Red Hat Product Errata RHSA-2026:3218 - Security Advisory
Issued:
2026-02-24
Updated:
2026-02-24

RHSA-2026:3218 - Security Advisory

Synopsis

Important: protobuf security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for protobuf is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.

Security Fix(es):

  • python: protobuf: Protobuf: Denial of Service due to recursion depth bypass (CVE-2026-0994)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64

Fixes

  • BZ - 2432398 - CVE-2026-0994 python: protobuf: Protobuf: Denial of Service due to recursion depth bypass

Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0

SRPM
protobuf-3.19.6-11.el10_0.1.src.rpm SHA-256: 7ad85ac63cb5bf4d25c869661a7c0ae0922ba9b98e44fffd13fdea013196029e
x86_64
protobuf-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: b3c85a769fcbe9d163a393623d5ed4836b8379d96581ef10538c82461ed675fa
protobuf-compiler-debuginfo-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: 7bf550e648f2e36a22731765a0b8f22db6d7456d4434d75f5ee96aa93cbb712e
protobuf-debuginfo-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: 88494ac1ecd8d56b0b18de88fa799f7bcae4ef1acdaea3d18af003ff55f969c3
protobuf-debugsource-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: f0fd9b5b9805437f119ad93f11d131bfb1903d9368705b60ff141ccbe1e9268e
protobuf-lite-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: b19e7643baaa8ab9403a29bff9f45b6fbc9d3c74149d8b7ec34beaafbbe55799
protobuf-lite-debuginfo-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: 19bd2091e42056ce74148c1758ad224461636e982e0dde7b60e6bc296fb96e1e
python3-protobuf-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: fe2c14616b5c242c28bbda584b4d37bd77e1f4eeb58661d3af034743ce1d5234
python3-protobuf-debuginfo-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: ff378539c28a6b52cc15043c9b3418e793f95c048f22de196782941748b51ca4

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0

SRPM
protobuf-3.19.6-11.el10_0.1.src.rpm SHA-256: 7ad85ac63cb5bf4d25c869661a7c0ae0922ba9b98e44fffd13fdea013196029e
s390x
protobuf-3.19.6-11.el10_0.1.s390x.rpm SHA-256: f25eabe09af5660c17136cc1a4aacc4d81c958de7e5c3b15cf620c2c953f04eb
protobuf-compiler-debuginfo-3.19.6-11.el10_0.1.s390x.rpm SHA-256: 39fc126930872b0b8012d368e689b913191f7c1c42f507552bfa6403ee985314
protobuf-debuginfo-3.19.6-11.el10_0.1.s390x.rpm SHA-256: 02c45c7910d15e7e7e265796b21a9828f6514c94a99ea9b682618c4f26b774ac
protobuf-debugsource-3.19.6-11.el10_0.1.s390x.rpm SHA-256: b9b007eaaf2f3f50972a6fea519299ac08baf3ea473df3df9d4fe8fc312e6928
protobuf-lite-3.19.6-11.el10_0.1.s390x.rpm SHA-256: acccfd104973ca6ae0241ae41b2324386ca5563f23c54d18d7355bae25303380
protobuf-lite-debuginfo-3.19.6-11.el10_0.1.s390x.rpm SHA-256: 8c0d5116b88ab1134116863d202965c86a4dde2b36777fcc53487f8e6dfd34cf
python3-protobuf-3.19.6-11.el10_0.1.s390x.rpm SHA-256: ffedb6e4c79c662ea9e002b1e7ad496b4c4ea2fc85a664220fe2fa446244987d
python3-protobuf-debuginfo-3.19.6-11.el10_0.1.s390x.rpm SHA-256: 266bae02b317eafb60e5b4479127b00c48fb3770533e31a340bb8b6c3643a2e5

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0

SRPM
protobuf-3.19.6-11.el10_0.1.src.rpm SHA-256: 7ad85ac63cb5bf4d25c869661a7c0ae0922ba9b98e44fffd13fdea013196029e
ppc64le
protobuf-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: d13db01f6f401dcc606898d009e54b47681d66cbc4e0116fad700ed63e41309f
protobuf-compiler-debuginfo-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: ee1e839e4a09b759748111087b059968f62a393504cbb9081731d9ca63e4ea4e
protobuf-debuginfo-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: 47960716e22de1fd4b9df829e956441eff4dcae46c8ebf49df6cb404d8f0f5b2
protobuf-debugsource-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: 9c8af6e1ef26c1d893ced3394e292f576444204dbba5d10f88e4785c60189290
protobuf-lite-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: ffe90f7d51d12c3956f72d4a8ce716ec135acf933f8d066dd680169f4893a633
protobuf-lite-debuginfo-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: d5510929a735bc0545f0905b7b94a3bd17640dbc347c69c904e44f5efe4e7918
python3-protobuf-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: 34c1b53ce8b71b762fd082e8fc4aa1bc16066584abda768b1899d352708de429
python3-protobuf-debuginfo-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: c340b3d2b23f98e0b41d0be17d18558275fbef568ded9c561c67ce0038d27486

