protobuf-3.14.0-16.el9

エラータID: AXSA:2025-10141:01

リリース日: 
2025/06/28 Saturday - 01:01
題名: 
protobuf-3.14.0-16.el9
影響のあるチャネル: 
MIRACLE LINUX 9 for x86_64
Severity: 
Moderate
Description: 

以下項目について対処しました。

[Security Fix]
- ProtocolBuffers の MessageSet 型の解析処理には、意図せずメモリ
不足エラーを発生させてしまう問題があるため、リモートの攻撃者により、
要素ごとに複数のキーと値を持つように巧妙に細工されたメッセージの
解析処理を介して、サービス拒否攻撃を可能とする脆弱性が存在します。
(CVE-2022-1941)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2022-1941
A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 4.21.5 for protobuf-python can lead to out of memory failures. A specially crafted message with multiple key-value per elements creates parsing issues, and can lead to a Denial of Service against services receiving unsanitized input. We recommend upgrading to versions 3.18.3, 3.19.5, 3.20.2, 3.21.6 for protobuf-cpp and 3.18.3, 3.19.5, 3.20.2, 4.21.6 for protobuf-python. Versions for 3.16 and 3.17 are no longer updated.
追加情報: 

N/A

ダウンロード: 

SRPMS
  1. protobuf-3.14.0-16.el9.src.rpm
    MD5: 16de14a073e1b97d547de78a9f50e6bf
    SHA-256: 973596e820e81aa59544f83b954f7f3701bf562aa341a1acb8ea2a2f21a287fe
    Size: 6.19 MB

Asianux Server 9 for x86_64
  1. protobuf-3.14.0-16.el9.i686.rpm
    MD5: 3856b810dd33f1fe15bf9ea9e42962a7
    SHA-256: 6ce0ab8a93492cf14500a90de5cb6b57764f46aba095b22a04a61ffa2c240a2d
    Size: 1.10 MB
  2. protobuf-3.14.0-16.el9.x86_64.rpm
    MD5: d10ea149532201340b27f39077d1761d
    SHA-256: 4c5f3a74f667c1a14f89b378a557c845df2fc3cb073396ed25bec26913a3a9a9
    Size: 1.00 MB
  3. protobuf-compiler-3.14.0-16.el9.i686.rpm
    MD5: 7de5df8cf9953c2947126d98b58b876f
    SHA-256: 5b5ac67f35e65d56b85f289200176b7a3b861d257aad2ab285a17190bd58dc10
    Size: 975.09 kB
  4. protobuf-compiler-3.14.0-16.el9.x86_64.rpm
    MD5: ac91bdc97228675bfb10a54235310ffc
    SHA-256: 72156657957d03b60a1a15488ef920801f69e490e23215fc1f631fa6a39966f8
    Size: 861.66 kB
  5. protobuf-devel-3.14.0-16.el9.i686.rpm
    MD5: c029ec6c8bed07c0ba358e4d6ab9317a
    SHA-256: 046a97980670c0d76eab82f03a202044636343ac1b198ca924a51ac91c296e94
    Size: 365.09 kB
  6. protobuf-devel-3.14.0-16.el9.x86_64.rpm
    MD5: 9956d03fa2f870cd02ec2735aef44487
    SHA-256: 0b6f387a78ab891d54d3bf096118713201140b779cca4f754ab4ee25ecd970c5
    Size: 365.08 kB
  7. protobuf-lite-3.14.0-16.el9.i686.rpm
    MD5: c4ec2b2a8b0fc8317114c10247e1f79a
    SHA-256: 0c8caa37e853f5981757893dbb13d31d5e0990a42409be33091ef06d47ae4599
    Size: 260.33 kB
  8. protobuf-lite-3.14.0-16.el9.x86_64.rpm
    MD5: cda5b44eaaa586e163f74283fba06e0a
    SHA-256: 85cef7827de392abdb7263bbde7bc82ecc8c5f373d9e8df7f4fa1f277dc0194a
    Size: 231.43 kB
  9. protobuf-lite-devel-3.14.0-16.el9.i686.rpm
    MD5: 5a5f30ac60e96d6416df22f53931547d
    SHA-256: e27a9af5177631f506ddfda70ef231cd9bd1887b96691c8126917093ae1c4b06
    Size: 7.67 kB
  10. protobuf-lite-devel-3.14.0-16.el9.x86_64.rpm
    MD5: 9219f202b4fb619137d5a8e2a3c2ff5a
    SHA-256: 8acec1e136b8f9a54dd299b4a32f430f37749407d741fcbab280c0bf58208c3f
    Size: 7.66 kB
  11. python3-protobuf-3.14.0-16.el9.noarch.rpm
    MD5: 94c188fb6da14ccc13f5ae5fa724766d
    SHA-256: 9e53c1582b31aa2d42fc551c503394c36081ae299753d4b949ed92de910a86ac
    Size: 268.94 kB