Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02309-1

Опубликовано: 15 июл. 2025
Источник: suse-cvrf

Описание

Security update for protobuf

This update for protobuf fixes the following issues:

  • CVE-2025-4565: Fix parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages that can lead to crash due to RecursionError (bsc#1244663).

Список пакетов

SUSE Linux Enterprise Micro 5.3
libprotobuf-lite25_1_0-25.1-150400.9.16.1
SUSE Linux Enterprise Micro 5.4
libprotobuf-lite25_1_0-25.1-150400.9.16.1
SUSE Linux Enterprise Module for Public Cloud 15 SP4
python311-protobuf-4.25.1-150400.9.16.1
SUSE Manager Server Module 4.3
protobuf-java-25.1-150400.9.16.1

Ссылки

Описание

Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashing the application with a RecursionError. We recommend upgrading to version =>6.31.1 or beyond commit 17838beda2943d08b8a9d4df5b68f5f04f26d901

Затронутые продукты
SUSE Linux Enterprise Micro 5.3:libprotobuf-lite25_1_0-25.1-150400.9.16.1
SUSE Linux Enterprise Micro 5.4:libprotobuf-lite25_1_0-25.1-150400.9.16.1
SUSE Linux Enterprise Module for Public Cloud 15 SP4:python311-protobuf-4.25.1-150400.9.16.1
SUSE Manager Server Module 4.3:protobuf-java-25.1-150400.9.16.1
Ссылки