Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-5ef0bd9a27 2022-07-30 01:52:05.591823 --------------------------------------------------------------------------------Name : cadvisor Product : Fedora 36 Version : 0.44.1 Release : 4.fc36 URL : https://github.com/google/cadvisor Summary : Analyzes resource usage and performance characteristics of running containers Description : cAdvisor (Container Advisor) provides container users an understanding of the resource usage and performance characteristics of their running containers. It is a running daemon that collects, aggregates, processes, and exports information about running containers. Specifically, for each container it keeps resource isolation parameters, historical resource usage, histograms of complete historical resource usage and network statistics. This data is exported by container and machine-wide. cAdvisor has native support for Docker containers and should support just about any other container type out of the box. We strive for support across the board so feel free to open an issue if that is not the case. cAdvisor's container abstraction is based on lmctfy's so containers are inherently nested hierarchically. --------------------------------------------------------------------------------Update Information: Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang ---See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities. --------------------------------------------------------------------------------ChangeLog: * Tue Jul 19 2022 Maxwell G 0.44.1-4 - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-5ef0bd9a27' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
KDE Plasma 5.21.3 release. ---- Fix for CVE-2021-28117. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-85c9774673 2021-03-20 00:16:30.596946 --------------------------------------------------------------------------------Name : plasma-systemmonitor Product : Fedora 34 Version : 5.21.3 Release : 1.fc34 URL : Summary : An application for monitoring system resources Description : An interface for monitoring system sensors, process information and other system resources. --------------------------------------------------------------------------------Update Information: KDE Plasma 5.21.3 release. ---- Fix for CVE-2021-28117 --------------------------------------------------------------------------------ChangeLog: * Tue Mar 16 2021 Jan Grulich - 5.21.3-1 - 5.21.3 --------------------------------------------------------------------------------References: [ 1 ] Bug #1937887 - CVE-2021-28117 plasma-discover: missing URI scheme validation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1937887 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-85c9774673' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.