[SECURITY] Fedora 34 Update: nodejs-svgo-2.3.1-1.fc34
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-3f62e7d125
2021-07-06 00:44:31.538447
--------------------------------------------------------------------------------
Name : nodejs-svgo
Product : Fedora 34
Version : 2.3.1
Release : 1.fc34
URL : https://github.com/svg/svgo
Summary : Nodejs-based tool for optimizing SVG vector graphics files
Description :
SVG Optimizer is a Nodejs-based tool for optimizing SVG vector graphics files.
Why?
SVG files, especially those exported from various editors, usually contain a
lot of redundant and useless information. This can include editor metadata,
comments, hidden elements, default or non-optimal values and other stuff that
can be safely removed or converted without affecting the SVG rendering result.
--------------------------------------------------------------------------------
Update Information:
Fixes a denial-of-service vulnerability in the bundled `css-what` dependency.
For more information, see https://github.com/svg/svgo/pull/1485 and
https://app.snyk.io/vuln/SNYK-JS-CSSWHAT-1298035.
--------------------------------------------------------------------------------
ChangeLog:
* Sat Jun 26 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.3.1-1
- Update to 2.3.1 (closes RHBZ#1976511)
* Sun Jun 13 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.3.0-4
- Preserve timestamp on bundled dependency license list file
- Re-generate dependency bundle
* Wed May 12 2021 Benjamin A. Beasley <code(a)musicinmybrain.net> - 2.3.0-3
- Move ���forge��� macros to the top of the spec file
- Re-generate dependency bundle
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-3f62e7d125' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------