| Name: | grafana-pcp |
|---|---|
| Version: | 5.1.1 |
| Release: | 2.el9_3 |
| Architecture: | x86_64 |
| Group: | Unspecified |
| Size: | 36305742 |
| License: | ASL 2.0 |
| RPM: | grafana-pcp-5.1.1-2.el9_3.x86_64.rpm |
| Source RPM: | grafana-pcp-5.1.1-2.el9_3.src.rpm |
| Build Date: | Tue Mar 26 2024 |
| Build Host: | build-ol9-x86_64.oracle.com |
| Vendor: | Oracle America |
| URL: | https://github.com/performancecopilot/grafana-pcp |
| Summary: | Performance Co-Pilot Grafana Plugin |
| Description: | This Grafana plugin for Performance Co-Pilot includes data sources for scalable time series from pmseries(1) and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace(1), as well as several dashboards. |
- Rebuild with latest version of golang - resolves CVE-CVE-2024-1394
- update to 5.1.1 tagged upstream community sources, see CHANGELOG - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY
- update to 5.0.0 tagged upstream community sources, see CHANGELOG - install plugin in /usr/share and create symlink from /var using systemd-tmpfiles to work on rpm-ostree based distributions - revert the breaking change (change of internal plugin IDs) of upstream v5.0.0, i.e. there are no breaking changes when performing this upgrade - enable Go modules in build process - make vendor and webpack tarballs reproducible - drop makefile in favor of create_bundles.sh script
- bump NVR
- resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode