Summary
USN-8063-1 fixed a vulnerability in Protocol Buffers. This update provides
the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that Protocol Buffers incorrectly handled recursion
when the Python google.protobuf.json_format.ParseDict() function is being
used. An attacker could possibly use this issue to cause Protocol Buffers
to consume resources, resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | protobuf | 3.0.0-9.1ubuntu1.1+esm4 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | protobuf | 3.6.1.3-2ubuntu5.2+esm3 |
References
-
report
https://ubuntu.com/security/CVE-2026-0994