[SECURITY] Fedora 34 Update: protobuf-3.14.0-7.fc34
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-2d3e6eb9e4
2022-02-27 03:21:19.355380
--------------------------------------------------------------------------------
Name : protobuf
Product : Fedora 34
Version : 3.14.0
Release : 7.fc34
URL : https://github.com/protocolbuffers/protobuf
Summary : Protocol Buffers - Google's data interchange format
Description :
Protocol Buffers are a way of encoding structured data in an efficient
yet extensible format. Google uses Protocol Buffers for almost all of
its internal RPC protocols and file formats.
Protocol buffers are a flexible, efficient, automated mechanism for
serializing structured data ��� think XML, but smaller, faster, and
simpler. You define how you want your data to be structured once, then
you can use special generated source code to easily write and read
your structured data to and from a variety of data streams and using a
variety of languages. You can even update your data structure without
breaking deployed programs that are compiled against the "old" format.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-22570
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 12 2022 Adrian Reber <adrian(a)lisas.de> - 3.14.0-7
- Applied patch for for CVE-2021-22570 (#2050492)
* Fri Jul 23 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.14.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Fri Jun 4 2021 Python Maint <python-maint(a)redhat.com> - 3.14.0-5
- Rebuilt for Python 3.10
* Thu May 6 2021 Adrian Reber <adrian(a)lisas.de> - 3.14.0-4
- Reintroduce the emacs subpackage to avoid file conflicts between
protobuf-compiler.x86_64 and protobuf-compiler.i686
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2049429 - CVE-2021-22570 protobuf: Incorrect parsing of nullchar in the proto
symbol leads to Nullptr dereference
https://bugzilla.redhat.com/show_bug.cgi?id=2049429
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-2d3e6eb9e4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------