[ELSA-2023-2177] grafana-pcp security and enhancement update

Severity Moderate

Affected Packages 1

CVEs 1

[5.1.1-1]
- update to 5.1.1 tagged upstream community sources, see CHANGELOG
- resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY

[5.0.0-4]
- update to 5.0.0 tagged upstream community sources, see CHANGELOG
- install plugin in /usr/share and create symlink from /var using
systemd-tmpfiles to work on rpm-ostree based distributions
- revert the breaking change (change of internal plugin IDs) of upstream v5.0.0,
i.e. there are no breaking changes when performing this upgrade
- enable Go modules in build process
- make vendor and webpack tarballs reproducible
- drop makefile in favor of create_bundles.sh script

Package	Affected Version
pkg:rpm/oraclelinux/grafana-pcp?distro=oraclelinux-9	< 5.1.1-1.el9

ID

ELSA-2023-2177

Severity

moderate

URL

https://linux.oracle.com/errata/ELSA-2023-2177.html

Published

2023-05-15T00:00:00
(16 months ago)

Modified

2023-05-15T00:00:00
(16 months ago)

Rights

Copyright 2023 Oracle, Inc.

Other Advisories

Source	# ID	Name	URL
elsa	ELSA-2023-2177		https://linux.oracle.com/errata/ELSA-2023-2177.html
CVE	CVE-2022-27664		https://linux.oracle.com/cve/CVE-2022-27664.html

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:rpm/oraclelinux/grafana-pcp?distro=oraclelinux-9	oraclelinux	grafana-pcp	< 5.1.1-1.el9	oraclelinux-9

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date