Fedora 36: golang-sourcegraph-appdash 2022-5038c3236c | LinuxSecuri...
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-5038c3236c
2022-07-31 01:30:22.784813
--------------------------------------------------------------------------------

Name        : golang-sourcegraph-appdash
Product     : Fedora 36
Version     : 0
Release     : 0.10.20210113gitebfcffb.fc36
URL         : https://github.com/sourcegraph/appdash
Summary     : Application tracing system for Go, based on Google's Dapper
Description :

Appdash is an application tracing system for Go, based on Google's Dapper and
Twitter's Zipkin.

Appdash allows you to trace the end-to-end handling of requests and operations
in your application (for perf and debugging). It displays timings and
application-specific metadata for each step, and it displays a tree and timeline
for each request and its children.

To use appdash, you must instrument your application with calls to an appdash
recorder. You can record any type of event or operation. Recorders and schemas
for HTTP (client and server) and SQL are provided, and you can write your own.

--------------------------------------------------------------------------------
Update Information:

Rebuild to mitigate
CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang  ---
See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more
information about the specific vulnerabilities.  ----  Update to latest commit
as of 20220719  ----  Added      Experimental: nebula clients can be configured
to act as relays for other nebula clients.     Primarily useful when stubborn
NATs make a direct tunnel impossible. (#678)      Configuration option to report
manually specified ip:ports to lighthouses. (#650)      Windows arm64 build.
(#638)      punchy and most lighthouse config options now support hot reloading.
(#649)  Changed      Build against go 1.18. (#656)      Promoted routines config
from experimental to supported feature. (#702)      Dependencies updated. (#664)
Fixed      Packets destined for the same host that sent it will be returned on
MacOS.     This matches the default behavior of other operating systems. (#501)
unsafe_route configuration will no longer crash on Windows. (#648)      A few
panics that were introduced in 1.5.x. (#657, #658, #675)  Security      You can
set listen.send_recv_error to control the conditions in which     recv_error
messages are sent. Sending these messages can expose the fact     that Nebula is
running on a host, but it speeds up re-handshaking. (#670)  Removed      x509
config stanza support has been removed. (#685)  ----  bump to v4.2.0-rc1  ----
fix package dir listing  ----  resolve build issues and list new shell
completion files  ----  Release of stargz snapshotter v0.12.0. Please see the
release note for details: https://github.com/containerd/stargz-
snapshotter/releases/tag/v0.12.0   ----  Fix extracting network metric
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jul 19 2022 Maxwell G  - 0-0.10
- Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in
  golang
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-5038c3236c' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Fedora 36: golang-sourcegraph-appdash 2022-5038c3236c

July 30, 2022
Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more in...

Summary

Appdash is an application tracing system for Go, based on Google's Dapper and

Twitter's Zipkin.

Appdash allows you to trace the end-to-end handling of requests and operations

in your application (for perf and debugging). It displays timings and

application-specific metadata for each step, and it displays a tree and timeline

for each request and its children.

To use appdash, you must instrument your application with calls to an appdash

recorder. You can record any type of event or operation. Recorders and schemas

for HTTP (client and server) and SQL are provided, and you can write your own.

Update Information:

Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities. ---- Update to latest commit as of 20220719 ---- Added Experimental: nebula clients can be configured to act as relays for other nebula clients. Primarily useful when stubborn NATs make a direct tunnel impossible. (#678) Configuration option to report manually specified ip:ports to lighthouses. (#650) Windows arm64 build. (#638) punchy and most lighthouse config options now support hot reloading. (#649) Changed Build against go 1.18. (#656) Promoted routines config from experimental to supported feature. (#702) Dependencies updated. (#664) Fixed Packets destined for the same host that sent it will be returned on MacOS. This matches the default behavior of other operating systems. (#501) unsafe_route configuration will no longer crash on Windows. (#648) A few panics that were introduced in 1.5.x. (#657, #658, #675) Security You can set listen.send_recv_error to control the conditions in which recv_error messages are sent. Sending these messages can expose the fact that Nebula is running on a host, but it speeds up re-handshaking. (#670) Removed x509 config stanza support has been removed. (#685) ---- bump to v4.2.0-rc1 ---- fix package dir listing ---- resolve build issues and list new shell completion files ---- Release of stargz snapshotter v0.12.0. Please see the release note for details: https://github.com/containerd/stargz- snapshotter/releases/tag/v0.12.0 ---- Fix extracting network metric

Change Log

* Tue Jul 19 2022 Maxwell G - 0-0.10 - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang

References

Fedora Update Notification FEDORA-2022-5038c3236c 2022-07-31 01:30:22.784813 Name : golang-sourcegraph-appdash Product : Fedora 36 Version : 0 Release : 0.10.20210113gitebfcffb.fc36 URL : https://github.com/sourcegraph/appdash Summary : Application tracing system for Go, based on Google's Dapper Description : Appdash is an application tracing system for Go, based on Google's Dapper and Twitter's Zipkin. Appdash allows you to trace the end-to-end handling of requests and operations in your application (for perf and debugging). It displays timings and application-specific metadata for each step, and it displays a tree and timeline for each request and its children. To use appdash, you must instrument your application with calls to an appdash recorder. You can record any type of event or operation. Recorders and schemas for HTTP (client and server) and SQL are provided, and you can write your own.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-5038c3236c' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
Name : golang-sourcegraph-appdash
Product : Fedora 36
Version : 0
Release : 0.10.20210113gitebfcffb.fc36
URL : https://github.com/sourcegraph/appdash
Summary : Application tracing system for Go, based on Google's Dapper

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.