SUSE-SU-2022:3922-1

UNKNOWN

Security update for protobuf

Published Nov 9, 2022

Modified 3 years ago

Fix available

Details

This update for protobuf fixes the following issues:

CVE-2021-22569: Fixed Denial of Service in protobuf-java in the parsing procedure for binary data (bsc#1194530).
CVE-2022-1941: Fix a potential DoS issue in protobuf-cpp and protobuf-python (bsc#1203681)
CVE-2022-3171: Fix a potential DoS issue when parsing with binary data in protobuf-java (bsc#1204256)

Affected Packages(12 packages)

libprotobuf-lite20

SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Installer Updates 15 SP2SUSE Linux Enterprise Micro 5.1

Fixed in:

3.9.2-150200.4.19.2

libprotobuf20

SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Module for Basesystem 15 SP3SUSE Linux Enterprise Module for Basesystem 15 SP4

Fixed in:

3.9.2-150200.4.19.2

libprotoc20

SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Module for Development Tools 15 SP3SUSE Linux Enterprise Module for Development Tools 15 SP4

Fixed in:

3.9.2-150200.4.19.2

protobuf

Fixed in:

3.9.2-150200.4.19.2

protobuf-devel

SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Module for Development Tools 15 SP3SUSE Linux Enterprise Module for Development Tools 15 SP4

Fixed in:

3.9.2-150200.4.19.2

python2-protobuf

SUSE Linux Enterprise Module for Package Hub 15 SP3SUSE Linux Enterprise Module for Package Hub 15 SP4openSUSE Leap 15.3

Fixed in:

3.9.2-150200.4.19.2

python3-protobuf

SUSE Linux Enterprise Module for Package Hub 15 SP3SUSE Linux Enterprise Module for Package Hub 15 SP4SUSE Linux Enterprise Module for Public Cloud 15 SP2SUSE Linux Enterprise Module for Public Cloud 15 SP3SUSE Linux Enterprise Module for Public Cloud 15 SP4

Fixed in:

3.9.2-150200.4.19.2

protobuf-java

SUSE Manager Server Module 4.1SUSE Manager Server Module 4.2SUSE Manager Server Module 4.3openSUSE Leap 15.3openSUSE Leap 15.4

Fixed in:

3.9.2-150200.4.19.2

libprotobuf-lite20-32bit

openSUSE Leap 15.3openSUSE Leap 15.4

Fixed in:

3.9.2-150200.4.19.2

libprotobuf20-32bit

openSUSE Leap 15.3openSUSE Leap 15.4