-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Jul 2026 22:28:07 +0300 Source: protobuf Binary: libprotobuf-dev libprotobuf-lite32t64 libprotobuf-lite32t64-dbgsym libprotobuf32t64 libprotobuf32t64-dbgsym libprotoc-dev libprotoc32t64 libprotoc32t64-dbgsym protobuf-compiler protobuf-compiler-dbgsym python3-protobuf python3-protobuf-dbgsym ruby-google-protobuf ruby-google-protobuf-dbgsym Architecture: riscv64 Version: 3.21.12-11+deb13u1 Distribution: trixie Urgency: medium Maintainer: riscv64 Build Daemon (rv-manda-02) Changed-By: Adrian Bunk Description: libprotobuf-dev - protocol buffers C++ library (development files) and proto files libprotobuf-lite32t64 - protocol buffers C++ library (lite version) libprotobuf32t64 - protocol buffers C++ library libprotoc-dev - protocol buffers compiler library (development files) libprotoc32t64 - protocol buffers compiler library protobuf-compiler - compiler for protocol buffer definition files python3-protobuf - Python 3 bindings for protocol buffers ruby-google-protobuf - Protocol Buffers Closes: 1082381 1108057 1126302 1134895 Changes: protobuf (3.21.12-11+deb13u1) trixie; urgency=medium . * Non-maintainer upload. * Fix CVE-2026-0994: JSON recursion depth bypass (closes: #1126302). * Fix CVE-2026-6409: PHP Denial of Service (closes: #1134895). . [ Hlib Korzhynskyy ] * Complete fix of CVE-2024-7254 (closes: #1082381): - add recursion checks and recursion limit, - add tests. . [ Laszlo Boszormenyi (GCS) ] * Fix CVE-2025-4565: data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit (closes: #1108057). Checksums-Sha1: 2b98533e53e563df7d518e5335b5c28877669d2a 5301372 libprotobuf-dev_3.21.12-11+deb13u1_riscv64.deb d569433bf2a728cf7c199c6a299907d749c76806 1598100 libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_riscv64.deb a8d6942926e154307d778ee7316a3b5d538c90c1 281004 libprotobuf-lite32t64_3.21.12-11+deb13u1_riscv64.deb cfa436c75ec675e27ddd5162a087fd095d9e89dd 9643572 libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_riscv64.deb d26ef5aba36bab43536f7d50fd431c64cba70577 979148 libprotobuf32t64_3.21.12-11+deb13u1_riscv64.deb 95ab19fd9b0d3cc0a7800d2f88a531011aa06dc5 4645244 libprotoc-dev_3.21.12-11+deb13u1_riscv64.deb 3cc7f9a1fdb4023b2a7d5f4e44ba1723dd548906 11935152 libprotoc32t64-dbgsym_3.21.12-11+deb13u1_riscv64.deb 567658572d32831d5ad1e04a6f716b7920c638a8 876980 libprotoc32t64_3.21.12-11+deb13u1_riscv64.deb 793b120c0880b27d372c79aec80e1248d980a47e 102684 protobuf-compiler-dbgsym_3.21.12-11+deb13u1_riscv64.deb 21b1d97b4779879adc85aa2328b1f826e7948c6e 84724 protobuf-compiler_3.21.12-11+deb13u1_riscv64.deb 7606f2638d36519cde908e4e2e3c5731c713e625 13913 protobuf_3.21.12-11+deb13u1_riscv64-buildd.buildinfo b1f5c789bb2214a7b615aa056d3e559a9a10c08c 1314588 python3-protobuf-dbgsym_3.21.12-11+deb13u1_riscv64.deb 86b296690219a7134c6331579e650a9aa0621209 249172 python3-protobuf_3.21.12-11+deb13u1_riscv64.deb 36a6ea85447af83cae297ab25149564b8255844c 463412 ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_riscv64.deb 47ea50877e9f04a379d4a401fe265bd4810759dc 172860 ruby-google-protobuf_3.21.12-11+deb13u1_riscv64.deb Checksums-Sha256: bbd703ca89a3a5f5dca1d3a707e69d80785ae5809728a2a00255fe5cafcf9767 5301372 libprotobuf-dev_3.21.12-11+deb13u1_riscv64.deb a041be75d3568d463bfa4d64b4be721c42f5f55f6a6d4606bbbd2e5715357c0d 1598100 libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_riscv64.deb 14c1fb131bd29dfc3fa793344f9a0e23445112393bab1b8bad5abe91054c379f 281004 libprotobuf-lite32t64_3.21.12-11+deb13u1_riscv64.deb 62f4d1e351d4b6c317c82af08c169634859e2dd88bf3d03039f14434920c88aa 9643572 libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_riscv64.deb 57523cc3e849a2d6a0fca89de8265aad7ddc6a6e433dbd5403aa8b7f89cf9bb5 979148 