SUSE-SU-2026:0563-1

Details

This update for protobuf fixes the following issues:

CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).

Affected Packages

libprotobuf-lite25_1_0

SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4

Fixed in:

25.1-150400.9.19.1

protobuf

SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Module for Public Cloud 15 SP4

Fixed in:

25.1-150400.9.19.1

python311-protobuf

SUSE Linux Enterprise Module for Public Cloud 15 SP4

Fixed in:

4.25.1-150400.9.19.1

References