SUSE-SU-2025:3722-1

Details

Description of the patch:

This update for protobuf fixes the following issues:

CVE-2025-4565: parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages can lead to crash due to a RecursionError (bsc#1244663).

Affected Packages

python3-protobuf

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP5SUSE Linux Enterprise Module for Package Hub 15 SP6

Fixed in:

3.9.2-150200.4.27.1

libprotobuf20

SUSE Linux Enterprise Desktop 15 SP6SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP6SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Basesystem 15 SP6

Fixed in:

3.9.2-150200.4.27.1

libprotobuf-lite20

SUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Micro 5.5

Fixed in:

3.9.2-150200.4.27.1

References

ADVISORY

https://bugzilla.suse.com/1244663

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2025-October/022970.html

ADVISORY

https://www.suse.com/security/cve/CVE-2025-4565/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2025/suse-su-20253722-1/