Summary
The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.
Security Fix(es):
* protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference (CVE-2021-22570)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | protobuf | 3.5.0-15.el8 |
| AlmaLinux · 8 | protobuf-compiler | 3.5.0-15.el8 |
| AlmaLinux · 8 | protobuf-devel | 3.5.0-15.el8 |
| AlmaLinux · 8 | protobuf-lite | 3.5.0-15.el8 |
| AlmaLinux · 8 | protobuf-lite-devel | 3.5.0-15.el8 |
| AlmaLinux · 8 | python3-protobuf | 3.5.0-15.el8 |
Vulnerabilities 1
-
Medium 6.5
Nullptr Dereference in Protobuf
Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is …