-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-ffe4a1cedd 2022-02-16 01:25:55.828537 --------------------------------------------------------------------------------
Name : protobuf Product : Fedora 35 Version : 3.14.0 Release : 7.fc35 URL : https://github.com/protocolbuffers/protobuf Summary : Protocol Buffers - Google's data interchange format Description : Protocol Buffers are a way of encoding structured data in an efficient yet extensible format. Google uses Protocol Buffers for almost all of its internal RPC protocols and file formats.
Protocol buffers are a flexible, efficient, automated mechanism for serializing structured data ��� think XML, but smaller, faster, and simpler. You define how you want your data to be structured once, then you can use special generated source code to easily write and read your structured data to and from a variety of data streams and using a variety of languages. You can even update your data structure without breaking deployed programs that are compiled against the "old" format.
-------------------------------------------------------------------------------- Update Information:
Security fix for CVE-2021-22570 -------------------------------------------------------------------------------- ChangeLog:
* Sat Feb 12 2022 Adrian Reber adrian@lisas.de - 3.14.0-7 - Applied patch for for CVE-2021-22570 (#2050492) -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2049429 - CVE-2021-22570 protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference https://bugzilla.redhat.com/show_bug.cgi?id=2049429 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-ffe4a1cedd' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------