Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

Vulnerability IntelligenceSUSE-SU-2026:0374-1

SUSE-SU-2026:0374-1

UNKNOWN

Security update for protobuf

Published Feb 4, 2026

Modified 4 weeks ago

Fix available

Details

This update for protobuf fixes the following issues:

CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).

Affected Packages(12 packages)

libprotobuf-lite25_1_0

SUSE Linux Enterprise Module for Basesystem 15 SP7openSUSE Leap 15.6

Fixed in:

25.1-150600.16.16.1

libprotobuf25_1_0

SUSE Linux Enterprise Module for Basesystem 15 SP7openSUSE Leap 15.6

Fixed in:

25.1-150600.16.16.1

libprotoc25_1_0

SUSE Linux Enterprise Module for Basesystem 15 SP7openSUSE Leap 15.6

Fixed in:

25.1-150600.16.16.1

protobuf

SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Module for Development Tools 15 SP7SUSE Linux Enterprise Module for Python 3 15 SP7openSUSE Leap 15.6

Fixed in:

25.1-150600.16.16.1

protobuf-devel

SUSE Linux Enterprise Module for Development Tools 15 SP7openSUSE Leap 15.6

Fixed in:

25.1-150600.16.16.1

python311-protobuf

SUSE Linux Enterprise Module for Python 3 15 SP7openSUSE Leap 15.6

Fixed in:

4.25.1-150600.16.16.1

libprotobuf-lite25_1_0-32bit

openSUSE Leap 15.6

Fixed in:

25.1-150600.16.16.1

libprotobuf25_1_0-32bit

openSUSE Leap 15.6

Fixed in:

25.1-150600.16.16.1

libprotoc25_1_0-32bit

openSUSE Leap 15.6

Fixed in:

25.1-150600.16.16.1

protobuf-java

openSUSE Leap 15.6

Fixed in:

25.1-150600.16.16.1

References

REPORT

https://bugzilla.suse.com/1257173

WEB

https://www.suse.com/security/cve/CVE-2026-0994

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20260374-1/

Upstream

CVE-2026-0994

Ecosystems

SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Python 3 15 SP7 openSUSE Leap 15.6

Timeline

PublishedFeb 4, 2026

ModifiedFeb 4, 2026

SUSE-SU-2026:0374-1 | Mondoo Vulnerability Intelligence