[SECURITY] Fedora 38 Update: picocli-4.7.4-1.fc38
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-27ec59a486
2023-07-06 02:18:06.648413
--------------------------------------------------------------------------------
Name : picocli
Product : Fedora 38
Version : 4.7.4
Release : 1.fc38
URL : https://github.com/remkop/picocli
Summary : Java command line parser with both an annotations API and a programmatic
API
Description :
Picocli is a modern library and framework, written in Java, that contains both
an annotations API and a programmatic API. It features usage help with ANSI
colors and styles, TAB auto-completion and nested sub-commands. In a single
file, so you can include it in source form. This lets users run picocli-based
applications without requiring picocli as an external dependency.
--------------------------------------------------------------------------------
Update Information:
Update to version 4.7.4 Security fix for CVE-2022-41854
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 26 2023 Didik Supriadi <didiksupriadi41(a)fedoraproject.org> - 4.7.4-1
- Update to version 4.7.4
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2151988 - CVE-2022-41854 dev-java/snakeyaml: DoS via stack overflow
https://bugzilla.redhat.com/show_bug.cgi?id=2151988
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-27ec59a486' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------