[SECURITY] Fedora 37 Update: GitPython-3.1.30-1.fc37
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-8146a727a8
2023-01-04 01:23:38.582818
--------------------------------------------------------------------------------
Name : GitPython
Product : Fedora 37
Version : 3.1.30
Release : 1.fc37
URL : https://github.com/gitpython-developers/GitPython
Summary : Python Git Library
Description :
GitPython is a python library used to interact with git repositories,
high-level like git-porcelain, or low-level like git-plumbing.
It provides abstractions of git objects for easy access of repository data, and
additionally allows you to access the git repository more directly using either
a pure python implementation, or the faster, but more resource intensive git
command implementation.
The object database implementation is optimized for handling large quantities
of objects and large datasets, which is achieved by using low-level structures
and data streaming.
--------------------------------------------------------------------------------
Update Information:
Latest upstream release with fix for CVE-2022-24439.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 3.1.30-1
- Rebase to latest version
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2151583 - CVE-2022-24439 GitPython: improper user input validation leads into
a RCE
https://bugzilla.redhat.com/show_bug.cgi?id=2151583
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-8146a727a8' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------