DFSG, Licensing & New Packages Team

protobuf (35.1-1) experimental; urgency=medium
 .
   [ Laszlo Boszormenyi (GCS) ]
   * New major upstream release:
     - fix CVE-2026-6409: denial of service vulnerability in the PHP
       bindings (closes: #1134895).
   * Build with external utf8-range library.
   * Update patches.
   * Library transition from libproto*25 to libproto*35 .
   * Update homepage location.
   * Remove now redundant Rules-Requires-Root value.
   * Update copyright file.
   * Update watch file.
   * Update Standards-Version to 4.7.2 .
 .
   [ Ying-Chun Liu (PaulLiu) <paulliu@debian.org> ]
   * Fix python3-protobuf build.
   * Fix libprotobuf-java build.
   * Fix ruby-google-protobuf build.

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: protobuf
Source: https://github.com/protocolbuffers/protobuf
Comment:
 This package was debianized by Iustin Pop <iusty@k1024.org>
 on Mon, 07 Jul 2008 17:48:21 +0200.

Files: *
Copyright: 2008-     Google Inc.
License: BSD-3-Clause

Files: third_party/utf8_range/*
Copyright: 2019 Yibo Cai
    2022 Google LLC
License: Expat

Files: debian/*
Copyright:
    2009      Dirk Eddelbuettel <edd@debian.org>
    2016      Dmitry Smirnov <onlyjob@debian.org>
    2009      Julien Cristau <jcristau@debian.org>
    2013-2014 Robert Edmonds <edmonds@debian.org>
    2008,2009,2010 Iustin Pop <iusty@k1024.org>
    2026      Ying-Chun Liu (PaulLiu) <paulliu@debian.org>
    2016-     Laszlo Boszormenyi (GCS) <gcs@debian.org>
License: GPL-3

Files: debian/patches/*
Copyright:
    2016      Sebastiaan Couwenberg <sebastic@xs4all.nl>
    2019      Bas Couwenberg <sebastic@debian.org>
    2019      Laurence Parry <greenreaper@gmail.com>
    2020-     Olek Wojnar <olek@debian.org>
    2016-     Laszlo Boszormenyi (GCS) <gcs@debian.org>
License: BSD-3-Clause

Files: debian/patches/soversion.patch
Copyright: Antonio Rojas <arojas@archlinux.org>
License: BSD-3-Clause

License: BSD-3-Clause
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions
 are met:
 1. Redistributions of source code must retain the above copyright
    notice, this list of conditions and the following disclaimer.
 2. Redistributions in binary form must reproduce the above copyright
    notice, this list of conditions and the following disclaimer in the
    documentation and/or other materials provided with the distribution.
 3. Neither the name of the copyright holder nor the names of its contributors
    may be used to endorse or promote products derived from this software
    without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
 ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
 FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 SUCH DAMAGE.
Comment:
 Code generated by the Protocol Buffer compiler is owned by the owner
 of the input file used when generating it.  This code is not
 standalone and requires a support library to be linked with it.
 This support library is itself covered by the above license.

License: Public-Domain
 The author explicitly disclaims copyright in all jurisdictions which
 recognize such a disclaimer. In such jurisdictions, this software is
 released into the Public Domain.

License: Expat
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
 in the Software without restriction, including without limitation the rights
 to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 copies of the Software, and to permit persons to whom the Software is
 furnished to do so, subject to the following conditions:
 ․
 The above copyright notice and this permission notice shall be included in
 all copies or substantial portions of the Software.
 ․
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.

License: GPL-3
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU General Public License as published by
 the Free Software Foundation, version 3 of the License.
 ․
 This program is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 GNU General Public License for more details.
 ․
 On Debian systems, the complete text of the GNU General Public License
 Version 3 can be found in the file `/usr/share/common-licenses/GPL-3'.