File _patchinfo of Package patchinfo.42448
<patchinfo incident="42448"> <issue tracker="cve" id="2026-0994"/> <issue tracker="bnc" id="1257173">VUL-0: CVE-2026-0994: protobuf: `max_recursion_depth` limit can be bypassed when parsing nested `google.protobuf.Any` messages and lead to the exhaustion of the Python recursion stack</issue> <packager>glaubitz</packager> <rating>moderate</rating> <category>security</category> <summary>Security update for protobuf</summary> <description>This update for protobuf fixes the following issues: - CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173). </description> </patchinfo>