Bug#1034510: bullseye-pu: package protobuf/3.12.4-1+deb11u1

2023-07-25 Thread Jonathan Wiltshire
Control: tag -1 confirmed On Mon, Apr 17, 2023 at 03:12:37PM +0200, Helmut Grohne wrote: > This update aims to fix three vulnerabilities in the protobuf package: > > * Fix CVE-2021-22569 (DoS in Java) > * Fix CVE-2021-22570 (NULL pointer dereference) > * Fix CVE-2022-1941 (memory DoS) Please

Bug#1034510: bullseye-pu: package protobuf/3.12.4-1+deb11u1

2023-04-17 Thread Helmut Grohne
Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: proto...@packages.debian.org, g...@debian.org, debian-secur...@lists.debian.org Control: affects -1 + src:protobuf [ Reason ] This update aims to fix three vulnerab