Fedora 36 golang-github-shopify-toxiproxy Advisory for CVE Mitigation

Toxiproxy is a framework for simulating network conditions. It's made

specifically to work in testing, CI and development environments, supporting

deterministic tampering with connections, but with support for randomized

chaos and customization. Toxiproxy is the tool you need to prove with tests

that your application doesn't have single points of failure.

Toxiproxy usage consists of two parts. A TCP proxy written in Go (what this

repository contains) and a client communicating with the proxy over HTTP. You

configure your application to make all test connections go through Toxiproxy

and can then manipulate their health via HTTP. See Usage below on how to set

up your project.

Rebuild to mitigate

CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang ---See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more

information about the specific vulnerabilities. ---- enable s390x build

(rhbz#1971028)

* Tue Jul 19 2022 Maxwell G - 2.1.4-11

- Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in

golang

* Sat Jul 9 2022 Maxwell G - 2.1.4-10

- Rebuild for CVE-2022-{24675,28327,29526 in golang}

su -c 'dnf upgrade --advisory FEDORA-2022-37aef44d1e' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure