Skip to content
OpenAdvisories
Unscored USN-8063-2 0 CVEs

protobuf vulnerability

Published May 26, 2026 · Updated Jun 30, 2026

Summary

USN-8063-1 fixed a vulnerability in Protocol Buffers. This update provides
the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.

Original advisory details:

It was discovered that Protocol Buffers incorrectly handled recursion
when the Python google.protobuf.json_format.ParseDict() function is being
used. An attacker could possibly use this issue to cause Protocol Buffers
to consume resources, resulting in a denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS protobuf 3.0.0-9.1ubuntu1.1+esm4
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS protobuf 3.6.1.3-2ubuntu5.2+esm3

References

  • report
    https://ubuntu.com/security/CVE-2026-0994