CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

devel/protobuf33.21.12

Data interchange format library

2
unaddressed
0
VuXML only, still affected
0
fixed
Maintainer
sunpoet@FreeBSD.org
Packages
protobuf3 3.21.12
Upstream
Higher version available: 36.2
CPE
google:protobuf from the port
WWW
https://protobuf.dev/
Links
cgit · VuXML

Unaddressed (2) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2024-72548.72024-09-19Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limi…
CVE-2026-09948.22026-01-23A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nes…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (5)

Po-Chuan Hsieh (sunpoet) · 3.21.12
devel/protobuf3: Mark DEPRECATED and set EXPIRATION_DATE to 2026-10-31
2b6c4677f0
Po-Chuan Hsieh (sunpoet) · 3.21.12
devel/protobuf3: Remove USES=pathfix
ddf01c537a
Po-Chuan Hsieh (sunpoet) · 3.21.12
devel/protobuf3: Remove unnecessary substitution
4a21e295da
Muhammad Moinur Rahman (bofh) · 3.21.12
*/*: sparc64 cleanup

Even after dropping sparc64 support along with 12 some were present in
the codebase. Remove the remnants.

Approved by:	portmgr (blanket)
7be43cda68
Po-Chuan Hsieh (sunpoet) · 3.21.12
devel/protobuf3: Add protobuf3 3.21.12 (copied from protobuf)

- Add PORTSCOUT
ff78a16bf8