Fedora 36: 2022-5ef0bd9a27 Moderate: CAdvisor Update for Golang Threats

cAdvisor (Container Advisor) provides container users an understanding of the

resource usage and performance characteristics of their running containers. It

is a running daemon that collects, aggregates, processes, and exports

information about running containers. Specifically, for each container it keeps

resource isolation parameters, historical resource usage, histograms of complete

historical resource usage and network statistics. This data is exported by

container and machine-wide.

cAdvisor has native support for Docker containers and should support just about

any other container type out of the box. We strive for support across the board

so feel free to open an issue if that is not the case. cAdvisor's container

abstraction is based on lmctfy's so containers are inherently nested

hierarchically.

Rebuild to mitigate

CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang ---See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more

information about the specific vulnerabilities.

* Tue Jul 19 2022 Maxwell G 0.44.1-4

- Rebuild for

CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang

su -c 'dnf upgrade --advisory FEDORA-2022-5ef0bd9a27' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure