-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Jul 2026 22:28:07 +0300 Source: protobuf Binary: libprotobuf-dev libprotobuf-lite32t64 libprotobuf-lite32t64-dbgsym libprotobuf32t64 libprotobuf32t64-dbgsym libprotoc-dev libprotoc32t64 libprotoc32t64-dbgsym protobuf-compiler protobuf-compiler-dbgsym python3-protobuf python3-protobuf-dbgsym ruby-google-protobuf ruby-google-protobuf-dbgsym Architecture: armhf Version: 3.21.12-11+deb13u1 Distribution: trixie Urgency: medium Maintainer: armhf Build Daemon (arm-ubc-06) Changed-By: Adrian Bunk Description: libprotobuf-dev - protocol buffers C++ library (development files) and proto files libprotobuf-lite32t64 - protocol buffers C++ library (lite version) libprotobuf32t64 - protocol buffers C++ library libprotoc-dev - protocol buffers compiler library (development files) libprotoc32t64 - protocol buffers compiler library protobuf-compiler - compiler for protocol buffer definition files python3-protobuf - Python 3 bindings for protocol buffers ruby-google-protobuf - Protocol Buffers Closes: 1082381 1108057 1126302 1134895 Changes: protobuf (3.21.12-11+deb13u1) trixie; urgency=medium . * Non-maintainer upload. * Fix CVE-2026-0994: JSON recursion depth bypass (closes: #1126302). * Fix CVE-2026-6409: PHP Denial of Service (closes: #1134895). . [ Hlib Korzhynskyy ] * Complete fix of CVE-2024-7254 (closes: #1082381): - add recursion checks and recursion limit, - add tests. . [ Laszlo Boszormenyi (GCS) ] * Fix CVE-2025-4565: data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit (closes: #1108057). Checksums-Sha1: 7863119db355baab442998472da5d63aa6c8fae0 1283904 libprotobuf-dev_3.21.12-11+deb13u1_armhf.deb aed5e623f40da53cb54916a304732baeb264d926 1803136 libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_armhf.deb bb264dd5d384c85b119c3f096c1fd5af6b2c0f53 254672 libprotobuf-lite32t64_3.21.12-11+deb13u1_armhf.deb 99c2e9072b27c1db15e131bdaa3330e5b9476b77 11685224 libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_armhf.deb fa435eda3548e87797b2a910f3961bafc661286d 870904 libprotobuf32t64_3.21.12-11+deb13u1_armhf.deb 5ee2d8fc22e6f923f051f4048ebd3f99706976cb 933684 libprotoc-dev_3.21.12-11+deb13u1_armhf.deb 43c6424f86bdaf37cb7204ff087ac9f810fcda66 16537448 libprotoc32t64-dbgsym_3.21.12-11+deb13u1_armhf.deb 859d3ef33667778cc2cab46a5e8e10b0f62a1ae2 800280 libprotoc32t64_3.21.12-11+deb13u1_armhf.deb 3dd40b8dad7073e46a9c07fe41ede8dfa053ce9e 119624 protobuf-compiler-dbgsym_3.21.12-11+deb13u1_armhf.deb 291171c686889611bd87592b7b732a49bd06cb65 84912 protobuf-compiler_3.21.12-11+deb13u1_armhf.deb ea80f1206cdad636a3720a30d5d6c3c22cd6f1ea 13760 protobuf_3.21.12-11+deb13u1_armhf-buildd.buildinfo 6cc0504574865389b3d8b113d339b9f6b0485a0f 1443508 python3-protobuf-dbgsym_3.21.12-11+deb13u1_armhf.deb 3f50630af1ab93cf004afc2268df128882804744 238992 python3-protobuf_3.21.12-11+deb13u1_armhf.deb 9d881cf4dfb5f07164028992b64a9815958538d1 523628 ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_armhf.deb ffa2430dd2f5c427af4332667840e2458ae56182 153752 ruby-google-protobuf_3.21.12-11+deb13u1_armhf.deb Checksums-Sha256: 5ebf08eeaa0a5f453f36451b7e33b2b233fc1303feafdc6255a1e1beaa5d8767 1283904 libprotobuf-dev_3.21.12-11+deb13u1_armhf.deb bab8279c9d5b762223d15c07507e82f039308f35a36ef30ce3ece4a8627678a2 1803136 libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_armhf.deb d9a69deb01550f83feab5d4b0e5e096964f086b7f723c8761581cd6eb21bc5be 254672 libprotobuf-lite32t64_3.21.12-11+deb13u1_armhf.deb e7a9ae3a95f9173578c22133fa0697eadfa2057e8dcd1ac47a9f8e91e4b39eb7 11685224 libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_armhf.deb a84fde4c5aa651e50e9f2ac1801502f523f7d881704b7b67a175ede8f4659597 870904 