Ubuntu
protobuf-c package

protobuf-c 1.3.3-1ubuntu0.1 source package in Ubuntu

Changelog

protobuf-c (1.3.3-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: invalid arithmetic shift allows denial of service
    in zigzag functions of protobuf-c.c
    - debian/patches/CVE-2022-33070.patch corrects operator precedence to
      fix arithmetic shift
    - CVE-2022-33070
  * SECURITY UPDATE: unsigned interger overflow in parse_required_member
    of protobuf-c.c
    - debian/patches/misc-2022-unsigned-integer.patch adds message length
      check
  * SECURITY UPDATE: possible NULL dereference in protobuf-c.c's
    protobuf_c_message_unpack
    - debian/patches/misc-2022-null-deref.patch adds NULL check

 -- Mark Esler <email address hidden>  Mon, 25 Jul 2022 14:27:10 -0500

Upload details

Uploaded by:
Mark Esler
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
devel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates universe devel
Focal security universe devel

Downloads

File Size SHA-256 Checksum
protobuf-c_1.3.3.orig.tar.gz 488.8 KiB 22956606ef50c60de1fabc13a78fbc50830a0447d780467d3c519f84ad527e78
protobuf-c_1.3.3-1ubuntu0.1.debian.tar.xz 6.2 KiB 7f22780140dabf3dd5572a9cdca034fcf1133ad6d4351f52ea6b15dd6c5da93b
protobuf-c_1.3.3-1ubuntu0.1.dsc 2.2 KiB 82d259bb3b4e6561ab9409e29683490d3b39f16ae38c7c76f16ac1f931c0b5a8

View changes file

Binary packages built by this source

libprotobuf-c-dev: Protocol Buffers C static library and headers (protobuf-c)

 Protocol Buffers are a flexible, efficient, automated mechanism for
 serializing structured data - similar to XML, but smaller, faster, and
 simpler. You define how you want your data to be structured once, then you can
 use special generated source code to easily write and read your structured
 data to and from a variety of data streams and using a variety of languages.
 You can even update your data structure without breaking deployed programs
 that are compiled against the "old" format.
 .
 This is the "protobuf-c" implementation of Protocol Buffers in C.
 .
 This package contains the static library and development headers.

libprotobuf-c1: Protocol Buffers C shared library (protobuf-c)

 Protocol Buffers are a flexible, efficient, automated mechanism for
 serializing structured data - similar to XML, but smaller, faster, and
 simpler. You define how you want your data to be structured once, then you can
 use special generated source code to easily write and read your structured
 data to and from a variety of data streams and using a variety of languages.
 You can even update your data structure without breaking deployed programs
 that are compiled against the "old" format.
 .
 This is the "protobuf-c" implementation of Protocol Buffers in C.
 .
 This package contains the shared library.

libprotobuf-c1-dbgsym: debug symbols for libprotobuf-c1
protobuf-c-compiler: Protocol Buffers C compiler (protobuf-c)

 Protocol Buffers are a flexible, efficient, automated mechanism for
 serializing structured data - similar to XML, but smaller, faster, and
 simpler. You define how you want your data to be structured once, then you can
 use special generated source code to easily write and read your structured
 data to and from a variety of data streams and using a variety of languages.
 You can even update your data structure without breaking deployed programs
 that are compiled against the "old" format.
 .
 This is the "protobuf-c" implementation of Protocol Buffers in C.
 .
 This package contains the "protoc-c" code generator that creates C stubs from
 Protocol Buffers .proto files. These stubs must be compiled and linked against
 the libprotobuf-c support library.

protobuf-c-compiler-dbgsym: debug symbols for protobuf-c-compiler