Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 598
Alerts This Week
Warning Icon 1 598

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 68 articles for you...
100

SUSE 2026 Protobuf Moderate Security Updates SUSE-SU-2026-1653-1

An update that solves two vulnerabilities and has one security fix can now be installed.. # Security update for protobuf Announcement ID: SUSE-SU-2026:1653-1 Release Date: 2026-04-29T00:46:40Z Rating: moderate References: * bsc#1244663 * bsc#1257173 * bsc#1260019 Cross-References: * CVE-2025-4565 * CVE-2026-0994 CVSS scores: * CVE-2025-4565 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-4565 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-4565 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-4565 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-0994 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-0994 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0994 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0994 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSELinux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP7 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for protobuf fixes the following issues: Refresh fixes: * CVE-2025-4565: parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages can lead to crash due to RecursionError (bsc#1244663). * CVE-2026-0994: `max_recursion_depth` limit can be bypassed when parsing nested `google.protobuf.Any` messages and lead to the exhaustion of the Python recursion stack (bsc#1257173). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-1653=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-1653=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-1653=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-1653=1 * SUSE Linux Enterprise Micro5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-1653=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-1653=1 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-1653=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-1653=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-1653=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2026-1653=1 * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-1653=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-1653=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-1653=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-1653=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-1653=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-1653=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-1653=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1653=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-1653=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-1653=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1653=1 * SUSE Linux Enterprise Micro 5.2 zypper in -tpatch SUSE-SUSE-MicroOS-5.2-2026-1653=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2026-1653=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.33.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.33.1 * protobuf-debugsource-3.9.2-150200.4.33.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.33.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.33.1 * protobuf-debugsource-3.9.2-150200.4.33.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.33.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.33.1 * protobuf-debugsource-3.9.2-150200.4.33.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.33.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.33.1 * protobuf-debugsource-3.9.2-150200.4.33.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.33.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.33.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libprotobuf20-debuginfo-3.9.2-150200.4.33.1 * libprotobuf20-3.9.2-150200.4.33.1 * protobuf-debugsource-3.9.2-150200.4.33.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.33.1 * protobuf-debugsource-3.9.2-150200.4.33.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.33.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.33.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.33.1 * protobuf-debugsource-3.9.2-150200.4.33.1 * Public Cloud Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.33.1 * protobuf-debugsource-3.9.2-150200.4.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libprotobuf-lite20-3.9.2-150200.4.33.1 * libprotobuf20-debuginfo-3.9.2-150200.4.33.1 * libprotobuf20-3.9.2-150200.4.33.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.33.1 * libprotoc20-debuginfo-3.9.2-150200.4.33.1 * libprotoc20-3.9.2-150200.4.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libprotobuf-lite20-3.9.2-150200.4.33.1 * libprotobuf20-debuginfo-3.9.2-150200.4.33.1 * libprotobuf20-3.9.2-150200.4.33.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.33.1 * libprotoc20-debuginfo-3.9.2-150200.4.33.1 * libprotoc20-3.9.2-150200.4.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libprotobuf-lite20-3.9.2-150200.4.33.1 * libprotobuf20-debuginfo-3.9.2-150200.4.33.1 * libprotobuf20-3.9.2-150200.4.33.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.33.1 * libprotoc20-debuginfo-3.9.2-150200.4.33.1 * libprotoc20-3.9.2-150200.4.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libprotobuf-lite20-3.9.2-150200.4.33.1 * libprotobuf20-debuginfo-3.9.2-150200.4.33.1 * libprotobuf20-3.9.2-150200.4.33.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.33.1 * libprotoc20-debuginfo-3.9.2-150200.4.33.1 * libprotoc20-3.9.2-150200.4.33.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.33.1 * libprotobuf20-debuginfo-3.9.2-150200.4.33.1 * libprotobuf20-3.9.2-150200.4.33.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.33.1 * libprotoc20-debuginfo-3.9.2-150200.4.33.1 * libprotoc20-3.9.2-150200.4.33.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.33.1 * libprotobuf20-debuginfo-3.9.2-150200.4.33.1 * libprotobuf20-3.9.2-150200.4.33.1 *libprotobuf-lite20-debuginfo-3.9.2-150200.4.33.1 * libprotoc20-debuginfo-3.9.2-150200.4.33.1 * libprotoc20-3.9.2-150200.4.33.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libprotobuf20-debuginfo-3.9.2-150200.4.33.1 * libprotobuf20-3.9.2-150200.4.33.1 * protobuf-debugsource-3.9.2-150200.4.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libprotobuf-lite20-3.9.2-150200.4.33.1 * libprotobuf20-debuginfo-3.9.2-150200.4.33.1 * libprotobuf20-3.9.2-150200.4.33.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.33.1 * libprotoc20-debuginfo-3.9.2-150200.4.33.1 * libprotoc20-3.9.2-150200.4.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libprotobuf-lite20-3.9.2-150200.4.33.1 * libprotobuf20-debuginfo-3.9.2-150200.4.33.1 * libprotobuf20-3.9.2-150200.4.33.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.33.1 * libprotoc20-debuginfo-3.9.2-150200.4.33.1 * libprotoc20-3.9.2-150200.4.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libprotobuf20-debuginfo-3.9.2-150200.4.33.1 * libprotobuf20-3.9.2-150200.4.33.1 * protobuf-debugsource-3.9.2-150200.4.33.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.33.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.33.1 * protobuf-debugsource-3.9.2-150200.4.33.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.33.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.33.1 * protobuf-debugsource-3.9.2-150200.4.33.1 ## References: * https://www.suse.com/security/cve/CVE-2025-4565.html * https://www.suse.com/security/cve/CVE-2026-0994.html * https://bugzilla.suse.com/show_bug.cgi?id=1244663 * https://bugzilla.suse.com/show_bug.cgi?id=1257173 * https://bugzilla.suse.com/show_bug.cgi?id=1260019 . Update addresses moderate security issues in protobufaffecting multiple SUSE Linux products. Immediate patch recommended.. protobuf patch 2026 SUSE Linux. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 29, 2026 Important SuSE
100

