Skip to content
OpenAdvisories
Medium ELSA-2025-7138 1 CVE

Moderate: protobuf security update (Oracle Linux 9)

Published May 16, 2025 · Updated May 16, 2025

Ecosystem: Oracle Linux

Summary

[3.14.0-16]
- Rebuild

[3.14.0-15]
- Rebuild

[3.14.0-14]
- Applied patch for CVE-2022-1941 (#RHEL-40872)
- Applied patch to make emacs dependency optional (#RHEL-40572)

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 9 protobuf 0:3.14.0-16.el9
Oracle Linux · 9 protobuf-compiler 0:3.14.0-16.el9
Oracle Linux · 9 protobuf-devel 0:3.14.0-16.el9
Oracle Linux · 9 protobuf-lite 0:3.14.0-16.el9
Oracle Linux · 9 protobuf-lite-devel 0:3.14.0-16.el9
Oracle Linux · 9 python3-protobuf 0:3.14.0-16.el9

Vulnerabilities 1

  • High 7.5
    CVE-2022-1941

    Out of Memory issue in ProtocolBuffers for cpp and python

    A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 4.21.5 fo…

    Google protobuf-python protobuf-cpp mysql Debian Ubuntu Azure Linux PyPI