[SECURITY] Fedora 34 Update: httpie-3.1.0-1.fc34
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-fbf40ae0e4
2022-03-17 14:42:11.485409
--------------------------------------------------------------------------------
Name : httpie
Product : Fedora 34
Version : 3.1.0
Release : 1.fc34
URL : https://httpie.org/
Summary : A Curl-like tool for humans
Description :
HTTPie is a CLI HTTP utility built out of frustration with existing tools. The
goal is to make CLI interaction with HTTP-based services as human-friendly as
possible.
HTTPie does so by providing an http command that allows for issuing arbitrary
HTTP requests using a simple and natural syntax and displaying colorized
responses.
--------------------------------------------------------------------------------
Update Information:
- **SECURITY** Fixed the [vulnerability](https://github.com/httpie/httpie/securi
ty/advisories/GHSA-9w4w-cpc8-h2fq) that caused exposure of cookies on redirects
to third party hosts. ([#1312](https://github.com/httpie/httpie/pull/1312)) -
Fixed escaping of integer indexes with multiple backslashes in the nested JSON
builder. ([#1285](https://github.com/httpie/httpie/issues/1285)) - Fixed
displaying of status code without a status message on non-`auto` themes.
([#1300](https://github.com/httpie/httpie/issues/1300)) - Fixed redundant
issuance of stdin detection warnings on some rare cases due to underlying
implementation. ([#1303](https://github.com/httpie/httpie/pull/1303)) - Fixed
double `--quiet` so that it will now suppress all python level warnings.
([#1271](https://github.com/httpie/httpie/issues/1271)) - Added support for
specifying certificate private key passphrases through `--cert-key-pass` and
prompts. ([#946](https://github.com/httpie/httpie/issues/946)) - Added `httpie
cli export-args` command for exposing the parser specification for the
`http`/`https` commands. ([#1293](https://github.com/httpie/httpie/pull/1293)) -
Improved regulation of top-level arrays. ([#1292](https://github.com/httpie/http
ie/commit/225dccb2186f14f871695b6c4e0bfbcdb2e3aa28)) - Improved UI layout for
standalone invocations. ([#1296](https://github.com/httpie/httpie/pull/1296))
--------------------------------------------------------------------------------
ChangeLog:
* Tue Mar 8 2022 Miro Hron��ok <mhroncok(a)redhat.com> - 3.1.0-1
- Update to 3.1.0
- Fixes: rhbz#2061597
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2063872 - CVE-2022-24737 httpie: cookie exposure to third parties
https://bugzilla.redhat.com/show_bug.cgi?id=2063872
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-fbf40ae0e4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------