[SECURITY] Fedora 36 Update: protobuf-3.19.6-1.fc36
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-15729fa33d
2023-04-27 01:30:08.523350
--------------------------------------------------------------------------------
Name : protobuf
Product : Fedora 36
Version : 3.19.6
Release : 1.fc36
URL : https://github.com/protocolbuffers/protobuf
Summary : Protocol Buffers - Google's data interchange format
Description :
Protocol Buffers are a way of encoding structured data in an efficient
yet extensible format. Google uses Protocol Buffers for almost all of
its internal RPC protocols and file formats.
Protocol buffers are a flexible, efficient, automated mechanism for
serializing structured data ��� think XML, but smaller, faster, and
simpler. You define how you want your data to be structured once, then
you can use special generated source code to easily write and read
your structured data to and from a variety of data streams and using a
variety of languages. You can even update your data structure without
breaking deployed programs that are compiled against the "old" format.
--------------------------------------------------------------------------------
Update Information:
Selected notes from packaging changes and improvements: * 3.19.6 fixes
CVE-2022-3171 * 3.19.5 fixes CVE-2022-1941 * License updated to SPDX *
Unnecessary dependency on python3-six removed * Python extension is now the
compiled C++ version, improving performance * All subpackages now have the
license file or depend on something that does * The -vim subpackage now
depends on vim-filesystem, no longer on vim-enhanced * Added a man page for
protoc See [PR](https://src.fedoraproject.org/rpms/protobuf/pull-request/16)
for more details.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 7 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.19.6-1
- Update to 3.19.6; fix CVE-2022-3171
* Wed Dec 7 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.19.5-1
- Update to 3.19.5; fix CVE-2022-1941
* Sun Dec 4 2022 Benjamin A. Beasley <code(a)musicinmybrain.net> - 3.19.4-7
- Update License to SPDX
- Improved handling of gtest sources
- Update/correct gtest commit hash to match upstream
- Simplify the Source0 URL with a macro
- Drop manual dependency on python3-six, no longer needed
- Drop obsolete python_provide macro
- Drop python3_pkgversion macro
- Update summary and description to refer to ���Python��� instead of ���Python 3���
- Re-enable compiled Python extension on Python 3.11
- Ensure all subpackages always have LICENSE, or depend on something that does
- Remove obsolete ldconfig_scriptlets macros
- The -vim subpackage now depends on vim-filesystem, no longer on vim-enhanced
- Add a man page for protoc
- Use a macro to avoid repeating the .so version, and improve .so globs
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1831350 - protobuf-23.0-rc1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1831350
[ 2 ] Bug #2152754 - FailsToInstall perl-Alien-ProtoBuf: nothing provides
pkgconfig(protobuf) = 3.19.4 after rebasing protobuf to 3.19.6
https://bugzilla.redhat.com/show_bug.cgi?id=2152754
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-15729fa33d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------