{"id":"CLSA-2026-1792049845","summary":"TuxCare security update for com.google.protobuf (3 CVEs)","details":"TuxCare rebuilt 5 com.google.protobuf packages to address 3 CVEs. Fixed in 3.12.0-tuxcare.1.","modified":"2026-10-15T09:47:46.013358922Z","published":"2026-10-15T07:37:25Z","upstream":["CVE-2021-22569","CVE-2022-3509","CVE-2024-7254"],"affected":[{"package":{"name":"com.google.protobuf:protobuf-bom","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.google.protobuf/protobuf-bom"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.0"},{"fixed":"3.12.0-tuxcare.1"}]}],"versions":["3.12.0"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792049845.json","tuxcare":{"base_version":"3.12.0","fixed_version":"3.12.0-tuxcare.1"}}},{"package":{"name":"com.google.protobuf:protobuf-java","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.google.protobuf/protobuf-java"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.0"},{"fixed":"3.12.0-tuxcare.1"}]}],"versions":["3.12.0"],"database_specific":{"tuxcare":{"base_version":"3.12.0","fixed_version":"3.12.0-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792049845.json"}},{"package":{"name":"com.google.protobuf:protobuf-java-util","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.google.protobuf/protobuf-java-util"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.0"},{"fixed":"3.12.0-tuxcare.1"}]}],"versions":["3.12.0"],"database_specific":{"tuxcare":{"base_version":"3.12.0","fixed_version":"3.12.0-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792049845.json"}},{"package":{"name":"com.google.protobuf:protobuf-javalite","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.google.protobuf/protobuf-javalite"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.0"},{"fixed":"3.12.0-tuxcare.1"}]}],"versions":["3.12.0"],"database_specific":{"tuxcare":{"base_version":"3.12.0","fixed_version":"3.12.0-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792049845.json"}},{"package":{"name":"com.google.protobuf:protobuf-parent","ecosystem":"TuxCare:Maven","purl":"pkg:maven/com.google.protobuf/protobuf-parent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.12.0"},{"fixed":"3.12.0-tuxcare.1"}]}],"versions":["3.12.0"],"database_specific":{"tuxcare":{"base_version":"3.12.0","fixed_version":"3.12.0-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1792049845.json"}}],"schema_version":"1.9.0"}