SUSE Linux 16.0 Protobuf Moderate Fixes for Recursive Depth Issues

An update that solves two vulnerabilities and has one fix can now be installed.. # Security update for protobuf Announcement ID: SUSE-SU-2026:20907-1 Release Date: 2026-03-18T18:15:53Z Rating: moderate References: * bsc#1244663 * bsc#1244918 * bsc#1257173 Cross-References: * CVE-2025-4565 * CVE-2026-0994 CVSS scores: * CVE-2025-4565 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-4565 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-4565 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-4565 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-0994 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-0994 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0994 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server - BCI 16.0 An update that solves two vulnerabilities and has one fix can now be installed. ## Description: This update for protobuf fixes the following issues: Security fixes: * CVE-2025-4565: Fixed parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages that could lead to crash due to RecursionError (bsc#1244663). * CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173). Other fixes: * Fixed import issues of reverse-dependency packages within the google namespace (bsc#1244918). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternativelyyou can run the command listed for your product: * SUSE Linux Enterprise Server - BCI 16.0 zypper in -t patch SUSE-SLES-16.0-408=1 ## Package List: * SUSE Linux Enterprise Server - BCI 16.0 (aarch64 ppc64le s390x x86_64) * protobuf-devel-28.3-160000.3.1 * libutf8_range-28_3_0-28.3-160000.3.1 * protobuf-devel-debuginfo-28.3-160000.3.1 * libprotobuf28_3_0-28.3-160000.3.1 * libprotobuf-lite28_3_0-debuginfo-28.3-160000.3.1 * libprotobuf28_3_0-debuginfo-28.3-160000.3.1 * libprotoc28_3_0-28.3-160000.3.1 * libutf8_range-28_3_0-debuginfo-28.3-160000.3.1 * python313-protobuf-debuginfo-5.28.3-160000.3.1 * libprotobuf-lite28_3_0-28.3-160000.3.1 * python313-protobuf-5.28.3-160000.3.1 * protobuf-debugsource-28.3-160000.3.1 * python-protobuf-debugsource-5.28.3-160000.3.1 * libprotoc28_3_0-debuginfo-28.3-160000.3.1 * SUSE Linux Enterprise Server - BCI 16.0 (noarch) * protobuf-java-28.3-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-4565.html * https://www.suse.com/security/cve/CVE-2026-0994.html * https://bugzilla.suse.com/show_bug.cgi?id=1244663 * https://bugzilla.suse.com/show_bug.cgi?id=1244918 * https://bugzilla.suse.com/show_bug.cgi?id=1257173 . Update for SUSE Linux addresses security concerns in protobuf, fixing critical issues with recursive parsing and depth bypass.. SUSE Linux Protobuf Update 2026 Security Fixes Moderate. . LinuxSecurity.com Team

