RLSA-2022:7970

Import Source
https://storage.googleapis.com/resf-osv-data/RLSA-2022:7970.json
Related
Published
2022-11-15T06:12:20Z
Modified
2023-02-02T14:07:26.953879Z
Details

The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data.

Security Fix(es):

  • protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference (CVE-2021-22570)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.

References

Affected packages

Rocky Linux:9 / protobuf

Package

Name
protobuf

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0:3.14.0-13.el9