{"id":"CLSA-2026-1792011894","summary":"TuxCare security update for com.google.protobuf (2 CVEs)","details":"TuxCare rebuilt 3 com.google.protobuf packages to address 2 CVEs. Fixed in 3.6.1-tuxcare.1.","modified":"2026-10-15T09:47:46.495658370Z","published":"2026-10-14T21:04:54Z","upstream":["CVE-2021-22569","CVE-2024-7254"],"affected":[{"package":{"name":"com.google.protobuf:protobuf-java","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.google.protobuf/protobuf-java"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.1"},{"fixed":"3.6.1-tuxcare.1"}]}],"versions":["3.6.1"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792011894.json","tuxcare":{"base_version":"3.6.1","fixed_version":"3.6.1-tuxcare.1"}}},{"package":{"name":"com.google.protobuf:protobuf-java-util","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.google.protobuf/protobuf-java-util"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.1"},{"fixed":"3.6.1-tuxcare.1"}]}],"versions":["3.6.1"],"database_specific":{"tuxcare":{"base_version":"3.6.1","fixed_version":"3.6.1-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792011894.json"}},{"package":{"name":"com.google.protobuf:protobuf-parent","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.google.protobuf/protobuf-parent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.6.1"},{"fixed":"3.6.1-tuxcare.1"}]}],"versions":["3.6.1"],"database_specific":{"tuxcare":{"fixed_version":"3.6.1-tuxcare.1","base_version":"3.6.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792011894.json"}}],"schema_version":"1.9.0"}