[ubuntu/resolute-proposed] protobuf 3.21.12-15ubuntu1 (Accepted)

[Marc Deslauriers]

protobuf (3.21.12-15ubuntu1) resolute; urgency=medium

  * SECURITY UPDATE: max_recursion_depth limit can be bypassed in
    google.protobuf.json_format.ParseDict()
    - debian/patches/CVE-2026-0994.patch: fix Any recursion depth bypass in
      Python in python/google/protobuf/internal/json_format_test.py,
      python/google/protobuf/json_format.py.
    - CVE-2026-0994

Date: Wed, 25 Feb 2026 11:15:41 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/protobuf/3.21.12-15ubuntu1
-------------- next part --------------
Format: 1.8
Date: Wed, 25 Feb 2026 11:15:41 -0500
Source: protobuf
Built-For-Profiles: noudeb
Architecture: source
Version: 3.21.12-15ubuntu1
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 protobuf (3.21.12-15ubuntu1) resolute; urgency=medium
 .
   * SECURITY UPDATE: max_recursion_depth limit can be bypassed in
     google.protobuf.json_format.ParseDict()
     - debian/patches/CVE-2026-0994.patch: fix Any recursion depth bypass in
       Python in python/google/protobuf/internal/json_format_test.py,
       python/google/protobuf/json_format.py.
     - CVE-2026-0994
Checksums-Sha1:
 b4c2c5c02107417b03d8459f17eb9b8c8aaa5ba2 3180 protobuf_3.21.12-15ubuntu1.dsc
 deaa299265d5afc86d4d43759eed0d8f40985c7c 48312 protobuf_3.21.12-15ubuntu1.debian.tar.xz
 846d000233cdc087567aeaaf438ae6e7aef5c6f6 8886 protobuf_3.21.12-15ubuntu1_source.buildinfo
Checksums-Sha256:
 619b4139400723ebdb7736f9d715d556a4e01809a81c7dfda10851b3ebaedb7e 3180 protobuf_3.21.12-15ubuntu1.dsc
 90b71e0772dbc5ee490bdeb268037997f4cf6523d8e2a4a93ccdc63822b8bdc1 48312 protobuf_3.21.12-15ubuntu1.debian.tar.xz
 0366e30f74c66ba899ad42ab706f7e50479e5e329450d1644d928046bce9c55a 8886 protobuf_3.21.12-15ubuntu1_source.buildinfo
Files:
 28ec73ee46775d222d9afe06e420821f 3180 devel optional protobuf_3.21.12-15ubuntu1.dsc
 e2ea52cf6bff0b01014f19a8276b4d3c 48312 devel optional protobuf_3.21.12-15ubuntu1.debian.tar.xz
 485a5c4298171d66130c79afbeb2eab2 8886 devel optional protobuf_3.21.12-15ubuntu1_source.buildinfo
Original-Maintainer: Laszlo Boszormenyi (GCS) <gcs at debian.org>