3ab1b41ac59bca7ab0a381029abda45a069e23c194b5fecbd648 117960 protobuf-compiler-dbgsym_3.21.12-11+deb13u1_armel.deb 3bbc579ba403114b2895a05b679d786515f5d4e4faf2798daae526aa77e1a9ce 84548 protobuf-compiler_3.21.12-11+deb13u1_armel.deb 8e8dacf3f1407982518d9c435e158f4183a3d18ff4acf4ff05ea9448465bc3af 13746 protobuf_3.21.12-11+deb13u1_armel-buildd.buildinfo 6b7cdeff6c73841ff228470e75d900f01ef2fa461dd793c8d09f36a18877b146 1441304 python3-protobuf-dbgsym_3.21.12-11+deb13u1_armel.deb 2fcff205c010c50fca6f7d2b3af6fccde9a34a10df9174024edd0a09f18f7b00 237040 python3-protobuf_3.21.12-11+deb13u1_armel.deb 7fd3b90308280bb0abaa797bd0871e678107c15da86ff659679789ae4142552b 519852 ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_armel.deb b2184ca6704a0a4a0aee6de4e2f380f492fbb458571cd49c3be14cd10ca3e481 154032 ruby-google-protobuf_3.21.12-11+deb13u1_armel.deb Files: a23e683709a84f8c2bec692538cd0d7e 1271572 libdevel optional libprotobuf-dev_3.21.12-11+deb13u1_armel.deb d559cbaf83175c4c9d413d96d98041f8 1812496 debug optional libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_armel.deb c330d9701f28b97e92a56cb04cf2bcff 254860 libs optional libprotobuf-lite32t64_3.21.12-11+deb13u1_armel.deb 6fb3d596bc548d2e73ae908f6f602030 11675964 debug optional libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_armel.deb 666eb139125e1a35e3630ad2c10deffb 849908 libs optional libprotobuf32t64_3.21.12-11+deb13u1_armel.deb 84fd36fb24273ffdf7a217798475d631 906496 libdevel optional libprotoc-dev_3.21.12-11+deb13u1_armel.deb f4319da1fd2dd8ae374fcb73e5111c46 16502332 debug optional libprotoc32t64-dbgsym_3.21.12-11+deb13u1_armel.deb e559eaef033bf65566e4235c2c359840 769396 libs optional libprotoc32t64_3.21.12-11+deb13u1_armel.deb 16c1dd52dc781288b45367fd155b151f 117960 debug optional protobuf-compiler-dbgsym_3.21.12-11+deb13u1_armel.deb ded7963a4870ed2eeb567197c2c20d8d 84548 devel optional protobuf-compiler_3.21.12-11+deb13u1_armel.deb 4e1dc3f9e48b46a194d4bf3a0fdccbee 13746 devel optional protobuf_3.21.12-11+deb13u1_armel-buildd.buildinfo b3e9feea96be2a781ff2a4c0f0964000 1441304 debug optional python3-protobuf-dbgsym_3.21.12-11+deb13u1_armel.deb 1a6ada2fe8f566332033fbc4bd0afef3 237040 python optional python3-protobuf_3.21.12-11+deb13u1_armel.deb 6f1104317f8306a35dddda8f3fdafbc5 519852 debug optional ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_armel.deb 6fe75e627993734e5d33312ce4994923 154032 ruby optional ruby-google-protobuf_3.21.12-11+deb13u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEECx5fXZYVNP9tMtwlK1PZBedPspoFAmpJCNsACgkQK1PZBedP spqYKA//XTYOs/0fSMhfCOxyRKYvXLNSPp/M1aYSKtN/ZiAAGp6eexYiaNbzed9U 0jogUn25RATq/lgS1JbqZOlQ5/W7ZrBFRGpXycQqWp56mQh59k+QxKUiNRp3EJ7X 4ryQft6hI1GVa5x7AcWi/zCegmL9ecG9coIKzgpNWXEdfnDXjDE4vAwERFAZL3km xjFwIh3lyTbqzwwZHI8QrLDny9N5QgwBoDeIZbc34bsDw9jaa611RQCEehj6Ej8d D148abEMLcvG6zXGDDIM4/bItohhUOv+V7+xLH3OFuS5/HlmYHkwMIJG5fcAEXhn isXy06BQI1mnCJNuSG9R8QqJwCD2EgJPsO6smSE3N0iBf/FN29cTY9Z3br78filN ut2jrOZxajkE907kdOB0fimp3PlWX4Z7GAYvkdkOMND5Au+3TlS18A+4trPoV+mG aN60gOyzpkIdapfttSsLls7s6NWxJjJqodZrTB+TP3WtEjz/ps+7Ex96VSpiuB73 E4vUSnR2t5nD+SJTLd0rENI0V3StNqL8lZnCPwrRrBkhyBwwjvOdveCf/oAZZ0Nc Uli/uOIVkxCA4rcxyaoqDeI4misVPQU1kpfcRu33oR/d0WxOuxAvmbNkIvL23fqy kVltUcFUM7fbCpQyRux8PR8iy7n+DC6tMiAnNQ/rzOTFY2GS29c= =fVNV -----END PGP SIGNATURE-----