Calendar%202 Apr 01, 2026 SuSE
202

openSUSE Leap 16.0 Protobuf Update Addresses CVE-2025-4565 CVE-2026-0994

An update that solves 2 vulnerabilities and has 3 bug fixes can now be installed.. openSUSE security update: security update for protobuf ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20390-1 Rating: moderate References: * bsc#1244663 * bsc#1244918 * bsc#1257173 Cross-References: * CVE-2025-4565 * CVE-2026-0994 CVSS scores: * CVE-2025-4565 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-4565 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-0994 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0994 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 2 vulnerabilities and has 3 bug fixes can now be installed. Description: This update for protobuf fixes the following issues: Security fixes: - CVE-2025-4565: Fixed parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages that could lead to crash due to RecursionError (bsc#1244663). - CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173). Other fixes: - Fixed import issues of reverse-dependency packages within the google namespace (bsc#1244918). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-408=1 Package List: - openSUSE Leap 16.0: libprotobuf-lite28_3_0-28.3-160000.3.1 libprotobuf28_3_0-28.3-160000.3.1 libprotoc28_3_0-28.3-160000.3.1 libutf8_range-28_3_0-28.3-160000.3.1 protobuf-devel-28.3-160000.3.1 protobuf-java-28.3-160000.3.1 protobuf-java-bom-28.3-160000.3.1 protobuf-java-javadoc-28.3-160000.3.1 protobuf-java-parent-28.3-160000.3.1 python313-protobuf-5.28.3-160000.3.1 References: * https://www.suse.com/security/cve/CVE-2025-4565.html * https://www.suse.com/security/cve/CVE-2026-0994.html . Update for openSUSE Leap 16.0 fixes moderate vulnerabilities in protobuf with additional bug fixes.. opensuse security update, protobuf vulnerabilities, bug fixes, protobuf update. . LinuxSecurity.com Team

Calendar%202 Mar 25, 2026 OpenSUSE
100

SUSE Linux Core 8.1 Protobuf Vulnerability Advisory SUSE-SU-2026-31522-7

An update that solves two vulnerabilities and has one fix can now be installed.. # Security update for protobuf Announcement ID: SUSE-SU-2026:20753-1 Release Date: 2026-03-18T17:09:44Z Rating: moderate References: * bsc#1244663 * bsc#1244918 * bsc#1257173 Cross-References: * CVE-2025-4565 * CVE-2026-0994 CVSS scores: * CVE-2025-4565 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-4565 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-4565 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-4565 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-0994 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-0994 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0994 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.2 An update that solves two vulnerabilities and has one fix can now be installed. ## Description: This update for protobuf fixes the following issues: Security fixes: * CVE-2025-4565: Fixed parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages that could lead to crash due to RecursionError (bsc#1244663). * CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173). Other fixes: * Fixed import issues of reverse-dependency packages within the google namespace (bsc#1244918). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run thecommand listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-408=1 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libutf8_range-28_3_0-28.3-160000.3.1 * protobuf-debugsource-28.3-160000.3.1 * libutf8_range-28_3_0-debuginfo-28.3-160000.3.1 * libprotobuf28_3_0-28.3-160000.3.1 * libprotobuf28_3_0-debuginfo-28.3-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-4565.html * https://www.suse.com/security/cve/CVE-2026-0994.html * https://bugzilla.suse.com/show_bug.cgi?id=1244663 * https://bugzilla.suse.com/show_bug.cgi?id=1244918 * https://bugzilla.suse.com/show_bug.cgi?id=1257173 . Important update for SUSE addressing two vulnerabilities in protobuf with moderate severity. Install urgently to secure your systems.. SUSE Security Update, Protobuf Vulnerabilities, Security Advisory, SUSE Linux Micro, Moderate Severity Update. . LinuxSecurity.com Team

