[SECURITY] Fedora 36 Update: GitPython-3.1.30-1.fc36
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-ce7369b9ec
2023-01-07 01:13:26.595049
--------------------------------------------------------------------------------
Name : GitPython
Product : Fedora 36
Version : 3.1.30
Release : 1.fc36
URL : https://github.com/gitpython-developers/GitPython
Summary : Python Git Library
Description :
GitPython is a python library used to interact with git repositories,
high-level like git-porcelain, or low-level like git-plumbing.
It provides abstractions of git objects for easy access of repository data, and
additionally allows you to access the git repository more directly using either
a pure python implementation, or the faster, but more resource intensive git
command implementation.
The object database implementation is optimized for handling large quantities
of objects and large datasets, which is achieved by using low-level structures
and data streaming.
--------------------------------------------------------------------------------
Update Information:
Latest upstream release with fix for CVE-2022-24439.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Dec 29 2022 Lubom��r Sedl���� <lsedlar(a)redhat.com> - 3.1.30-1
- Rebase to latest version
* Wed Jul 20 2022 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.1.27-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Mon Jun 13 2022 Python Maint <python-maint(a)redhat.com> - 3.1.27-2
- Rebuilt for Python 3.11
* Sat May 28 2022 Kevin Fenzi <kevin(a)scrye.com> - 3.1.27-1
- Update to 3.1.27. Fixes rhbz#2056218
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2151583 - CVE-2022-24439 GitPython: improper user input validation leads into
a RCE
https://bugzilla.redhat.com/show_bug.cgi?id=2151583
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-ce7369b9ec' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------