portage-ng / portage / dev-libs / protobuf-c / 1.5.2
portage-ng glsa
1 advisory reference dev-libs/protobuf-c · none place version 1.5.2 in a vulnerable range
▸ GLSA 202408-33 protobuf-c: Multiple Vulnerabilities this version unaffected low remote 2024-08-12

Multiple vulnerabilities have been discovered in protobuf-c, the worst of which could result in denial of service.

Announced
2024-08-12
Revised
2024-08-12
Access
remote
Bugs
#856043 #904423
Advisory
https://security.gentoo.org/glsa/202408-33

Affected packages

PackageArchVulnerableUnaffected
dev-libs/protobuf-c*< 1.4.1>= 1.4.1

Background

protobuf-c is a protocol buffers implementation in C.

Description

Multiple denial of service vulnerabilities have been discovered in protobuf-c.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All protobuf-c users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-libs/protobuf-c-1.4.1"

References