libprotobuf32t64_3.21.12-11+deb13u1_armhf.deb 29dd09fb46e9f6e1dd36860b765e20959c641d3bf78e8ee6bb3d4fef8759d5e4 933684 libprotoc-dev_3.21.12-11+deb13u1_armhf.deb 5022a4a341c60d545bcadd107b9c829507d52ccbbb6f28bea34dbdf548123a35 16537448 libprotoc32t64-dbgsym_3.21.12-11+deb13u1_armhf.deb f38a5fef5d742ec5fe92d5cbdedab0d07914564be2d2f2d9058e486fcb9a3c56 800280 libprotoc32t64_3.21.12-11+deb13u1_armhf.deb 6a3abb6fbd5c37bc95194a44932540cbb4e6a656b12a358df849e3d5a19a6167 119624 protobuf-compiler-dbgsym_3.21.12-11+deb13u1_armhf.deb 2550918bdb8cc9bbbf1a8aa78168521631d1ddd36c2db8cadbbeaabf491a057e 84912 protobuf-compiler_3.21.12-11+deb13u1_armhf.deb 2be8d7734eae2e5e4797bf38dcc55b04c83683779363ef00e44358761cb9a140 13760 protobuf_3.21.12-11+deb13u1_armhf-buildd.buildinfo c0ce807a09acbb84cac9215277759694aa97580c205ffd377c0f4bab9b6d87a2 1443508 python3-protobuf-dbgsym_3.21.12-11+deb13u1_armhf.deb 1a17128837b0852750aa6bb60c8eedfd949b96f11c7e4d8e1f82dfabfdbbcfff 238992 python3-protobuf_3.21.12-11+deb13u1_armhf.deb 616c2011a2cc6615909b67bdfd37def3f82e24fd3c860e7a4934f4e6a3ed012a 523628 ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_armhf.deb 3ee543ae7b004ac6bf310630339e55bc553ac65625cd9392f2f5ae96fb081c33 153752 ruby-google-protobuf_3.21.12-11+deb13u1_armhf.deb Files: bafcb7895ef1df14fd54a1ada9444803 1283904 libdevel optional libprotobuf-dev_3.21.12-11+deb13u1_armhf.deb b59c268a53d2b6722b699298fd72b1ec 1803136 debug optional libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_armhf.deb f96584e611c79d63934977e98b5c0ff4 254672 libs optional libprotobuf-lite32t64_3.21.12-11+deb13u1_armhf.deb 4f68306db025ce8d0add5efe305c2b68 11685224 debug optional libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_armhf.deb 009eb1b94b41a136525af666a478dfc9 870904 libs optional libprotobuf32t64_3.21.12-11+deb13u1_armhf.deb d9a1bbb8d78eb1e36ff4f3fa3561b77b 933684 libdevel optional libprotoc-dev_3.21.12-11+deb13u1_armhf.deb 61faeed86980215dee9cdc34e495f6e4 16537448 debug optional libprotoc32t64-dbgsym_3.21.12-11+deb13u1_armhf.deb 8c9106815ea64c989e1f7584908a5cc0 800280 libs optional libprotoc32t64_3.21.12-11+deb13u1_armhf.deb 45f27142320b78980b7c89df044a6ea9 119624 debug optional protobuf-compiler-dbgsym_3.21.12-11+deb13u1_armhf.deb 3c92bf6f98b1f2b1f0ee63c1ce52c869 84912 devel optional protobuf-compiler_3.21.12-11+deb13u1_armhf.deb cc3a377f123e76178d8e24385fffb503 13760 devel optional protobuf_3.21.12-11+deb13u1_armhf-buildd.buildinfo 21a3179f64ac8c34f368d956f78dedc8 1443508 debug optional python3-protobuf-dbgsym_3.21.12-11+deb13u1_armhf.deb 09184c6c4cb45bc06a82cf0b2e54467c 238992 python optional python3-protobuf_3.21.12-11+deb13u1_armhf.deb 5a6ffcc0d7d7b71faef785986f388f6f 523628 debug optional ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_armhf.deb 17ecd357d2d822b0890df8b612f62a00 153752 ruby optional ruby-google-protobuf_3.21.12-11+deb13u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBOUsBrtd5lcy6oRfutMAkCxKbL0FAmpJCJAACgkQutMAkCxK bL26WQ/+M26vYzf4WIYkj/pX9C0IFqiH0bngJtE6LACcKqkkBMnorDtv2DR+2u+T 0S3sgVFNmvmt2iU4PqkKST+F4PyuTVx8CjoGPU4sAKlWYq0+Kplid+ZgNZAGmXQ/ AVLlVx3RE2HlqLZyT8GQTWz9V3KS4whF++1W26D0PaIW9KMybQf7ooyUmMJMl8m6 85HUDBGMIYQmJ6yA9yxFHod2H7C7qggv+DatVM5gEmboghVcA6SFlYdj5htcqzgv TR24ls9XTg83dhFKLWwsxksZUJR5zj8TDBfOwQNJS5ySat7eC93h5H5Mt3PpQD4D jvx4qQNNHr/ubjl/kEeRqX1aXTYth66r8TpXx2DuB7mUoAyiBBKwCr9N2GZ/bGSE WDILD48HxgOSwMIwnvWWuFXGSBukGttbEA/+vfeAcXFUgXQ75ofHzBkhXA89/rBT CBM5NPpR8KRMlEsp7h2YGQ8nxAU32LA/VOyIZtQ8We5OKWE+7tmA3MXHaM7HnXGO nYXl/7lvUdRGAv6cAdVqXT4fgPernXSiAk3npu/saJgzeLL0vOdxztDJ9c1WhLSv fCBcsxmnwlASkXKDTBgxDYFdTPHrvcIu0QyHM1VG8tr4L6jztGAQS2v0CnLYu/rG QNn31KCz/rYqE05CtKegtNTO96IdjQXnxzqal3xjeWmPsE+sgp4= =VVqx -----END PGP SIGNATURE-----