[SECURITY] Fedora 37 Update: stellarium-1.2-9.fc37
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-2cf272ad72
2023-03-29 02:35:46.540915
--------------------------------------------------------------------------------
Name : stellarium
Product : Fedora 37
Version : 1.2
Release : 9.fc37
URL : http://www.stellarium.org
Summary : Photo-realistic nightsky renderer
Description :
Stellarium is a real-time 3D photo-realistic nightsky renderer. It can
generate images of the sky as seen through the Earth's atmosphere with
more than one hundred thousand stars from the Hipparcos Catalogue,
constellations, planets, major satellites and nebulas.
--------------------------------------------------------------------------------
Update Information:
Patches for CVE-2023-28371
--------------------------------------------------------------------------------
ChangeLog:
* Mon Mar 20 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 1.2-9
- Patches for CVE-2023-28371
* Sun Mar 12 2023 Neal Gompa <ngompa(a)fedoraproject.org> - 1.2-8
- Kill TELESCOPECONTROL support on F38 due to libindi 2 incompatibility
* Thu Mar 2 2023 Mamoru TASAKA <mtasaka(a)fedoraproject.org> - 1.2-7
- F-39: kill USE_PLUGIN_TELESCOPECONTROL support due to libindi 2 incompatibility
* Wed Mar 1 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 1.2-6
- migrated to SPDX license
* Sun Feb 26 2023 Gwyn Ciesla <gwync(a)protonmail.com> - 1.2-5
- libindi rebuild.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2180112 - CVE-2023-28371 stellarium: arbitrary file write [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2180112
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-2cf272ad72' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------