RLSA-2026:3094

Synopsis

Important: protobuf security update

Description

The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.

Security Fix(es):

* python: protobuf: Protobuf: Denial of Service due to recursion depth bypass (CVE-2026-0994)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 10 aarch64 Rocky Linux 10 ppc64le Rocky Linux 10 s390x Rocky Linux 10 x86_64

Fixes

2432398

CVEs

CVE-2026-0994

Affected packages

Rocky Linux 10 x86_64 - CRB

protobuf-devel-0:3.19.6-15.el10_1.x86_64.rpm protobuf-compiler-0:3.19.6-15.el10_1.x86_64.rpm protobuf-lite-devel-0:3.19.6-15.el10_1.x86_64.rpm protobuf-compiler-debuginfo-0:3.19.6-15.el10_1.x86_64.rpm

Rocky Linux 10 ppc64le - AppStream

protobuf-lite-debuginfo-0:3.19.6-15.el10_1.ppc64le.rpm python3-protobuf-0:3.19.6-15.el10_1.ppc64le.rpm protobuf-0:3.19.6-15.el10_1.src.rpm python3-protobuf-debuginfo-0:3.19.6-15.el10_1.ppc64le.rpm protobuf-debugsource-0:3.19.6-15.el10_1.ppc64le.rpm protobuf-lite-0:3.19.6-15.el10_1.ppc64le.rpm protobuf-0:3.19.6-15.el10_1.ppc64le.rpm protobuf-debuginfo-0:3.19.6-15.el10_1.ppc64le.rpm

Rocky Linux 10 s390x - CRB

protobuf-compiler-debuginfo-0:3.19.6-15.el10_1.s390x.rpm protobuf-devel-0:3.19.6-15.el10_1.s390x.rpm protobuf-compiler-0:3.19.6-15.el10_1.s390x.rpm protobuf-lite-devel-0:3.19.6-15.el10_1.s390x.rpm

Rocky Linux 10 ppc64le - CRB

protobuf-devel-0:3.19.6-15.el10_1.ppc64le.rpm protobuf-compiler-0:3.19.6-15.el10_1.ppc64le.rpm protobuf-compiler-debuginfo-0:3.19.6-15.el10_1.ppc64le.rpm protobuf-lite-devel-0:3.19.6-15.el10_1.ppc64le.rpm

Rocky Linux 10 aarch64 - AppStream

protobuf-0:3.19.6-15.el10_1.aarch64.rpm protobuf-0:3.19.6-15.el10_1.src.rpm protobuf-debuginfo-0:3.19.6-15.el10_1.aarch64.rpm protobuf-debugsource-0:3.19.6-15.el10_1.aarch64.rpm python3-protobuf-debuginfo-0:3.19.6-15.el10_1.aarch64.rpm python3-protobuf-0:3.19.6-15.el10_1.aarch64.rpm protobuf-lite-debuginfo-0:3.19.6-15.el10_1.aarch64.rpm protobuf-lite-0:3.19.6-15.el10_1.aarch64.rpm

Rocky Linux 10 x86_64 - AppStream

python3-protobuf-0:3.19.6-15.el10_1.x86_64.rpm protobuf-0:3.19.6-15.el10_1.x86_64.rpm protobuf-0:3.19.6-15.el10_1.src.rpm protobuf-debuginfo-0:3.19.6-15.el10_1.x86_64.rpm python3-protobuf-debuginfo-0:3.19.6-15.el10_1.x86_64.rpm protobuf-lite-debuginfo-0:3.19.6-15.el10_1.x86_64.rpm protobuf-lite-0:3.19.6-15.el10_1.x86_64.rpm protobuf-debugsource-0:3.19.6-15.el10_1.x86_64.rpm

Rocky Linux 10 s390x - AppStream

protobuf-0:3.19.6-15.el10_1.src.rpm protobuf-lite-0:3.19.6-15.el10_1.s390x.rpm protobuf-lite-debuginfo-0:3.19.6-15.el10_1.s390x.rpm protobuf-debuginfo-0:3.19.6-15.el10_1.s390x.rpm protobuf-0:3.19.6-15.el10_1.s390x.rpm protobuf-debugsource-0:3.19.6-15.el10_1.s390x.rpm python3-protobuf-0:3.19.6-15.el10_1.s390x.rpm python3-protobuf-debuginfo-0:3.19.6-15.el10_1.s390x.rpm

Rocky Linux 10 aarch64 - CRB

protobuf-devel-0:3.19.6-15.el10_1.aarch64.rpm protobuf-compiler-debuginfo-0:3.19.6-15.el10_1.aarch64.rpm protobuf-lite-devel-0:3.19.6-15.el10_1.aarch64.rpm protobuf-compiler-0:3.19.6-15.el10_1.aarch64.rpm