shield Security update for protobuf

SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-1653

This update for protobuf fixes the following issues: Refresh fixes: - CVE-2025-4565: parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages can lead to crash due to RecursionError (bsc#1244663). - CVE-2026-0994: `max_recursion_depth` limit can be bypassed when parsing nested `google.protobuf.Any` messages and lead to the exhaustion of the Python recursion stack (bsc#1257173).

• Release Date
  Apr 29 2026
• References
  Bugzilla: 1244663, 1257173, 1260019
  CVEs: CVE-2025-4565, CVE-2026-0994
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Package Hub 15.7 s390x

• Packages
  protobuf
  Protocol Buffers - Google's data interchange format

  3.9.2-150200.4.33.1 lock src

  python3-protobuf
  Python3 Bindings for Google Protocol Buffers

  3.9.2-150200.4.33.1 lock rpm

SUSE Package Hub 15.7 aarch64

• Packages
  protobuf
  Protocol Buffers - Google's data interchange format

  3.9.2-150200.4.33.1 lock src

  python3-protobuf
  Python3 Bindings for Google Protocol Buffers

  3.9.2-150200.4.33.1 lock rpm

SUSE Package Hub 15.7 ppc64le

• Packages
  protobuf
  Protocol Buffers - Google's data interchange format

  3.9.2-150200.4.33.1 lock src

  python3-protobuf
  Python3 Bindings for Google Protocol Buffers

  3.9.2-150200.4.33.1 lock rpm

SUSE Package Hub 15.7 x86_64

• Packages
  protobuf
  Protocol Buffers - Google's data interchange format

  3.9.2-150200.4.33.1 lock src

  python3-protobuf
  Python3 Bindings for Google Protocol Buffers

  3.9.2-150200.4.33.1 lock rpm