< back to search

gpp_maybe Security update for protobuf

SUSE-SLE-Micro-6.1-250

This update for protobuf fixes the following issues: - CVE-2024-2410: Use after free when parsing JSON from a stream (bsc#1223947). - CVE-2024-7254: StackOverflow vulnerability in Protocol Buffers (bsc#1230778). - CVE-2025-4565: Parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages can lead to crash due to RecursionError (bsc#1244663).

Release Date

Sep 5 2025
References

Bugzilla: 1223947, 1230778, 1244663
CVEs: CVE-2024-2410, CVE-2024-7254, CVE-2025-4565
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.1 s390x

Packages

libprotobuf23_4_0
Protocol Buffers - Google's data interchange format

23.4-slfo.1.1_2.1 lock rpm

SUSE Linux Micro 6.1 ppc64le

Packages

libprotobuf23_4_0
Protocol Buffers - Google's data interchange format

23.4-slfo.1.1_2.1 lock rpm

SUSE Linux Micro 6.1 x86_64

Packages

libprotobuf23_4_0
Protocol Buffers - Google's data interchange format

23.4-slfo.1.1_2.1 lock rpm

SUSE Linux Micro 6.1 aarch64

Packages

libprotobuf23_4_0
Protocol Buffers - Google's data interchange format

23.4-slfo.1.1_2.1 lock rpm