protobuf-3.14.0-17.el9_7
エラータID: AXSA:2026-235:01
リリース日:
2026/02/27 Friday - 16:55
題名:
protobuf-3.14.0-17.el9_7
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- protobuf の google.protobuf.json_format.ParseDict() 関数には、
max_recursion_depth で設定した再帰処理の深さの制限を迂回し、
無限に再帰処理が実行されてしまう問題があるため、リモートの攻撃者
により、深くネストするように細工された Any 型構造体のデータの処理
を介して、サービス拒否攻撃を可能とする脆弱性が存在します。
(CVE-2026-0994)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2026-0994
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.
追加情報:
N/A
ダウンロード:
SRPMS
- protobuf-3.14.0-17.el9_7.src.rpm
MD5: 4bfb698c022212cb931101ddb160f131
SHA-256: c305bf99ea6112b6d7d3bda7549d7e3a76fa35529e5311eb89fe72afc817b3f3
Size: 6.19 MB
Asianux Server 9 for x86_64
- protobuf-3.14.0-17.el9_7.i686.rpm
MD5: 271e4aaa4010a1482f0ab4791d0c0f7c
SHA-256: ac8803d2e48d56e676328c4b520e5e72a12eb7c0c124d35bb0390cbb535b4361
Size: 1.10 MB - protobuf-3.14.0-17.el9_7.x86_64.rpm
MD5: 9fd4cb37814f65829d72ecd2f147a30b
SHA-256: aba0516600a85c8b8fc727259dca62508908d19ae75c2badb6b4981533df011e
Size: 1.00 MB - protobuf-compiler-3.14.0-17.el9_7.i686.rpm
MD5: 4f6df2c96d1c78e2e83cb75c38fe92e0
SHA-256: 157e06904d4b2823a119cec1649fd9b3344e7e123231722c49ff5a5a60f434a1
Size: 974.79 kB - protobuf-compiler-3.14.0-17.el9_7.x86_64.rpm
MD5: bd313e2d3b8d4c132fa710e72234e497
SHA-256: 201fab66d8c0e7968ec1dad51150c9988fd08c71902a5519e184f232e32df9b8
Size: 861.97 kB - protobuf-devel-3.14.0-17.el9_7.i686.rpm
MD5: cde0b58c9c5b192165aa130394d17c34
SHA-256: 1cc84930611f59d25549ca2df00cbb2aa3b5721fc7eab8bce321bd1cf1fb4864
Size: 365.36 kB - protobuf-devel-3.14.0-17.el9_7.x86_64.rpm
MD5: 48d1b2dcad20461ad85a5c01c6c11281
SHA-256: 88dae5d085690bad087ef2db6eaaba6679fc3198d370f9723db1743c81f1e653
Size: 365.37 kB - protobuf-lite-3.14.0-17.el9_7.i686.rpm
MD5: 53dcd7e7349a060c9fa7c336d51bebf5
SHA-256: 2804490f2b02eae4e27d851b490ee85e2c593248f99f4f16040fb3382c122354
Size: 259.26 kB - protobuf-lite-3.14.0-17.el9_7.x86_64.rpm
MD5: 0294ee89beef048ffacfca9a73e491c6
SHA-256: c97a1cb6bb2b9f127776700506551cb01a67dfd79bab87055d80e75e53d71cda
Size: 231.71 kB - protobuf-lite-devel-3.14.0-17.el9_7.i686.rpm
MD5: ccf7d37fa554f31dd329315f3935ca8d
SHA-256: 898bc464f89f24284c34d052b9c46d8d5666d43007f4c59fda32f0d3df369863
Size: 7.93 kB - protobuf-lite-devel-3.14.0-17.el9_7.x86_64.rpm
MD5: 0b3d7381ab106f09d2a983eacd123a00
SHA-256: 56e23d335374d0abc53279d27016f755c16fa279f4ef1dcd18d9babfdf89a5de
Size: 7.92 kB - python3-protobuf-3.14.0-17.el9_7.noarch.rpm
MD5: 1c13fe97acca295dcc381a5e734255b6
SHA-256: 492e5bc7e1e2783005f6d259500706d30ed61b3f1b7d8d1a806eca95a5aa3076
Size: 269.45 kB
English