[SECURITY] Fedora 38 Update: GitPython-3.1.32-1.fc38
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-1ec4e542f9
2023-08-22 17:15:50.094109
--------------------------------------------------------------------------------
Name : GitPython
Product : Fedora 38
Version : 3.1.32
Release : 1.fc38
URL : https://github.com/gitpython-developers/GitPython
Summary : Python Git Library
Description :
GitPython is a python library used to interact with git repositories,
high-level like git-porcelain, or low-level like git-plumbing.
It provides abstractions of git objects for easy access of repository data, and
additionally allows you to access the git repository more directly using either
a pure python implementation, or the faster, but more resource intensive git
command implementation.
The object database implementation is optimized for handling large quantities
of objects and large datasets, which is achieved by using low-level structures
and data streaming.
--------------------------------------------------------------------------------
Update Information:
New upstream release fixing CVE-2022-24439.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Aug 16 2023 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 3.1.32-1
- New upstream release 3.1.32
* Wed Jul 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.31-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Tue Jun 13 2023 Python Maint <python-maint(a)redhat.com> - 3.1.31-2
- Rebuilt for Python 3.12
* Tue May 23 2023 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 3.1.31-1
- Update to 3.1.31 (#2170552)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2231475 - TRIAGE-CVE-2023-40267 GitPython: Insecure non-multi options in
clone and clone_from is not blocked [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2231475
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-1ec4e542f9' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------