Red Hat Security Advisory

RHSA-2025:7138

protobuf security update

Released 2025-05-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) protobuf-3.14.0-16.el9, protobuf-lite-3.14.0-16.el9, python3-protobuf-3.14.0-16.el9
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) protobuf-compiler-3.14.0-16.el9, protobuf-devel-3.14.0-16.el9, protobuf-lite-devel-3.14.0-16.el9

Fixes 1 record

TI-2022-01800 CVE-2022-1941 · GHSA-8gq9-2x98-w8hf

Out of Memory issue in ProtocolBuffers for cpp and python

MEDIUM 42

A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01512 Published 2022-09-22 Fixed in 3.18.3, 3.19.5 +2 CWE-1286