Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:0517-1

Опубликовано: 14 фев. 2026
Источник: suse-cvrf

Описание

Security update for protobuf

This update for protobuf fixes the following issues:

  • CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).

Список пакетов

Image SLES15-SP5-Azure-3P
python311-protobuf-4.25.1-150500.12.14.1
Image SLES15-SP5-Azure-Basic
python311-protobuf-4.25.1-150500.12.14.1
Image SLES15-SP5-Azure-Standard
python311-protobuf-4.25.1-150500.12.14.1
Image SLES15-SP5-BYOS-Azure
python311-protobuf-4.25.1-150500.12.14.1
Image SLES15-SP5-HPC-Azure
python311-protobuf-4.25.1-150500.12.14.1
Image SLES15-SP5-HPC-BYOS-Azure
python311-protobuf-4.25.1-150500.12.14.1
Image SLES15-SP5-Hardened-BYOS-Azure
python311-protobuf-4.25.1-150500.12.14.1
Image SLES15-SP5-SAP-Azure-3P
python311-protobuf-4.25.1-150500.12.14.1
Image SLES15-SP5-SAP-BYOS-Azure
python311-protobuf-4.25.1-150500.12.14.1
Image SLES15-SP5-SAP-Hardened-Azure
python311-protobuf-4.25.1-150500.12.14.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
python311-protobuf-4.25.1-150500.12.14.1
Image SLES15-SP5-SAPCAL-Azure
python311-protobuf-4.25.1-150500.12.14.1
SUSE Linux Enterprise Micro 5.5
libprotobuf-lite25_1_0-25.1-150500.12.14.1
SUSE Linux Enterprise Module for Public Cloud 15 SP5
libprotoc25_1_0-25.1-150500.12.14.1

Ссылки

Описание

A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python's recursion stack and causing a RecursionError.

Затронутые продукты
Image SLES15-SP5-Azure-3P:python311-protobuf-4.25.1-150500.12.14.1
Image SLES15-SP5-Azure-Basic:python311-protobuf-4.25.1-150500.12.14.1
Image SLES15-SP5-Azure-Standard:python311-protobuf-4.25.1-150500.12.14.1
Image SLES15-SP5-BYOS-Azure:python311-protobuf-4.25.1-150500.12.14.1
Ссылки