Hi, On Mon, Jul 7, 2025 at 1:51 PM Hlib Korzhynskyy <hlib.korzhyns...@canonical.com> wrote: > The final merge commit from github [1] is what we used to fix this issue in > Ubuntu. It should contain all of the relevant commits for the CVE. > [1] > https://github.com/protocolbuffers/protobuf/commit/4a197e78ad2430e22e992c5a7727b61ae220f727 OK, this seems to be the full changes needed. Meanwhile I have checked your security update for this issue at: https://launchpad.net/ubuntu/+source/protobuf/3.21.12-9ubuntu1.1 That contains five separate patches, but nevermind. Thanks for your update.
Regards, Laszlo/GCS
