stable

golang-github-chromedp-cdproto-0-0.9.20220719git285dfb4.fc36, golang-k8s-sample-controller-1.22.0-5.fc36, & 87 more

FEDORA-2022-5038c3236c created by gotmax23 a year ago for Fedora 36

Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang


See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities.


Update to latest commit as of 20220719


Added

Experimental: nebula clients can be configured to act as relays for other nebula clients.
Primarily useful when stubborn NATs make a direct tunnel impossible. (#678)

Configuration option to report manually specified ip:ports to lighthouses. (#650)

Windows arm64 build. (#638)

punchy and most lighthouse config options now support hot reloading. (#649)

Changed

Build against go 1.18. (#656)

Promoted routines config from experimental to supported feature. (#702)

Dependencies updated. (#664)

Fixed

Packets destined for the same host that sent it will be returned on MacOS.
This matches the default behavior of other operating systems. (#501)

unsafe_route configuration will no longer crash on Windows. (#648)

A few panics that were introduced in 1.5.x. (#657, #658, #675)

Security

You can set listen.send_recv_error to control the conditions in which
recv_error messages are sent. Sending these messages can expose the fact
that Nebula is running on a host, but it speeds up re-handshaking. (#670)

Removed

x509 config stanza support has been removed. (#685)

bump to v4.2.0-rc1


fix package dir listing


resolve build issues and list new shell completion files


Release of stargz snapshotter v0.12.0. Please see the release note for details: https://github.com/containerd/stargz-snapshotter/releases/tag/v0.12.0


Fix extracting network metric

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-5038c3236c

This update's test gating status has been changed to 'waiting'.

a year ago

This update has obsoleted golang-x-mobile-0-0.12.20220719git8578da9.fc36, and has inherited its bugs and notes.

a year ago

This update has obsoleted nebula-1.6.0-1.fc36, and has inherited its bugs and notes.

a year ago

This update has obsoleted podman-4.2.0~rc1-2.fc36, and has inherited its bugs and notes.

a year ago

This update has obsoleted skopeo-1.9.0-3.fc36, and has inherited its bugs and notes.

a year ago

This update has obsoleted stargz-snapshotter-0.12.0-1.fc36, and has inherited its bugs and notes.

a year ago

This update has obsoleted xe-guest-utilities-latest-7.30.0-5.fc36, and has inherited its bugs and notes.

a year ago

gotmax23 edited this update.

a year ago

This update's test gating status has been changed to 'failed'.

a year ago

@gotmax23 Can you remove the podman-4.2.0~rc1-3 build from this update. We don't want it to land in the updates repo.

gotmax23 edited this update.

a year ago

This update's test gating status has been changed to 'waiting'.

a year ago

I will remove it later. I'm AFK right now. Do know that it will be vulnerable to CVEs until you push another update. Next time, please don't push commits to distgit that you don't want to be built.

@gotmax23 well, we want it to be built and in updates-testing, just not in updates. Is there a form or something I could fill out for an exception for podman, buildah, skopeo and other tools maintained by the containers team?

gotmax23 edited this update.

Removed build(s):

  • podman-4.2.0~rc1-3.fc36

Karma has been reset.

a year ago

This update has been submitted for testing by gotmax23.

a year ago

@lsm5, that's not really how updates-testing works. It's for ensuring that updates are tested before they get pushed to stable. If you want to test RCs and not have them pushed, you should do it in COPR, in upstream CI, or somewhere else.

This update's test gating status has been changed to 'failed'.

a year ago

This update has been pushed to testing.

a year ago
User Icon decathorpe commented & provided feedback a year ago
karma

Syncthing continues to work fine after the rebuild.

User Icon atim provided feedback a year ago
karma
User Icon mhayden commented & provided feedback a year ago
karma

No issues noted.

User Icon andilinux commented & provided feedback a year ago
karma

works

gotmax23 edited this update.

a year ago

This update's test gating status has been changed to 'waiting'.

a year ago

This update's test gating status has been changed to 'failed'.

a year ago

This update's test gating status has been changed to 'waiting'.

a year ago

This update's test gating status has been changed to 'passed'.

a year ago

This update has been submitted for stable by bodhi.

a year ago

This update has been pushed to stable.

a year ago

Please login to add feedback.

Metadata
Type
security
Severity
medium
Karma
4
Signed
Content Type
RPM
Test Gating
Builds
89
Settings
Unstable by Karma
-3
Stable by Karma
2
Stable by Time
7 days
Dates
submitted
a year ago
in testing
a year ago
in stable
a year ago
modified
a year ago

Automated Test Results