From 612ebd6cb8ae9701224741dc72085320f0b176f9 Mon Sep 17 00:00:00 2001 From: CentOS Sources Date: Tue, 27 Sep 2022 09:24:58 -0400 Subject: [PATCH] import grafana-pcp-3.2.0-3.el9 --- SPECS/grafana-pcp.spec | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/SPECS/grafana-pcp.spec b/SPECS/grafana-pcp.spec index a1b2e2e..145025b 100644 --- a/SPECS/grafana-pcp.spec +++ b/SPECS/grafana-pcp.spec @@ -24,7 +24,7 @@ end} Name: grafana-pcp Version: 3.2.0 -Release: 2%{?dist} +Release: 3%{?dist} Summary: Performance Co-Pilot Grafana Plugin License: ASL 2.0 URL: https://github.com/performancecopilot/grafana-pcp @@ -198,8 +198,16 @@ export GOPATH=%{_builddir} %changelog -* Fri Mar 18 2022 Andreas Gerstmayr 3.2.0-2 -- resolves rhbz#1975396 +* Wed Aug 24 2022 Andreas Gerstmayr 3.2.0-3 +- bump NVR + +* Thu Aug 11 2022 Andreas Gerstmayr 3.2.0-2 +- resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header +- resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working +- resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read +- resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob +- resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob +- resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode * Fri Nov 12 2021 Andreas Gerstmayr 3.2.0-1 - update to 3.2.0 tagged upstream community sources, see CHANGELOG