Calendar%202 Mar 24, 2026 SuSE
100

SUSE Micro 6.1 Protobuf Moderate Issue Resolved CVE-2026-0994

An update that solves one vulnerability can now be installed.. # Security update for protobuf Announcement ID: SUSE-SU-2026:20490-1 Release Date: 2026-02-17T09:41:31Z Rating: moderate References: * bsc#1257173 Cross-References: * CVE-2026-0994 CVSS scores: * CVE-2026-0994 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-0994 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0994 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for protobuf fixes the following issues: * CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-402=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * libprotobuf23_4_0-23.4-slfo.1.1_3.1 * libprotobuf23_4_0-debuginfo-23.4-slfo.1.1_3.1 * protobuf-debugsource-23.4-slfo.1.1_3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-0994.html * https://bugzilla.suse.com/show_bug.cgi?id=1257173 . Update for SUSE Micro resolves a moderate severity issue affecting protobuf; patch necessary.. SUSE Micro, protobuf, security patch, CVE-2026-0994, update management. . LinuxSecurity.com Team

Calendar%202 Feb 27, 2026 SuSE
100

SUSE Protobuf Moderate Depth Bypass Vuln 2026-0618-1 CVE-2026-0994

An update that solves one vulnerability can now be installed.. # Security update for protobuf Announcement ID: SUSE-SU-2026:0618-1 Release Date: 2026-02-24T15:36:14Z Rating: moderate References: * bsc#1257173 Cross-References: * CVE-2026-0994 CVSS scores: * CVE-2026-0994 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-0994 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0994 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Basesystem Module 15-SP7 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for protobuf fixes the following issues:i * CVE-2026-0994: Fixedgoogle.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-618=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-618=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-618=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-618=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-618=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-618=1 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-618=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-618=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-618=1 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2026-618=1 * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-618=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2026-618=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2026-618=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.30.1 * protobuf-debugsource-3.9.2-150200.4.30.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.30.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.30.1 * protobuf-debugsource-3.9.2-150200.4.30.1 *libprotobuf-lite20-debuginfo-3.9.2-150200.4.30.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.30.1 * protobuf-debugsource-3.9.2-150200.4.30.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.30.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.30.1 * protobuf-debugsource-3.9.2-150200.4.30.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.30.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.30.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.30.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.30.1 * libprotobuf20-3.9.2-150200.4.30.1 * libprotobuf20-debuginfo-3.9.2-150200.4.30.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.30.1 * python3-protobuf-3.9.2-150200.4.30.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.30.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-protobuf-3.9.2-150200.4.30.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.30.1 * python3-protobuf-3.9.2-150200.4.30.1 * Public Cloud Module 15-SP7 (aarch64 ppc64le s390x x86_64) * protobuf-debugsource-3.9.2-150200.4.30.1 * python3-protobuf-3.9.2-150200.4.30.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.30.1 * protobuf-debugsource-3.9.2-150200.4.30.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.30.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * libprotobuf-lite20-3.9.2-150200.4.30.1 * protobuf-debugsource-3.9.2-150200.4.30.1 * libprotobuf-lite20-debuginfo-3.9.2-150200.4.30.1 ## References: * https://www.suse.com/security/cve/CVE-2026-0994.html *https://bugzilla.suse.com/show_bug.cgi?id=1257173 . Update resolves moderate vulnerability in Protobuf affecting multiple SUSE versions. Patch instructions included.. Protobuf update, SUSE security advisory, Python depth bypass. . LinuxSecurity.com Team