libprotobuf32t64_3.21.12-11+deb13u1_riscv64.deb c51a15bed2af12e7697b9edcaa38943bd84726d093fe9fae36b586b8fa03805c 4645244 libprotoc-dev_3.21.12-11+deb13u1_riscv64.deb 6d7d45afc4ca66c49332e5147a272a70990e0092cdbd0b9399ff5adc8000eb88 11935152 libprotoc32t64-dbgsym_3.21.12-11+deb13u1_riscv64.deb d3677d1bb2ca399568b60ea41741ee66ada22922eb36815e9120aafd171aaa6f 876980 libprotoc32t64_3.21.12-11+deb13u1_riscv64.deb 8dca8649d368ff47a981e0b6a98c3e7a62a535822a1e6d5fb6762d47dacd9538 102684 protobuf-compiler-dbgsym_3.21.12-11+deb13u1_riscv64.deb 2bea9deb72d0c255c5a59a806a4c4a6f745027eb1d09c905d7039084cd4bcd2f 84724 protobuf-compiler_3.21.12-11+deb13u1_riscv64.deb 096c02a724f27afcf353bfc1eb5cadf557a8eedfd970cf5f88107bc8dd71bc4f 13913 protobuf_3.21.12-11+deb13u1_riscv64-buildd.buildinfo 9d90a1747c2eb7ab1d7ea31432246f888ef2ba4e98e14d04f3a6e69caf74e813 1314588 python3-protobuf-dbgsym_3.21.12-11+deb13u1_riscv64.deb 4d25ae4261117e250c8f1879ec815f78d440395da7aa68edf0930a935a71631e 249172 python3-protobuf_3.21.12-11+deb13u1_riscv64.deb 5a756303c8be136aee8dc341a977b9725e1e21b19657bd3a89e2d7244fb26e18 463412 ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_riscv64.deb 09e0696428a2955b3eb5f339983697042b82ccc91a9756acf31fd358249ff680 172860 ruby-google-protobuf_3.21.12-11+deb13u1_riscv64.deb Files: 826e6fb4144813304e917701782e5ce1 5301372 libdevel optional libprotobuf-dev_3.21.12-11+deb13u1_riscv64.deb 25d6b462bdd25a3a7793e879c475f0b5 1598100 debug optional libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_riscv64.deb 9d5095a3f002ed16c31c8dc911b9a658 281004 libs optional libprotobuf-lite32t64_3.21.12-11+deb13u1_riscv64.deb e44c7a73a8596c147454fd4c737c40a3 9643572 debug optional libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_riscv64.deb 53f4370dadb1f36e632ac05b9f22e2a7 979148 libs optional libprotobuf32t64_3.21.12-11+deb13u1_riscv64.deb f1aa9e6a46ea85f2e11742ef7ee35cab 4645244 libdevel optional libprotoc-dev_3.21.12-11+deb13u1_riscv64.deb 6e4b6d1c646f8ad78660c2be418b7aec 11935152 debug optional libprotoc32t64-dbgsym_3.21.12-11+deb13u1_riscv64.deb dae97c3003ddd42f9d3f41df5e6699a8 876980 libs optional libprotoc32t64_3.21.12-11+deb13u1_riscv64.deb a0286b0635bdebf83c53fd1cb3bb9dfc 102684 debug optional protobuf-compiler-dbgsym_3.21.12-11+deb13u1_riscv64.deb 5ca07dcfb6257ac809c1f284400781a4 84724 devel optional protobuf-compiler_3.21.12-11+deb13u1_riscv64.deb 3c05d928112f3ae1d9ed3b6c01d28c79 13913 devel optional protobuf_3.21.12-11+deb13u1_riscv64-buildd.buildinfo fa6fc02edd3688a6d96dd25864bcfc20 1314588 debug optional python3-protobuf-dbgsym_3.21.12-11+deb13u1_riscv64.deb da474d553bd5ae22e1520a3184811968 249172 python optional python3-protobuf_3.21.12-11+deb13u1_riscv64.deb 6a540a19c84348762f477ace1fd8d052 463412 debug optional ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_riscv64.deb 32e5f27f1c134286a1c6c3c363008dc6 172860 ruby optional ruby-google-protobuf_3.21.12-11+deb13u1_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEER+evXFzNzDWbUDPF7SlJcp2g6OIFAmpJQ0UACgkQ7SlJcp2g 6OLVIhAAi3cp5JsL79mPgilQVYisXlov7R1LaKYdMjuuDUzFF6CkQJigEumtn4CH aJnQQdTwGLx7oLOPJJmcgfXNB4VYeujznQRcjzGRR8H4ExOaN1VX681wBwVc6ZN4 ixfvXmIIAG6xIduNGIhAmTse7J46QnlQ0TG5TSnx56zDsQvdidQTqzFWXxtUCBWQ B1a83SjdDeamnVwpvusv91wyvi5FJJdchvrYW86rDIWGLWUXu7Qivn32hRCo9Tt9 mTjo1tWGVZZ0Y+uONr67oyVIKC2cvMB/o/tPEoICKkdOYFLIF1TastLIauafI1qW i6uA75JvAXHfXQevS07SXTcz+i07kOkw9Y7LKQxAuSTlXt6JfXJF3D/mFoyFx534 f8bwpl3Izu58ZTOVWTiTojrEhoAPQzxPC5Ii2tGuZFBSJiQiPaf7nWGLgucgh6A8 GcJn1vyt23vm4/Py70CfffEE82GRBcUim95FTXSvzDLwQVbayBOp+bKagyWZ8Ws6 VAtfS/Um9WxOWPc/6ngoGUcojhLz1AjWZaEH9VYYtvrwySmnrGsz3Op4Rf3PgipZ ge6yFuHAPpX3g2BhZoKhjkBOdBVtrDJcmXmaz43SgZyawoVSOFreACryE/IgtIme gG0Nh9MdEa/bAUtgpboJ4/7SvEi7O/SIbVgydgJC1P/pdxl/DyA= =GDYS -----END PGP SIGNATURE-----