{"bugs":[{"bugid":905098,"firstseen":"2025-07-11T02:48:40.189262","severity":"minor","status":"IN_PROGRESS","summary":"<net-libs\/libsignal-protocol-c-2.3.3-r1: unsigned integer overflow in bundled protobuf-c"},{"bugid":906855,"firstseen":"2025-07-11T02:48:40.189262","severity":"normal","status":"CONFIRMED","summary":"net-libs\/libsignal-protocol-c is deprecated, to be replaced by net-libs\/libomemo-c"},{"bugid":952102,"firstseen":"2025-07-11T02:48:40.189262","severity":"normal","status":"CONFIRMED","summary":"net-libs\/libsignal-protocol-c-2.3.3-r1 - [meson] [gcc-15] [cmake-4] -- Configuring incomplete, errors occurred!"}],"categories":[{"categoryid":414,"name":"net-im","summary":"The net-im category contains instant messaging software."},{"categoryid":320,"name":"net-libs","summary":"The net-libs category contains libraries that are network-related."}],"changelog":[{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"f685cd94c6d609d7772a661d99a98bf6cb44e63b","committime":"2023-06-13T09:46:50","packageid":70229,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"randy@electronsweatshop.com","authorname":"Randy Barlow","body":"This ebuild is vulnerable to CVE-2022-48468 and is superceded by\nlibsignal-protocol-c-2.3.3-r1.ebuild, which remains in tree.\n\nBug: https:\/\/bugs.gentoo.org\/905098\nSigned-off-by: Randy Barlow <randy@electronsweatshop.com>\nCloses: https:\/\/github.com\/gentoo\/gentoo\/pull\/31334\nSigned-off-by: Viorel Munteanu <ceamac@gentoo.org>","commitid":"f4c1bd5eda9b7de001b586211455245e58b60856","committime":"2023-06-06T21:54:17","packageid":70229,"repoid":1,"summary":"net-libs\/libsignal-protocol-c: Drop 2.3.3"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"cf5d9c11e166fd236a1c4501b7856105e8f3c2b8","committime":"2023-05-29T20:31:56","packageid":70229,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"sam@gentoo.org","authorname":"Sam James","body":"Signed-off-by: Sam James <sam@gentoo.org>","commitid":"e97651a9e5522dec3b4d1bca0927b1c3a6e34e6c","committime":"2023-05-29T20:18:17","packageid":70229,"repoid":1,"summary":"net-libs\/libsignal-protocol-c: Stabilize 2.3.3-r1 arm64, #907123"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"8969341e59077852014386fbaddd8ae151824c42","committime":"2023-05-25T08:02:09","packageid":70229,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"arthurzam@gentoo.org","authorname":"Arthur Zamarin","body":"Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>","commitid":"c2be25d2dc29cc6ce921ec45cc753e6d1eba808c","committime":"2023-05-25T07:46:13","packageid":70229,"repoid":1,"summary":"net-libs\/libsignal-protocol-c: Stabilize 2.3.3-r1 x86, #907123"},{"authoremail":"arthurzam@gentoo.org","authorname":"Arthur Zamarin","body":"Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>","commitid":"2321d1fae29870c6cf3d4f29a2c9477527060ec6","committime":"2023-05-25T07:46:12","packageid":70229,"repoid":1,"summary":"net-libs\/libsignal-protocol-c: Stabilize 2.3.3-r1 amd64, #907123"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"f89b13f477ce53ddad2806ddae7479d913782696","committime":"2023-05-18T07:47:10","packageid":70229,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"juippis@gentoo.org","authorname":"Joonas Niilola","body":"Signed-off-by: Joonas Niilola <juippis@gentoo.org>","commitid":"ce8e4467442385a42195b7941c95ec63f781b3c0","committime":"2023-05-18T07:26:59","packageid":70229,"repoid":1,"summary":"net-libs\/libsignal-protocol-c: update EAPI 7 -> 8"},{"authoremail":"randy@electronsweatshop.com","authorname":"Randy Barlow","body":"This is dropped because the upstream for libsignal-protocol-c has been\narchived and is no longer maintained:\n\nhttps:\/\/github.com\/signalapp\/libsignal-protocol-c\n\nSigned-off-by: Randy Barlow <randy@electronsweatshop.com>\nSigned-off-by: Joonas Niilola <juippis@gentoo.org>","commitid":"5c5ff929021a4ccde7065b39eba2a2c03575851e","committime":"2023-05-02T02:02:07","packageid":70229,"repoid":1,"summary":"net-libs\/libsignal-protocol-c: Drop -9999 ebuild"},{"authoremail":"randy@electronsweatshop.com","authorname":"Randy Barlow","body":"This commit fixes CVE-2022-48468 for this package's bundled\nprotobuf-c.