USN-7435-1: Protocol Buffers vulnerability

USN-7435-1: Protocol Buffers vulnerability
14 April 2025

Protocol Buffers could be made to crash if it received specially crafted input.

Releases

• Ubuntu 24.10
• Ubuntu 24.04 LTS
• Ubuntu 22.04 LTS

Packages
protobuf - protocol buffers data serialization library

Details
It was discovered that Protocol Buffers incorrectly handled memory when
receiving malicious input using the Java bindings. An attacker could
possibly use this issue to cause a denial of service.

Update instructions
The problem can be corrected by updating your system to the following

package versions:
Ubuntu 24.10

• libprotobuf-java - 3.21.12-9ubuntu1.1
  Ubuntu 24.04
• libprotobuf-java - 3.21.12-8.2ubuntu0.1
  Ubuntu 22.04
• libprotobuf-java - 3.12.4-1ubuntu7.22.04.2

In general, a standard system update will make all the necessary changes.