Calendar%202 Feb 24, 2026 SuSE
219

Ubuntu 20.04 Protobuf Key Security Update RLSA-2026-3100 CVE-2026-1001

Important: protobuf security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:3094", "synopsis": "Important: protobuf security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for protobuf.\nThis update affects Rocky Linux 10.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.\n\nSecurity Fix(es):\n\n* python: protobuf: Protobuf: Denial of Service due to recursion depth bypass (CVE-2026-0994)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 10"], "fixes": [{"ticket": "2432398", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2432398", "description": ""}], "cves": [{"name": "CVE-2026-0994", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2026-0994", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-674"}], "references": [], "publishedAt": "2026-02-24T18:56:34.668877Z", "rpms": {"Rocky Linux 10": {"nvras": ["protobuf-devel-0:3.19.6-15.el10_1.x86_64.rpm", "protobuf-lite-debuginfo-0:3.19.6-15.el10_1.ppc64le.rpm", "protobuf-compiler-debuginfo-0:3.19.6-15.el10_1.s390x.rpm", "protobuf-devel-0:3.19.6-15.el10_1.ppc64le.rpm", "protobuf-compiler-0:3.19.6-15.el10_1.ppc64le.rpm", "protobuf-0:3.19.6-15.el10_1.aarch64.rpm", "python3-protobuf-0:3.19.6-15.el10_1.ppc64le.rpm", "python3-protobuf-0:3.19.6-15.el10_1.x86_64.rpm", "protobuf-0:3.19.6-15.el10_1.x86_64.rpm", "protobuf-0:3.19.6-15.el10_1.src.rpm","protobuf-debuginfo-0:3.19.6-15.el10_1.x86_64.rpm", "python3-protobuf-debuginfo-0:3.19.6-15.el10_1.x86_64.rpm", "protobuf-devel-0:3.19.6-15.el10_1.s390x.rpm", "protobuf-lite-debuginfo-0:3.19.6-15.el10_1.x86_64.rpm", "protobuf-lite-0:3.19.6-15.el10_1.x86_64.rpm", "python3-protobuf-debuginfo-0:3.19.6-15.el10_1.ppc64le.rpm", "protobuf-devel-0:3.19.6-15.el10_1.aarch64.rpm", "protobuf-compiler-debuginfo-0:3.19.6-15.el10_1.ppc64le.rpm", "protobuf-lite-0:3.19.6-15.el10_1.s390x.rpm", "protobuf-lite-debuginfo-0:3.19.6-15.el10_1.s390x.rpm", "protobuf-compiler-0:3.19.6-15.el10_1.x86_64.rpm", "protobuf-debuginfo-0:3.19.6-15.el10_1.s390x.rpm", "protobuf-debuginfo-0:3.19.6-15.el10_1.aarch64.rpm", "protobuf-lite-devel-0:3.19.6-15.el10_1.x86_64.rpm", "protobuf-0:3.19.6-15.el10_1.s390x.rpm", "protobuf-lite-devel-0:3.19.6-15.el10_1.ppc64le.rpm", "protobuf-compiler-debuginfo-0:3.19.6-15.el10_1.x86_64.rpm", "protobuf-debugsource-0:3.19.6-15.el10_1.aarch64.rpm", "protobuf-debugsource-0:3.19.6-15.el10_1.x86_64.rpm", "protobuf-debugsource-0:3.19.6-15.el10_1.s390x.rpm", "protobuf-compiler-debuginfo-0:3.19.6-15.el10_1.aarch64.rpm", "protobuf-compiler-0:3.19.6-15.el10_1.s390x.rpm", "python3-protobuf-debuginfo-0:3.19.6-15.el10_1.aarch64.rpm", "python3-protobuf-0:3.19.6-15.el10_1.s390x.rpm", "python3-protobuf-0:3.19.6-15.el10_1.aarch64.rpm", "protobuf-debugsource-0:3.19.6-15.el10_1.ppc64le.rpm", "protobuf-lite-devel-0:3.19.6-15.el10_1.aarch64.rpm", "protobuf-lite-0:3.19.6-15.el10_1.ppc64le.rpm", "protobuf-0:3.19.6-15.el10_1.ppc64le.rpm", "protobuf-debuginfo-0:3.19.6-15.el10_1.ppc64le.rpm", "protobuf-compiler-0:3.19.6-15.el10_1.aarch64.rpm", "protobuf-lite-devel-0:3.19.6-15.el10_1.s390x.rpm", "python3-protobuf-debuginfo-0:3.19.6-15.el10_1.s390x.rpm", "protobuf-lite-debuginfo-0:3.19.6-15.el10_1.aarch64.rpm", "protobuf-lite-0:3.19.6-15.el10_1.aarch64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Learn about the important protobuf security update affecting Rocky Linux 10, addressing critical threats and solutions.. Rocky Linuxprotobuf update important CVE-2026-0994 security. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 24, 2026 Important Rocky Linux
219

