Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02310-1

Опубликовано: 15 июл. 2025
Источник: suse-cvrf

Описание

Security update for protobuf

This update for protobuf fixes the following issues:

  • CVE-2025-4565: Fix parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages that can lead to crash due to RecursionError (bsc#1244663).

Список пакетов

SUSE Linux Enterprise Micro 5.5
libprotobuf-lite25_1_0-25.1-150500.12.11.1
SUSE Linux Enterprise Module for Public Cloud 15 SP5
libprotoc25_1_0-25.1-150500.12.11.1

Ссылки

Описание

Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashing the application with a RecursionError. We recommend upgrading to version =>6.31.1 or beyond commit 17838beda2943d08b8a9d4df5b68f5f04f26d901

Затронутые продукты
SUSE Linux Enterprise Micro 5.5:libprotobuf-lite25_1_0-25.1-150500.12.11.1
SUSE Linux Enterprise Module for Public Cloud 15 SP5:libprotoc25_1_0-25.1-150500.12.11.1
Ссылки