-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Jul 2026 22:28:07 +0300 Source: protobuf Binary: elpa-protobuf-mode libprotobuf-java php-google-protobuf Architecture: all Version: 3.21.12-11+deb13u1 Distribution: trixie Urgency: medium Maintainer: all Build Daemon (x86-csail-02) Changed-By: Adrian Bunk Description: elpa-protobuf-mode - Emacs addon for editing protocol buffers libprotobuf-java - Java bindings for protocol buffers php-google-protobuf - PHP bindings for protocol buffers Closes: 1082381 1108057 1126302 1134895 Changes: protobuf (3.21.12-11+deb13u1) trixie; urgency=medium . * Non-maintainer upload. * Fix CVE-2026-0994: JSON recursion depth bypass (closes: #1126302). * Fix CVE-2026-6409: PHP Denial of Service (closes: #1134895). . [ Hlib Korzhynskyy ] * Complete fix of CVE-2024-7254 (closes: #1082381): - add recursion checks and recursion limit, - add tests. . [ Laszlo Boszormenyi (GCS) ] * Fix CVE-2025-4565: data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit (closes: #1108057). Checksums-Sha1: 053e01bb0107091ade4b0b495526adb97f532a9f 64424 elpa-protobuf-mode_3.21.12-11+deb13u1_all.deb 96553542218dbe4a0cf3481ebba54fc2ededfe7e 1267924 libprotobuf-java_3.21.12-11+deb13u1_all.deb 57b75a0f8f6a8198f93c93287d20451f17ef0978 124604 php-google-protobuf_3.21.12-11+deb13u1_all.deb 925c37daad1716edea6b99c8a6057395464a15c5 16717 protobuf_3.21.12-11+deb13u1_all-buildd.buildinfo Checksums-Sha256: dc07802443abcded3c803ffc2a4d2d2662b47b9c59e43c086438e0b268233cb4 64424 elpa-protobuf-mode_3.21.12-11+deb13u1_all.deb eaac0bc543135e05a71ee929d70daae54354819ac21d973de8bcededf2711bee 1267924 libprotobuf-java_3.21.12-11+deb13u1_all.deb 819a96ac666d4a7a414c277b8e852a122d5721f40f429b78134f75c7b6936d99 124604 php-google-protobuf_3.21.12-11+deb13u1_all.deb 05db499cf4782cf5d329834093f2874d75785237578cf72f1ea99bf58656e396 16717 protobuf_3.21.12-11+deb13u1_all-buildd.buildinfo Files: 22bc21c2ee2b834dd3d9d90267369afb 64424 editors optional elpa-protobuf-mode_3.21.12-11+deb13u1_all.deb 98fb590e76071a04fce3503191e05d5b 1267924 java optional libprotobuf-java_3.21.12-11+deb13u1_all.deb 2328ce25d622286fff6a1ac28bfbb274 124604 php optional php-google-protobuf_3.21.12-11+deb13u1_all.deb e0853af72acfdef488debef2d487e77f 16717 devel optional protobuf_3.21.12-11+deb13u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXLxUpUHQBQBTDtd4aBVi67oXtfkFAmpJBukACgkQaBVi67oX tfmQyBAAkQANptHTQV61/PKAEnI1ASkRUWOV2u1Ig5swuF0QM8LjJLdeo+tA7Kf4 iql6ubHX99e3rI0zZt/5q+Kw1g5oazxshcE/99zoBxiT8J4iECxmrVknQ4FS46O/ Eobw/QvE/PHFpaDfoAw2MKtWmWaw3AIccz1DLTEZq8mryom8IjT8WxJzmz5SqjRu shSD5Vq+lZYr6/ucDPEymtHYtJCs0qtUDo6t6xf92AKTZZQOa0EJMzQ3Bn5Jgxwo BPcWnq00NXwOYRkw4WuseR81Nd/GL6CMqW5oGNLwQTbm0f+YRDtTJIC/0zSIdJy6 UpQOP1N7iBr8+mANDLzyU/R4doncgYjrr4ezRr86KSKgI682TzanYjZjh29htznP O31tIsqXCB/Z0XjDMd/+IqiyRazF0MJLztVrM0YBWgyh+Rxe/qJHXfonH6XOoFhM hxiCbHGd7m4jOGToLYptRHyr3Sfh33F8YeKBg5igPpNaEqJo86K13SePUT0uvDGF 7Lxl4SH+oY4jM6HmYvoY6+P6naJLYPQ0tmq5Qfvypopy7cqdMA5RTIask9d+wYTr /o67234qeS1NfjesZ7svdTlabvsG5FtzooWWlCynAXvWG9KECw04abvZ1C02hM1W NFWzmpw348M8jkls1MWXnxGBu5jdEF2KfK7jXS0NK6KPsyH4jpI= =WHkD -----END PGP SIGNATURE-----