[SECURITY] Fedora 39 Update: diffoscope-257-1.fc39
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-3383326db4
2024-02-27 01:07:18.072468
--------------------------------------------------------------------------------
Name : diffoscope
Product : Fedora 39
Version : 257
Release : 1.fc39
URL : https://diffoscope.org/
Summary : In-depth comparison of files, archives, and directories
Description :
diffoscope will try to get to the bottom of what makes files or directories
different. It will recursively unpack archives of many kinds and transform
various binary formats into more human readable form to compare them. It can
compare two tarballs, ISO images, or PDF just as easily. The differences can
be shown in a text or HTML report.
diffoscope is developed as part of the "reproducible builds" Debian project and
was formerly known as "debbindiff".
--------------------------------------------------------------------------------
Update Information:
Small bugfix update incl. a CVE fix.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Feb 18 2024 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 257-1
- Version 257
- Fixes rhbz#2264736, CVE-2024-25711
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2264736 - CVE-2024-25711 diffoscope: <dev-util/diffoscope-257: Information
disclosure vulnerability when diffing GPG artifacts [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2264736
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-3383326db4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------