Rocky Linux 9 RLSA-2026-3104 Significant Protobuf Vulnerability Discovered

Important: protobuf security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2026:3095", "synopsis": "Important: protobuf security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for protobuf.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.\n\nSecurity Fix(es):\n\n* python: protobuf: Protobuf: Denial of Service due to recursion depth bypass (CVE-2026-0994)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2432398", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2432398", "description": ""}], "cves": [{"name": "CVE-2026-0994", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2026-0994", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-674"}], "references": [], "publishedAt": "2026-02-24T18:54:11.875441Z", "rpms": {"Rocky Linux 9": {"nvras": ["protobuf-0:3.14.0-17.el9_7.aarch64.rpm", "protobuf-0:3.14.0-17.el9_7.i686.rpm", "protobuf-0:3.14.0-17.el9_7.ppc64le.rpm", "protobuf-0:3.14.0-17.el9_7.s390x.rpm", "protobuf-0:3.14.0-17.el9_7.src.rpm", "protobuf-0:3.14.0-17.el9_7.x86_64.rpm", "protobuf-compiler-0:3.14.0-17.el9_7.aarch64.rpm", "protobuf-compiler-0:3.14.0-17.el9_7.i686.rpm", "protobuf-compiler-0:3.14.0-17.el9_7.ppc64le.rpm", "protobuf-compiler-0:3.14.0-17.el9_7.s390x.rpm", "protobuf-compiler-0:3.14.0-17.el9_7.x86_64.rpm","protobuf-compiler-debuginfo-0:3.14.0-17.el9_7.aarch64.rpm", "protobuf-compiler-debuginfo-0:3.14.0-17.el9_7.i686.rpm", "protobuf-compiler-debuginfo-0:3.14.0-17.el9_7.ppc64le.rpm", "protobuf-compiler-debuginfo-0:3.14.0-17.el9_7.s390x.rpm", "protobuf-compiler-debuginfo-0:3.14.0-17.el9_7.x86_64.rpm", "protobuf-debuginfo-0:3.14.0-17.el9_7.aarch64.rpm", "protobuf-debuginfo-0:3.14.0-17.el9_7.i686.rpm", "protobuf-debuginfo-0:3.14.0-17.el9_7.ppc64le.rpm", "protobuf-debuginfo-0:3.14.0-17.el9_7.s390x.rpm", "protobuf-debuginfo-0:3.14.0-17.el9_7.x86_64.rpm", "protobuf-debugsource-0:3.14.0-17.el9_7.aarch64.rpm", "protobuf-debugsource-0:3.14.0-17.el9_7.i686.rpm", "protobuf-debugsource-0:3.14.0-17.el9_7.ppc64le.rpm", "protobuf-debugsource-0:3.14.0-17.el9_7.s390x.rpm", "protobuf-debugsource-0:3.14.0-17.el9_7.x86_64.rpm", "protobuf-devel-0:3.14.0-17.el9_7.aarch64.rpm", "protobuf-devel-0:3.14.0-17.el9_7.i686.rpm", "protobuf-devel-0:3.14.0-17.el9_7.ppc64le.rpm", "protobuf-devel-0:3.14.0-17.el9_7.s390x.rpm", "protobuf-devel-0:3.14.0-17.el9_7.x86_64.rpm", "protobuf-lite-0:3.14.0-17.el9_7.aarch64.rpm", "protobuf-lite-0:3.14.0-17.el9_7.i686.rpm", "protobuf-lite-0:3.14.0-17.el9_7.ppc64le.rpm", "protobuf-lite-0:3.14.0-17.el9_7.s390x.rpm", "protobuf-lite-0:3.14.0-17.el9_7.x86_64.rpm", "protobuf-lite-debuginfo-0:3.14.0-17.el9_7.aarch64.rpm", "protobuf-lite-debuginfo-0:3.14.0-17.el9_7.i686.rpm", "protobuf-lite-debuginfo-0:3.14.0-17.el9_7.ppc64le.rpm", "protobuf-lite-debuginfo-0:3.14.0-17.el9_7.s390x.rpm", "protobuf-lite-debuginfo-0:3.14.0-17.el9_7.x86_64.rpm", "protobuf-lite-devel-0:3.14.0-17.el9_7.aarch64.rpm", "protobuf-lite-devel-0:3.14.0-17.el9_7.i686.rpm", "protobuf-lite-devel-0:3.14.0-17.el9_7.ppc64le.rpm", "protobuf-lite-devel-0:3.14.0-17.el9_7.s390x.rpm", "protobuf-lite-devel-0:3.14.0-17.el9_7.x86_64.rpm", "python3-protobuf-0:3.14.0-17.el9_7.noarch.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Important security update for protobuf in Rocky Linux addresses denial of service threat. Urgent action recommended.. protobufsecurity, Rocky Linux update, denial of service, important security patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 24, 2026 Important Rocky Linux
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200