CVE-2022-1941

Advisory

Sv-dlp 2023.2.6.1 updates its dependency 'protobuf' to v4.21.6 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Changelog
Added
- **[NAVAE]** Implemented Navae Support - 29
- **[SERVICES]** Heading, Pitching and Zooming can now be set for Short URLs
- **[DOWNLOAD]** Functionality for saving individual tiles has been reinstated
- **[DOWNLOAD]** Manipulation of EXIF data under certain circumstances is now available, including:
- Panorama's date information
- Panorama's coordinates
- Panorama's camera model information
- **[DOCS]** Implement versioning for MkDocs documentation
Changed
- **[SERVICES]** Metadata is now class-based. Use `sv_dlp.metadata.dict` for dictionary equivalent
- **[GOOGLE, BAIDU, YANDEX]** Optimized download times by 45%
- **[DOCS]** Improved grammar on documentation
Security
- **[BUILD]** Updated various libraries to patch certain vulnerabilities
- `future [0.18.3]`: Python Charmers Future denial of service vulnerability
- `pillow [9.3.0]`: Pillow subject to DoS via `SAMPLESPERPIXEL` tag
- `protobuf [4.21.6]`: protobuf-cpp and protobuf-python have potential Denial of Service issue
- `certifi [2022.12.07]`: Certifi removing TrustCor root certificate
---

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1941