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0

SRPM
protobuf-3.19.6-11.el10_0.1.src.rpm SHA-256: 7ad85ac63cb5bf4d25c869661a7c0ae0922ba9b98e44fffd13fdea013196029e
aarch64
protobuf-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: 10a14e46400ff47ff69ad2b7a689c45d39908e998ac8896c37890af1c0449d5f
protobuf-compiler-debuginfo-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: 39a0e7f6e1d2fa233d5220eb4f4c6a1ac51471ea4a83ecaccb06ec21df751486
protobuf-debuginfo-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: 2dbc8111c223f59bfc649f423a7f44b916152d0474f6c0e3d329a1e233d68674
protobuf-debugsource-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: 6c123c2b9134297ac02006f50d96a656bdac1c9e8fa9053484499782af52c8ce
protobuf-lite-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: c7f62a64f48e93c6fd7e63268d45f674cf4deb6047e72a4ae9318eb5e7b9734a
protobuf-lite-debuginfo-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: d26e70b6e6f9fa117f0927fbfcbd83965f67f70c1ff44db5b37a5b93c6648b2d
python3-protobuf-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: 4bd9494077be71ab65cf5113df0c3827766af22f47f4a3e96cca82e4399b168a
python3-protobuf-debuginfo-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: a4520b96d9fb8f7c017cf5668612e14c7d6b2bfbc691132fab0fd4e00674d62c

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0

SRPM
x86_64
protobuf-compiler-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: 707bdcaf9486fba299a51e828a2773a6ed9c45b627f9603a05e388248b908b9c
protobuf-compiler-debuginfo-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: 7bf550e648f2e36a22731765a0b8f22db6d7456d4434d75f5ee96aa93cbb712e
protobuf-debuginfo-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: 88494ac1ecd8d56b0b18de88fa799f7bcae4ef1acdaea3d18af003ff55f969c3
protobuf-debugsource-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: f0fd9b5b9805437f119ad93f11d131bfb1903d9368705b60ff141ccbe1e9268e
protobuf-devel-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: 54a41c93273f65d51f6bc876df682dda6f616d76db346fef7043723d4542ba94
protobuf-lite-debuginfo-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: 19bd2091e42056ce74148c1758ad224461636e982e0dde7b60e6bc296fb96e1e
protobuf-lite-devel-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: 7165caeb5c57796a34c81168a521f48dec766823d5750090dbf1f89495a7ba7f
python3-protobuf-debuginfo-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: ff378539c28a6b52cc15043c9b3418e793f95c048f22de196782941748b51ca4

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0

SRPM
ppc64le
protobuf-compiler-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: 0dde0cefa201a8ff2ce977773842bab3616038bf0ea7483a5faf1825fb83e2fa
protobuf-compiler-debuginfo-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: ee1e839e4a09b759748111087b059968f62a393504cbb9081731d9ca63e4ea4e
protobuf-debuginfo-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: 47960716e22de1fd4b9df829e956441eff4dcae46c8ebf49df6cb404d8f0f5b2
protobuf-debugsource-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: 9c8af6e1ef26c1d893ced3394e292f576444204dbba5d10f88e4785c60189290
protobuf-devel-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: c417f362ebfc130e895d4a13230e14deb1bb55a4c25b5eef888a90bd27856906
protobuf-lite-debuginfo-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: d5510929a735bc0545f0905b7b94a3bd17640dbc347c69c904e44f5efe4e7918
protobuf-lite-devel-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: 1b711a4a9c04eec1ef3b4dcc128dd6f819aff3e33f9ff3371e4015db0444e01d
python3-protobuf-debuginfo-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: c340b3d2b23f98e0b41d0be17d18558275fbef568ded9c561c67ce0038d27486

