-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Jul 2026 22:28:07 +0300 Source: protobuf Binary: libprotobuf-dev libprotobuf-lite32t64 libprotobuf-lite32t64-dbgsym libprotobuf32t64 libprotobuf32t64-dbgsym libprotoc-dev libprotoc32t64 libprotoc32t64-dbgsym protobuf-compiler protobuf-compiler-dbgsym python3-protobuf python3-protobuf-dbgsym ruby-google-protobuf ruby-google-protobuf-dbgsym Architecture: s390x Version: 3.21.12-11+deb13u1 Distribution: trixie Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Adrian Bunk Description: libprotobuf-dev - protocol buffers C++ library (development files) and proto files libprotobuf-lite32t64 - protocol buffers C++ library (lite version) libprotobuf32t64 - protocol buffers C++ library libprotoc-dev - protocol buffers compiler library (development files) libprotoc32t64 - protocol buffers compiler library protobuf-compiler - compiler for protocol buffer definition files python3-protobuf - Python 3 bindings for protocol buffers ruby-google-protobuf - Protocol Buffers Closes: 1082381 1108057 1126302 1134895 Changes: protobuf (3.21.12-11+deb13u1) trixie; urgency=medium . * Non-maintainer upload. * Fix CVE-2026-0994: JSON recursion depth bypass (closes: #1126302). * Fix CVE-2026-6409: PHP Denial of Service (closes: #1134895). . [ Hlib Korzhynskyy ] * Complete fix of CVE-2024-7254 (closes: #1082381): - add recursion checks and recursion limit, - add tests. . [ Laszlo Boszormenyi (GCS) ] * Fix CVE-2025-4565: data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit (closes: #1108057). Checksums-Sha1: 8eb459729e8e6a7d9152215dee53a320a3cef825 1270008 libprotobuf-dev_3.21.12-11+deb13u1_s390x.deb f836aab4013e322302706b66987a958b587d68f0 1880632 libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_s390x.deb bc19e92e3f36afa51bf5ffdf166ff7b7d2fe7c4a 265108 libprotobuf-lite32t64_3.21.12-11+deb13u1_s390x.deb 0f90c51159743a4da140155559fd02dae3e29663 11822436 libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_s390x.deb a8a5dcaafe500c94a518e44a216262c85cc9d30a 944388 libprotobuf32t64_3.21.12-11+deb13u1_s390x.deb 444364eef8581a57c817267bf1a8583baf5fa877 971372 libprotoc-dev_3.21.12-11+deb13u1_s390x.deb 609c1968e95aecf806ca089fc9dca2274f2db5ba 16660572 libprotoc32t64-dbgsym_3.21.12-11+deb13u1_s390x.deb a1616dd6870dcf946249180d5f8397e89365d4f0 878656 libprotoc32t64_3.21.12-11+deb13u1_s390x.deb 4d188973d9fd08cee292e0dd79dfc917d2806796 118780 protobuf-compiler-dbgsym_3.21.12-11+deb13u1_s390x.deb fa9409d25ac1357f5083237129e03756a1243740 84964 protobuf-compiler_3.21.12-11+deb13u1_s390x.deb 26215b3edc1d2732d6e6000fcbe83cd63409cfbc 13756 protobuf_3.21.12-11+deb13u1_s390x-buildd.buildinfo a6815651a7b5e4f5d00857cfe0e52d191f299414 1450880 python3-protobuf-dbgsym_3.21.12-11+deb13u1_s390x.deb 19bb7c0d1421be55112095f580bc6ad4187b4f42 246852 python3-protobuf_3.21.12-11+deb13u1_s390x.deb b155cc5853d408be49f5156bbc79e0d63214d504 543284 ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_s390x.deb 91df1397f8b43e998868829a1171932ddd2c800e 174096 ruby-google-protobuf_3.21.12-11+deb13u1_s390x.deb Checksums-Sha256: 951cc52a4f641f110f95fe59fd3675fafca66ea49b7306014e2270da1404287f 1270008 libprotobuf-dev_3.21.12-11+deb13u1_s390x.deb 25c442890cfa3b21f6e0e1dc1c3c201ce4c488dd0030cea9a2ce51864a14fcc8 1880632 libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_s390x.deb 1a7cd0abf78c56d070a2fac615ffb0a4d1670a8347765e40c087af5e13232bac 265108 libprotobuf-lite32t64_3.21.12-11+deb13u1_s390x.deb ccd766d635ebe77bbb19d76fda4c304437b2a3a4e4b9c6fd6db1dc519bd8adc6 11822436 libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_s390x.deb ed112879204e0d7294e6e1701787f21882c54f312d5bed827d4791dbfd87f066 