[SECURITY] Fedora 35 Update: protobuf-3.14.0-7.fc35
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-ffe4a1cedd
2022-02-16 01:25:55.828537
--------------------------------------------------------------------------------
Name : protobuf
Product : Fedora 35
Version : 3.14.0
Release : 7.fc35
URL : https://github.com/protocolbuffers/protobuf
Summary : Protocol Buffers - Google's data interchange format
Description :
Protocol Buffers are a way of encoding structured data in an efficient
yet extensible format. Google uses Protocol Buffers for almost all of
its internal RPC protocols and file formats.
Protocol buffers are a flexible, efficient, automated mechanism for
serializing structured data ��� think XML, but smaller, faster, and
simpler. You define how you want your data to be structured once, then
you can use special generated source code to easily write and read
your structured data to and from a variety of data streams and using a
variety of languages. You can even update your data structure without
breaking deployed programs that are compiled against the "old" format.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2021-22570
--------------------------------------------------------------------------------
ChangeLog:
* Sat Feb 12 2022 Adrian Reber <adrian(a)lisas.de> - 3.14.0-7
- Applied patch for for CVE-2021-22570 (#2050492)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2049429 - CVE-2021-22570 protobuf: Incorrect parsing of nullchar in the proto
symbol leads to Nullptr dereference
https://bugzilla.redhat.com/show_bug.cgi?id=2049429
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-ffe4a1cedd' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------