Medium ELSA-2023-6944 1 CVE

Moderate: protobuf-c security update (Oracle Linux 8)

Published Nov 17, 2023 · Updated Nov 17, 2023

Ecosystem: Oracle Linux

Summary

[1.3.0-8]
- Rebuild for gating test

[1.3.0-7]
- Applied patch for for CVE-2022-48468 (#2186678)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	protobuf-c	0:1.3.0-8.el8
Oracle Linux · 8	protobuf-c-compiler	0:1.3.0-8.el8
Oracle Linux · 8	protobuf-c-devel	0:1.3.0-8.el8

Vulnerabilities 1

Medium 5.5

CVE-2022-48468

protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

protobuf-c protobuf-c protobuf-c libsignal-protocol-c Debian Ubuntu Azure Linux

Apr 13, 2023