\n\nHere are some reference links about the issue:\n\nhttps:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-48468\nhttps:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2186673\n\nFor reference, here is the commit I made in Fedora to address the issue,\nwhich includes this patch:\n\nhttps:\/\/src.fedoraproject.org\/rpms\/libsignal-protocol-c\/c\/152eb06d164e7973fda49139bc5a51f3b23c0cf6?branch=rawhide\n\nCloses: https:\/\/bugs.gentoo.org\/905098\nSigned-off-by: Randy Barlow <randy@electronsweatshop.com>\nCloses: https:\/\/github.com\/gentoo\/gentoo\/pull\/30764\nSigned-off-by: Joonas Niilola <juippis@gentoo.org>","commitid":"c2e3eb85c45e83591be7faee69d58af55a10f8f4","committime":"2023-04-26T03:45:40","packageid":70229,"repoid":1,"summary":"net-libs\/libsignal-protocol-c: Fix CVE-2022-48468"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"c700fc6cfebe1cbb6b82ea83e35d71ad13ca3c18","committime":"2022-12-24T15:03:07","packageid":70229,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"asturm@gentoo.org","authorname":"Andreas Sturmlechner","body":"Overshadowed by stable 2.3.3.\n\nSigned-off-by: Andreas Sturmlechner <asturm@gentoo.org>","commitid":"2a541a25aaaabba8b3485318b1aa61b7516816d8","committime":"2022-12-20T19:25:44","packageid":70229,"repoid":1,"summary":"net-libs\/libsignal-protocol-c: drop 2.3.2"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"aeae15fa47fceb8a97d1c85f2d0c1b60981d8f75","committime":"2020-12-31T02:05:17","packageid":70229,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"sam@gentoo.org","authorname":"Sam James","body":"Signed-off-by: Sam James <sam@gentoo.org>","commitid":"a674505ef8d8e59cb189d1a7374508e29f2b89e7","committime":"2020-12-31T01:47:31","packageid":70229,"repoid":1,"summary":"net-libs\/libsignal-protocol-c: Stabilize 2.3.3 arm64, #762463"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"4d810ee3bb7f67d46d7574f4634bf358a70104b2","committime":"2020-12-06T08:35:22","packageid":70229,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"juippis@gentoo.org","authorname":"Joonas Niilola","body":"Bug: https:\/\/bugs.gentoo.org\/758668\nSigned-off-by: Joonas Niilola <juippis@gentoo.org>","commitid":"894caf89a74c6f1e1b6c89d06a3590606a8c486e","committime":"2020-12-06T08:12:50","packageid":70229,"repoid":1,"summary":"net-libs\/libsignal-protocol-c: keyword x86"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"de35d23c2cb1301c2d6f82b9143572ea11b931a9","committime":"2020-10-12T10:34:59","packageid":70229,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"ago@gentoo.org","authorname":"Agostino Sarubbo","body":"Package-Manager: Portage-3.0.4, Repoman-3.0.1\nRepoMan-Options: --include-arches=\"amd64\"\nSigned-off-by: Agostino Sarubbo <ago@gentoo.org>","commitid":"196f7a271364e721d3a56e284a8395d080fb9b0b","committime":"2020-10-12T10:21:36","packageid":70229,"repoid":1,"summary":"net-libs\/libsignal-protocol-c: amd64 stable wrt bug #747937"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"95a3da6ae40935adfd07a2a699b00707dfa8cb20","committime":"2020-07-23T21:05:12","packageid":70229,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"sam@gentoo.org","authorname":"Sam James","body":"Package-Manager: Portage-3.0.0, Repoman-2.3.23\nSigned-off-by: Sam James <sam@gentoo.org>","commitid":"a786385f1b099911ed8fa4bfaa758cff93fbef83","committime":"2020-07-23T20:36:06","packageid":70229,"repoid":1,"summary":"net-libs\/libsignal-protocol-c: move ~arm64 forward"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"87b7306f8399cdcc075cce861532515e45fd763e","committime":"2020-07-20T01:35:10","packageid":70229,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"sam@gentoo.org","authorname":"Sam James","body":"Package-Manager: Portage-2.3.103, Repoman-2.3.23\nSigned-off-by: Sam James <sam@gentoo.org>","commitid":"99b498ded480a8fc685884e10c459bc0f2349bc4","committime":"2020-07-20T01:04:00","packageid":70229,"repoid":1,"summary":"net-libs\/libsignal-protocol-c: