cadvisor/0.49.1-r1: cve remediation

[octo-sts]

cadvisor/0.49.1-r1: fix GHSA-8r3f-844c-mc37

Advisory data: https://github.com/wolfi-dev/advisories/blob/main/cadvisor.advisories.yaml

[github-actions]

Package cadvisor: Click to expand/collapse

Package cadvisor:

.PKGINFO metadata:

  (
  	"""
- 	# Generated by melange v0.6.5-2-g0b257b0
+ 	# Generated by melange v0.6.9-24-gadd77db
  	pkgname = cadvisor
- 	pkgver = 0.49.1-r1
+ 	pkgver = 0.49.1-r2
  	arch = x86_64
- 	size = 36513729
+ 	size = 36513730
  	origin = cadvisor
  	pkgdesc = Analyzes resource usage and performance characteristics of running containers.
  	url = 
- 	commit = c1da1f3f8bc8ca0e6119db7db67107f348bbca89
- 	builddate = 1709363001
+ 	commit = 37ec273090280572f375e98fe66b4dc8092a5e5e
  	license = Apache-2.0
  	depend = so:ld-linux-x86-64.so.2
  	depend = so:libc.so.6
- 	provides = cmd:cadvisor=0.49.1-r1
- 	datahash = fc9cbbde1516e1d0884bea6e19ca9669688bb68eb0e050d605e028f5f485f1ef
+ 	provides = cmd:cadvisor=0.49.1-r2
+ 	datahash = 7232f72fec71cb007acac10d728cd612733e3870e7ec3d8ee81daeef3a2fe5ca
  	"""
  )

Modified: /usr/bin/cadvisor

[hectorj2f]

Okay, it seems something didn't work as expected. I will check it again

[hectorj2f]

@dlorenc we need to add it to the replaces block. It seems it gets downgraded by the installation scripts of cadvisor. I can make that change in a while if you don't fix it before.

[github-actions]

Package cadvisor: Click to expand/collapse

Package cadvisor:

.PKGINFO metadata:

  (
  	"""
- 	# Generated by melange v0.6.5-2-g0b257b0
+ 	# Generated by melange v0.6.9-24-gadd77db
  	pkgname = cadvisor
- 	pkgver = 0.49.1-r1
+ 	pkgver = 0.49.1-r2
  	arch = x86_64
- 	size = 36513729
+ 	size = 36624554
  	origin = cadvisor
  	pkgdesc = Analyzes resource usage and performance characteristics of running containers.
  	url = 
- 	commit = c1da1f3f8bc8ca0e6119db7db67107f348bbca89
- 	builddate = 1709363001
+ 	commit = b9f2558f61f35a2d98be6b1e10e4fe9fc2167473
  	license = Apache-2.0
  	depend = so:ld-linux-x86-64.so.2
  	depend = so:libc.so.6
- 	provides = cmd:cadvisor=0.49.1-r1
- 	datahash = fc9cbbde1516e1d0884bea6e19ca9669688bb68eb0e050d605e028f5f485f1ef
+ 	provides = cmd:cadvisor=0.49.1-r2
+ 	datahash = a0a0ae4e377aea4bbdf5c47be4ca5d798467e1e2fca24f6856cde85ef03011bf
  	"""
  )

Modified: /usr/bin/cadvisor