944388 libprotobuf32t64_3.21.12-11+deb13u1_s390x.deb 9565bf5fbfb6078604c46a19fb58d21bb8c8b75f96657fb8051b15eac4364cb9 971372 libprotoc-dev_3.21.12-11+deb13u1_s390x.deb 8664c2ea8ebc8119dcc6dad1c41143b4e2b788a396048a1e598f829bcfa74e9f 16660572 libprotoc32t64-dbgsym_3.21.12-11+deb13u1_s390x.deb a627ced12654d236b9208b802e645c2804cf18d10f3f665cf1ac6ca7e14cec6e 878656 libprotoc32t64_3.21.12-11+deb13u1_s390x.deb a952bc1431153b4e64d95337523dd0b88f9bd9db87f58bbd90005f377630f2b4 118780 protobuf-compiler-dbgsym_3.21.12-11+deb13u1_s390x.deb 5e31bd2d072a053498c70c01c7c328a1ad999ebf06c7602770384ccff580576a 84964 protobuf-compiler_3.21.12-11+deb13u1_s390x.deb 0a63a347bd7cd9808ed6210ffb2ac1e12b026b421d90c7bc14ff7f53ce302928 13756 protobuf_3.21.12-11+deb13u1_s390x-buildd.buildinfo 557ae25741d126ae99ff086680401fe889c2c6d079285d7a58615529c258bb8b 1450880 python3-protobuf-dbgsym_3.21.12-11+deb13u1_s390x.deb 0a201b308fe579f77964a9f1c05073b348fe219e4372cd7bd9e22adbb2212778 246852 python3-protobuf_3.21.12-11+deb13u1_s390x.deb 88beab681f44bb3a0b8578e4665c0486491d30bd65212364e391ef474c99a86c 543284 ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_s390x.deb 6e1474742f1ce29fd13bbbc4eb2364fde460d5a83f82b6e204eeb1ebcb34bf3f 174096 ruby-google-protobuf_3.21.12-11+deb13u1_s390x.deb Files: 05b7fe8102200ffc70c45cd2ffa2557b 1270008 libdevel optional libprotobuf-dev_3.21.12-11+deb13u1_s390x.deb b8dfdb3d5db8366ed0e463bf595acfd7 1880632 debug optional libprotobuf-lite32t64-dbgsym_3.21.12-11+deb13u1_s390x.deb bb038fe23729a9462439a1365f0941a5 265108 libs optional libprotobuf-lite32t64_3.21.12-11+deb13u1_s390x.deb 273b6309808202eddeda5bd6c95ce194 11822436 debug optional libprotobuf32t64-dbgsym_3.21.12-11+deb13u1_s390x.deb dd2645c54bbf1e1947687d30e6281c69 944388 libs optional libprotobuf32t64_3.21.12-11+deb13u1_s390x.deb 285cfca87c06672f89114827daea0471 971372 libdevel optional libprotoc-dev_3.21.12-11+deb13u1_s390x.deb e2c75ec024f854115bb4c959081fb4e5 16660572 debug optional libprotoc32t64-dbgsym_3.21.12-11+deb13u1_s390x.deb 983ed39f8a45af46dca90ebdbd8bf236 878656 libs optional libprotoc32t64_3.21.12-11+deb13u1_s390x.deb 81c38643ec1a7ebc812f5ec5c347fac1 118780 debug optional protobuf-compiler-dbgsym_3.21.12-11+deb13u1_s390x.deb 7f40f5fc4b0a529fb3cbc98ab982d23b 84964 devel optional protobuf-compiler_3.21.12-11+deb13u1_s390x.deb 19100ddf73da72428cdd531ac9e9564b 13756 devel optional protobuf_3.21.12-11+deb13u1_s390x-buildd.buildinfo baba92f4e45b3b9efb4cb64ca6dfcd6d 1450880 debug optional python3-protobuf-dbgsym_3.21.12-11+deb13u1_s390x.deb 6ff876dcf012a69d45d8a7f93cefd11b 246852 python optional python3-protobuf_3.21.12-11+deb13u1_s390x.deb 75f82a7930d034687aeb59deba4f0cfd 543284 debug optional ruby-google-protobuf-dbgsym_3.21.12-11+deb13u1_s390x.deb 92a8a8643426f0dcf54c26441ac9ddf3 174096 ruby optional ruby-google-protobuf_3.21.12-11+deb13u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmpJCvsACgkQkaCrxAR3 BY1UdBAAgUc7Rts8aggpggOsep8f/OJTF75Uv4Ix5/yP8XhffiSe7TjeApNvOU2L U2tpS4QDN9Yw8P6/VKzYNCWigzznccvLtdQ6yUZhBibruo6PnFViqeCA30Pd1a4N QjGqsFTj+FXmxngVf7J7KNP5eKcBa82hz/auUwXe4Bpu+58FHNhud6AEVjVWd3M3 +XSKwC6VZCrQupTAilqypDS2zwoSOo7QVL2QbogbQvbkBesnZ5PXm5TI2O2FxBsi MD8MetN5L/5UpKahjMU8SXFiBKoOVLby/kx9kwxKKRdAoOBFcrKnAwdH+adRJy8l UR3QMCa95397jKBwf8VJy7v3MZCrncWzDyPx2+t6WLKaOS+IhnyRw6XNOUDpYljL j0HOx3NO31NnNpZU1p/zvtfPq3jd49EPrYk2vAMvvO8rysaGK3aM+KPDVHKPPylD Z6hqcsZsFxwQiBMy9kUQ+25WnSaMyBw4v9s4uUCNTJTeWdd4G3TqDkwV0fyVH9r9 C6C7MqATGztnSv9vO4cl4OkiOgbH/Iz/WTz1IKrRlXLRnRSBp04mkept7RjS2fAx kWCRvT+ZlAVm2HWvxx67Q9ie44w5hxBulk2r5YqF0x14Vff1kwvZ0AhYVf2LbcFU PUViy4mzFHjobvUFvYMl/E/UKurfX2kG85LPRkLktkhXwxHenYw= =GPFQ -----END PGP SIGNATURE-----