ALAS2-2023-2142 — Moderate: protobuf-c security update (Amazon Linux 2)

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-48468: protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

Fixed packages 4

Release	Package	Fixed in
Amazon Linux · 2	protobuf-c	0:1.0.2-3.amzn2.0.2
Amazon Linux · 2	protobuf-c-compiler	0:1.0.2-3.amzn2.0.2
Amazon Linux · 2	protobuf-c-debuginfo	0:1.0.2-3.amzn2.0.2
Amazon Linux · 2	protobuf-c-devel	0:1.0.2-3.amzn2.0.2

Vulnerabilities 1

Medium 5.5

CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

protobuf-c protobuf-c protobuf-c libsignal-protocol-c Debian Ubuntu Azure Linux

Apr 13, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2022-48468.html