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0

SRPM
s390x
protobuf-compiler-3.19.6-11.el10_0.1.s390x.rpm SHA-256: 32174c511895a2388ef7e6f523627e8fb1dd9c473de83531a0d2929b2590b032
protobuf-compiler-debuginfo-3.19.6-11.el10_0.1.s390x.rpm SHA-256: 39fc126930872b0b8012d368e689b913191f7c1c42f507552bfa6403ee985314
protobuf-debuginfo-3.19.6-11.el10_0.1.s390x.rpm SHA-256: 02c45c7910d15e7e7e265796b21a9828f6514c94a99ea9b682618c4f26b774ac
protobuf-debugsource-3.19.6-11.el10_0.1.s390x.rpm SHA-256: b9b007eaaf2f3f50972a6fea519299ac08baf3ea473df3df9d4fe8fc312e6928
protobuf-devel-3.19.6-11.el10_0.1.s390x.rpm SHA-256: d56da7a80b1ed421b9463d5a2a137f5ae51d8756fbd49eac5b0eb1cba5334510
protobuf-lite-debuginfo-3.19.6-11.el10_0.1.s390x.rpm SHA-256: 8c0d5116b88ab1134116863d202965c86a4dde2b36777fcc53487f8e6dfd34cf
protobuf-lite-devel-3.19.6-11.el10_0.1.s390x.rpm SHA-256: 3fcee49023752d3babf6409999ec2f3ee77838a29eb1a79649bbd085f781af09
python3-protobuf-debuginfo-3.19.6-11.el10_0.1.s390x.rpm SHA-256: 266bae02b317eafb60e5b4479127b00c48fb3770533e31a340bb8b6c3643a2e5

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0

SRPM
aarch64
protobuf-compiler-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: 95eafd9c8ff60f3f66102f831ba2d746014e63d68d4f381e752c3c1ca35714e2
protobuf-compiler-debuginfo-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: 39a0e7f6e1d2fa233d5220eb4f4c6a1ac51471ea4a83ecaccb06ec21df751486
protobuf-debuginfo-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: 2dbc8111c223f59bfc649f423a7f44b916152d0474f6c0e3d329a1e233d68674
protobuf-debugsource-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: 6c123c2b9134297ac02006f50d96a656bdac1c9e8fa9053484499782af52c8ce
protobuf-devel-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: add89e5a40e4c95bbf1d9edfcd3c8434c97e821da0200446c0803d646f8b34c1
protobuf-lite-debuginfo-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: d26e70b6e6f9fa117f0927fbfcbd83965f67f70c1ff44db5b37a5b93c6648b2d
protobuf-lite-devel-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: 49cc754bf267cff201e793f7e05764bf972d08031f6e408f476f13901da24f75
python3-protobuf-debuginfo-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: a4520b96d9fb8f7c017cf5668612e14c7d6b2bfbc691132fab0fd4e00674d62c

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0

SRPM
protobuf-3.19.6-11.el10_0.1.src.rpm SHA-256: 7ad85ac63cb5bf4d25c869661a7c0ae0922ba9b98e44fffd13fdea013196029e
aarch64
protobuf-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: 10a14e46400ff47ff69ad2b7a689c45d39908e998ac8896c37890af1c0449d5f
protobuf-compiler-debuginfo-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: 39a0e7f6e1d2fa233d5220eb4f4c6a1ac51471ea4a83ecaccb06ec21df751486
protobuf-debuginfo-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: 2dbc8111c223f59bfc649f423a7f44b916152d0474f6c0e3d329a1e233d68674
protobuf-debugsource-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: 6c123c2b9134297ac02006f50d96a656bdac1c9e8fa9053484499782af52c8ce
protobuf-lite-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: c7f62a64f48e93c6fd7e63268d45f674cf4deb6047e72a4ae9318eb5e7b9734a
protobuf-lite-debuginfo-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: d26e70b6e6f9fa117f0927fbfcbd83965f67f70c1ff44db5b37a5b93c6648b2d
python3-protobuf-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: 4bd9494077be71ab65cf5113df0c3827766af22f47f4a3e96cca82e4399b168a
python3-protobuf-debuginfo-3.19.6-11.el10_0.1.aarch64.rpm SHA-256: a4520b96d9fb8f7c017cf5668612e14c7d6b2bfbc691132fab0fd4e00674d62c

