(RHSA-2023:6621) Moderate: protobuf-c security update

2023-11-0706:10:25

access.redhat.com

rhsa-2023-6621

protobuf-c

c bindings

google

protocol buffers

unsigned integer overflow

parse_required_member

cve-2022-48468

red hat enterprise linux

release notes

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The protobuf-c packages provide C bindings for Google’s Protocol Buffers.

Security Fix(es):

protobuf-c: unsigned integer overflow in parse_required_member (CVE-2022-48468)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9ppc64leprotobuf-c-compiler< 1.3.3-13.el9protobuf-c-compiler-1.3.3-13.el9.ppc64le.rpm
RedHat9aarch64protobuf-c-compiler< 1.3.3-13.el9protobuf-c-compiler-1.3.3-13.el9.aarch64.rpm
RedHat9ppc64leprotobuf-c-compiler-debuginfo< 1.3.3-13.el9protobuf-c-compiler-debuginfo-1.3.3-13.el9.ppc64le.rpm
RedHat9x86_64protobuf-c< 1.3.3-13.el9protobuf-c-1.3.3-13.el9.x86_64.rpm
RedHat9s390xprotobuf-c-devel< 1.3.3-13.el9protobuf-c-devel-1.3.3-13.el9.s390x.rpm
RedHat9aarch64protobuf-c-compiler-debuginfo< 1.3.3-13.el9protobuf-c-compiler-debuginfo-1.3.3-13.el9.aarch64.rpm
RedHat9ppc64leprotobuf-c< 1.3.3-13.el9protobuf-c-1.3.3-13.el9.ppc64le.rpm
RedHat9x86_64protobuf-c-compiler-debuginfo< 1.3.3-13.el9protobuf-c-compiler-debuginfo-1.3.3-13.el9.x86_64.rpm
RedHat9i686protobuf-c-devel< 1.3.3-13.el9protobuf-c-devel-1.3.3-13.el9.i686.rpm
RedHat9s390xprotobuf-c-debuginfo< 1.3.3-13.el9protobuf-c-debuginfo-1.3.3-13.el9.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	ppc64le	protobuf-c-compiler	< 1.3.3-13.el9	protobuf-c-compiler-1.3.3-13.el9.ppc64le.rpm
RedHat	9	aarch64	protobuf-c-compiler	< 1.3.3-13.el9	protobuf-c-compiler-1.3.3-13.el9.aarch64.rpm
RedHat	9	ppc64le	protobuf-c-compiler-debuginfo	< 1.3.3-13.el9	protobuf-c-compiler-debuginfo-1.3.3-13.el9.ppc64le.rpm
RedHat	9	x86_64	protobuf-c	< 1.3.3-13.el9	protobuf-c-1.3.3-13.el9.x86_64.rpm
RedHat	9	s390x	protobuf-c-devel	< 1.3.3-13.el9	protobuf-c-devel-1.3.3-13.el9.s390x.rpm
RedHat	9	aarch64	protobuf-c-compiler-debuginfo	< 1.3.3-13.el9	protobuf-c-compiler-debuginfo-1.3.3-13.el9.aarch64.rpm
RedHat	9	ppc64le	protobuf-c	< 1.3.3-13.el9	protobuf-c-1.3.3-13.el9.ppc64le.rpm
RedHat	9	x86_64	protobuf-c-compiler-debuginfo	< 1.3.3-13.el9	protobuf-c-compiler-debuginfo-1.3.3-13.el9.x86_64.rpm
RedHat	9	i686	protobuf-c-devel	< 1.3.3-13.el9	protobuf-c-devel-1.3.3-13.el9.i686.rpm
RedHat	9	s390x	protobuf-c-debuginfo	< 1.3.3-13.el9	protobuf-c-debuginfo-1.3.3-13.el9.s390x.rpm