arm64 keyworded (bug #733108)"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"c03dce9049341625dcccff9e027559cf830bb921","committime":"2020-03-28T16:37:51","packageid":70229,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"sping@gentoo.org","authorname":"Sebastian Pipping","body":"Signed-off-by: Sebastian Pipping <sping@gentoo.org>\nPackage-Manager: Portage-2.3.92, Repoman-2.3.20","commitid":"513ce5c80c74162acb42b878678db2aebc6f5b08","committime":"2020-03-28T16:01:51","packageid":70229,"repoid":1,"summary":"net-libs\/libsignal-protocol-c: 2.3.3"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"a8d907e4b2acb38467b494e36313788750592b3d","committime":"2020-02-11T17:48:59","packageid":70229,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"mgorny@gentoo.org","authorname":"Michał Górny","body":"Update the copyright notice on all files that were touched since\nJanuary 1st but did not have the notice updated.\n\nSigned-off-by: Michał Górny <mgorny@gentoo.org>","commitid":"6568a730a830fd8a93b28162a01787600d19d307","committime":"2020-02-11T17:05:13","packageid":70229,"repoid":1,"summary":"*\/*: Bump copyright on files touched this year"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"4443176afdce1764564093a0a18f21777feb3035","committime":"2020-01-19T13:45:46","packageid":70229,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"asturm@gentoo.org","authorname":"Andreas Sturmlechner","body":"Signed-off-by: Andreas Sturmlechner <asturm@gentoo.org>","commitid":"608fd301fcfc4f1d804d948245e623ebfbf75d74","committime":"2019-12-30T19:12:17","packageid":70229,"repoid":1,"summary":"*\/*: Switch proxy-maint to cmake.eclass"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"cb5a55b26b84b68b2f2ffc30618584cc09cb65a6","committime":"2019-10-14T23:10:15","packageid":70229,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"andrey_utkin@gentoo.org","authorname":"Andrey Utkin","body":"It used the filename \"v2.3.2.tar.gz\".\n\nThanks to repomirrorci@gentoo.org.\n\nPackage-Manager: Portage-2.3.66, Repoman-2.3.16\nSigned-off-by: Andrey Utkin <andrey_utkin@gentoo.org>","commitid":"d99c859cd8b687bd8c2a3b4e0b1ae4669fae8c5c","committime":"2019-10-14T22:48:24","packageid":70229,"repoid":1,"summary":"net-libs\/libsignal-protocol-c: fix bad distfile name"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"6a45e74e021747918a1b0a0a8c1dca47ead98303","committime":"2019-10-14T18:50:15","packageid":70229,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"andrey_utkin@gentoo.org","authorname":"Andrey Utkin","body":"Needed as a dependency enabling OMEMO functionality of net-im\/profanity.\n\nCopied from https:\/\/github.com\/optmzr\/gentoo-overlay .\n\nBug: https:\/\/bugs.gentoo.org\/697644\nPackage-Manager: Portage-2.3.66, Repoman-2.3.16\nSigned-off-by: Andrey Utkin <andrey_utkin@gentoo.org>","commitid":"5a8af17ecf5a1c663c1a6dd27b55e8baedddee42","committime":"2019-10-14T17:47:33","packageid":70229,"repoid":1,"summary":"net-libs\/libsignal-protocol-c: add new package"}],"dependencies":[],"depending":[{"block":false,"categoryid":414,"description":"A console based XMPP client inspired by Irssi","ebuildids":[870764,870764,877825,877825],"firstseen":"2019-05-06T19:42:05.843143","name":"profanity","packageid":69834,"summary":"Profanity is a console based XMPP client written in C using ncurses and libstrophe, inspired by Irssi."}],"ebuilds":[{"archs":["amd64","arm64","x86"],"ebuildid":787597,"firstseen":"2023-05-18T08:57:41.250691","license":"GPL-3","moddate":"2026-03-28T18:04:21","packageid":70229,"repoid":1,"slot":"0","uses":[],"version":"2.3.3-r1"}],"masks":[],"package":{"categoryid":320,"description":"Signal Protocol C Library","firstseen":"2019-10-14T19:59:57.477909","name":"libsignal-protocol-c","packageid":70229},"rdependencies":[],"repos":[{"branch":"master","lastcommit":"52197549fd3431fa256b8edbafdcd3702dd0e134","name":"gentoo","path":"\/usr\/portage","repoid":1,"upstream":"origin"}],"tracked":false,"urls":["https:\/\/github.com\/signalapp\/libsignal-protocol-c","https:\/\/signal.org\/"],"uses":[]}