USN-7629-1: Protocol Buffers vulnerabilities

USN-7629-1: Protocol Buffers vulnerabilities
Publication date: 9 July 2025
Overview: Protocol Buffers could be made to crash if it received specially crafted input.

Packages

• protobuf - protocol buffers data serialization library

Details
It was discovered that Protocol Buffers incorrectly handled memory when
receiving malicious input using the Python bindings. An attacker could
possibly use this issue to cause a denial of service. (CVE-2025-4565)

It was discovered that Protocol Buffers incorrectly handled memory when
receiving malicious input using the Java bindings. An attacker could
possibly use this issue to cause a denial of service. This issue only
affected Ubuntu 25.04. (CVE-2024-7254)

Update instructions
24.04 noble

• libprotobuf-java – 3.21.12-8.2ubuntu0.2
• python3-protobuf – 3.21.12-8.2ubuntu0.2