Red Hat Security Advisory

RHSA-2022:7970

protobuf security update

Released 2022-11-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) protobuf-compiler-3.14.0-13.el9, protobuf-devel-3.14.0-13.el9, protobuf-lite-devel-3.14.0-13.el9
Red Hat Enterprise Linux AppStream (v. 9) protobuf-3.14.0-13.el9, protobuf-lite-3.14.0-13.el9, python3-protobuf-3.14.0-13.el9

TI-2021-05524 CVE-2021-22570

LOW 34

Nullptr dereference when a null char is present in a proto symbol.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0266 Published 2022-01-26 Partial fix · 3.15.0 CWE-476