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0

SRPM
protobuf-3.19.6-11.el10_0.1.src.rpm SHA-256: 7ad85ac63cb5bf4d25c869661a7c0ae0922ba9b98e44fffd13fdea013196029e
s390x
protobuf-3.19.6-11.el10_0.1.s390x.rpm SHA-256: f25eabe09af5660c17136cc1a4aacc4d81c958de7e5c3b15cf620c2c953f04eb
protobuf-compiler-debuginfo-3.19.6-11.el10_0.1.s390x.rpm SHA-256: 39fc126930872b0b8012d368e689b913191f7c1c42f507552bfa6403ee985314
protobuf-debuginfo-3.19.6-11.el10_0.1.s390x.rpm SHA-256: 02c45c7910d15e7e7e265796b21a9828f6514c94a99ea9b682618c4f26b774ac
protobuf-debugsource-3.19.6-11.el10_0.1.s390x.rpm SHA-256: b9b007eaaf2f3f50972a6fea519299ac08baf3ea473df3df9d4fe8fc312e6928
protobuf-lite-3.19.6-11.el10_0.1.s390x.rpm SHA-256: acccfd104973ca6ae0241ae41b2324386ca5563f23c54d18d7355bae25303380
protobuf-lite-debuginfo-3.19.6-11.el10_0.1.s390x.rpm SHA-256: 8c0d5116b88ab1134116863d202965c86a4dde2b36777fcc53487f8e6dfd34cf
python3-protobuf-3.19.6-11.el10_0.1.s390x.rpm SHA-256: ffedb6e4c79c662ea9e002b1e7ad496b4c4ea2fc85a664220fe2fa446244987d
python3-protobuf-debuginfo-3.19.6-11.el10_0.1.s390x.rpm SHA-256: 266bae02b317eafb60e5b4479127b00c48fb3770533e31a340bb8b6c3643a2e5

Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0

SRPM
protobuf-3.19.6-11.el10_0.1.src.rpm SHA-256: 7ad85ac63cb5bf4d25c869661a7c0ae0922ba9b98e44fffd13fdea013196029e
ppc64le
protobuf-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: d13db01f6f401dcc606898d009e54b47681d66cbc4e0116fad700ed63e41309f
protobuf-compiler-debuginfo-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: ee1e839e4a09b759748111087b059968f62a393504cbb9081731d9ca63e4ea4e
protobuf-debuginfo-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: 47960716e22de1fd4b9df829e956441eff4dcae46c8ebf49df6cb404d8f0f5b2
protobuf-debugsource-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: 9c8af6e1ef26c1d893ced3394e292f576444204dbba5d10f88e4785c60189290
protobuf-lite-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: ffe90f7d51d12c3956f72d4a8ce716ec135acf933f8d066dd680169f4893a633
protobuf-lite-debuginfo-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: d5510929a735bc0545f0905b7b94a3bd17640dbc347c69c904e44f5efe4e7918
python3-protobuf-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: 34c1b53ce8b71b762fd082e8fc4aa1bc16066584abda768b1899d352708de429
python3-protobuf-debuginfo-3.19.6-11.el10_0.1.ppc64le.rpm SHA-256: c340b3d2b23f98e0b41d0be17d18558275fbef568ded9c561c67ce0038d27486

Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0

SRPM
protobuf-3.19.6-11.el10_0.1.src.rpm SHA-256: 7ad85ac63cb5bf4d25c869661a7c0ae0922ba9b98e44fffd13fdea013196029e
x86_64
protobuf-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: b3c85a769fcbe9d163a393623d5ed4836b8379d96581ef10538c82461ed675fa
protobuf-compiler-debuginfo-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: 7bf550e648f2e36a22731765a0b8f22db6d7456d4434d75f5ee96aa93cbb712e
protobuf-debuginfo-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: 88494ac1ecd8d56b0b18de88fa799f7bcae4ef1acdaea3d18af003ff55f969c3
protobuf-debugsource-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: f0fd9b5b9805437f119ad93f11d131bfb1903d9368705b60ff141ccbe1e9268e
protobuf-lite-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: b19e7643baaa8ab9403a29bff9f45b6fbc9d3c74149d8b7ec34beaafbbe55799
protobuf-lite-debuginfo-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: 19bd2091e42056ce74148c1758ad224461636e982e0dde7b60e6bc296fb96e1e
python3-protobuf-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: fe2c14616b5c242c28bbda584b4d37bd77e1f4eeb58661d3af034743ce1d5234
python3-protobuf-debuginfo-3.19.6-11.el10_0.1.x86_64.rpm SHA-256: ff378539c28a6b52cc15043c9b3418e793f95c048f22de196782941748b51ca4

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.