Lucene search

K
fedoraFedoraFEDORA:C21C1304C819
HistoryJul 04, 2022 - 1:35 a.m.

[SECURITY] Fedora 36 Update: golang-github-hashicorp-serf-0.9.5-5.fc36

2022-07-0401:35:22
lists.fedoraproject.org
13
fedora 36
golang
service discovery
orchestration
decentralized
gossip protocol
fault-tolerant
lightweight

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

8.8

Confidence

Low

EPSS

0.006

Percentile

77.9%

Serf is a decentralized solution for service discovery and orchestration that is lightweight, highly available, and fault tolerant. Serf runs on Linux, Mac OS X, and Windows. An efficient and lightweight gossip protocol is used to communicate with other nodes. Serf can detect node failur es and notify the rest of the cluster. An event system is built on top of Serf, letting you use Serf’s gossip protocol to propagate events such as deploys, configuration changes, etc. Serf is completely masterless with no single point of failure. Here are some example use cases of Serf, though there are many others: - Discovering web servers and automatically adding them to a load balancer - Organizing many memcached or redis nodes into a cluster, perhaps with something like twemproxy or maybe just configuring an application with the address of all the nodes - Triggering web deploys using the event system built on top of Serf - Propagating changes to configuration to relevant nodes. - Updating DNS records to reflect cluster changes as they occur. - Much, much more.

OSVersionArchitecturePackageVersionFilename
Fedora36anygolang-github-hashicorp-serf< 0.9.5UNKNOWN

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

8.8

Confidence

Low

EPSS

0.006

Percentile

77.9%

Related for FEDORA:C21C1304C819