SUSE-SU-2026:0618-1

Details

Description of the patch:

This update for protobuf fixes the following issues:i

CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).

Affected Packages

libprotobuf20

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP7

Fixed in:

3.9.2-150200.4.30.1

python3-protobuf

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP5SUSE Linux Enterprise High Performance Computing 15 SP6SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Linux Enterprise Module for Public Cloud 15 SP4

Fixed in:

3.9.2-150200.4.30.1

libprotobuf-lite20

SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Micro 5.5

Fixed in:

3.9.2-150200.4.30.1

References

ADVISORY

https://bugzilla.suse.com/1257173

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2026-February/024376.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-0994/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20260618-1/