Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02311-1

Опубликовано: 15 июл. 2025
Источник: suse-cvrf

Описание

Security update for protobuf

This update for protobuf fixes the following issues:

  • CVE-2025-4565: Fix parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages that can lead to crash due to RecursionError (bsc#1244663).

Список пакетов

Container containers/milvus:2.4
libprotobuf25_1_0-25.1-150600.16.13.1
Container containers/open-webui:0
libprotobuf25_1_0-25.1-150600.16.13.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
libprotobuf-lite25_1_0-25.1-150600.16.13.1
libprotobuf25_1_0-25.1-150600.16.13.1
libprotoc25_1_0-25.1-150600.16.13.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
libprotobuf-lite25_1_0-25.1-150600.16.13.1
libprotobuf25_1_0-25.1-150600.16.13.1
libprotoc25_1_0-25.1-150600.16.13.1
SUSE Linux Enterprise Module for Development Tools 15 SP6
protobuf-devel-25.1-150600.16.13.1
SUSE Linux Enterprise Module for Development Tools 15 SP7
protobuf-devel-25.1-150600.16.13.1
SUSE Linux Enterprise Module for Python 3 15 SP6
python311-protobuf-4.25.1-150600.16.13.1
SUSE Linux Enterprise Module for Python 3 15 SP7
python311-protobuf-4.25.1-150600.16.13.1
openSUSE Leap 15.6
libprotobuf-lite25_1_0-25.1-150600.16.13.1
libprotobuf-lite25_1_0-32bit-25.1-150600.16.13.1
libprotobuf25_1_0-25.1-150600.16.13.1
libprotobuf25_1_0-32bit-25.1-150600.16.13.1
libprotoc25_1_0-25.1-150600.16.13.1
libprotoc25_1_0-32bit-25.1-150600.16.13.1
protobuf-devel-25.1-150600.16.13.1
protobuf-java-25.1-150600.16.13.1
protobuf-java-bom-25.1-150600.16.13.1
protobuf-java-parent-25.1-150600.16.13.1
python311-protobuf-4.25.1-150600.16.13.1

Ссылки

Описание

Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashing the application with a RecursionError. We recommend upgrading to version =>6.31.1 or beyond commit 17838beda2943d08b8a9d4df5b68f5f04f26d901

Затронутые продукты
Container containers/milvus:2.4:libprotobuf25_1_0-25.1-150600.16.13.1
Container containers/open-webui:0:libprotobuf25_1_0-25.1-150600.16.13.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:libprotobuf-lite25_1_0-25.1-150600.16.13.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:libprotobuf25_1_0-25.1-150600.16.13.1
Ссылки