CLEANSTART-2026-MB37703 Security fixes in prometheus-node-exporter 1.8.2-r2

Package prometheus-node-exporter version 1.8.2-r2 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-BS98761 Security fixes in prometheus-mysqld-exporter 0.15.0-r1

Package prometheus-mysqld-exporter version 0.15.0-r1 fixes 20 vulnerabilities: CVE-2026-39820, CVE-2026-27143, CVE-2026-42499, CVE-2026-39836, CVE-2026-32281...

CLEANSTART-2026-YT08737 Security fixes in nginx-prometheus-exporter 1.5.1-r2

Package nginx-prometheus-exporter version 1.5.1-r2 fixes 21 vulnerabilities: CVE-2026-27143, CVE-2026-27140, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281...

CLEANSTART-2026-BH92291 Security fixes in prometheus-mysqld-exporter 0.15.0-r4

Package prometheus-mysqld-exporter version 0.15.0-r4 fixes 3 vulnerabilities: CVE-2026-42507, CVE-2026-42504, CVE-2026-27145...

CLEANSTART-2026-II25831 Security fixes in prometheus-operator 0.69.1-r1

Package prometheus-operator version 0.69.1-r1 fixes 29 vulnerabilities: ghsa-8rm2-7qqf-34qm, ghsa-wg65-39gg-5wfj, ghsa-vffh-x6r8-xx99, ghsa-fw8g-cg8f-9j28, CVE-2026-39820...

CLEANSTART-2026-TI67448 Security fixes in nginx-prometheus-exporter-fips 1.5.1-r1

Package nginx-prometheus-exporter-fips version 1.5.1-r1 fixes 30 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732...

CLEANSTART-2026-JB55968 Security fixes in prometheus-operator 0.91.0-r2

Package prometheus-operator version 0.91.0-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-UA79108 Security fixes in prometheus 3.10.0-r6

Package prometheus version 3.10.0-r6 fixes 3 vulnerabilities: CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-IM91854 Security fixes in prometheus-operator-fips 0.91.0-r0

Package prometheus-operator-fips version 0.91.0-r0 fixes 4 vulnerabilities: CVE-2026-42506, CVE-2026-42502, CVE-2026-39821, CVE-2026-27136...

Security update for prometheus-ha_cluster_exporter

This update for prometheus-haclusterexporter fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: Release 1.4.2: Use proper obs time form...

CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7

CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7. A patched version of the package is available...

CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5

CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5. A patched version of the package is available...

CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5

CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5. A patched version of the package is available...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: cert-manager, kaf, cilium, minio, kots, kyverno, elastic-agent-fips, backup-restore-operator, prometheus-operator, loki, snyk-cli, k3d, k3s, flux, telegraf, aactl, kine, zot, nerdctl, containerd, zitadel, reports-server, prometheus-mongodb-exporter, prometheus,...

prometheus-ha_cluster_exporter-1.4.2-1.1 on GA media (moderate)

prometheus-haclusterexporter-1.4.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11340-1 Rating: moderate Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-39821 SUSE : 9.1...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: cert-manager, opentelemetry-collector, livekit-egress, kaf, minio, kyverno, backup-restore-operator, kubo-fips, loki, kube-state-metrics, kubernetes-dashboard, snyk-cli, helm, tigera-operator, external-dns, k3s, livekit-cli, opentelemetry-collector-k8s, flux, runc,...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: cert-manager, opentelemetry-collector, livekit-egress, kaf, minio, kyverno, backup-restore-operator, kubo-fips, loki, kube-state-metrics, kubernetes-dashboard, snyk-cli, helm, tigera-operator, external-dns, k3s, livekit-cli, opentelemetry-collector-k8s, flux, runc,...

PT-2026-64065

These are all security issues fixed in the prometheus-ha cluster exporter-1.4.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11340-1 prometheus-ha_cluster_exporter-1.4.2-1.1 on GA media

These are all security issues fixed in the prometheus-haclusterexporter-1.4.2-1.1 package on the GA media of openSUSE Tumbleweed...

CLEANSTART-2026-DS82965 Security fixes for CVE-2026-2303, CVE-2026-27145, CVE-2026-42504, CVE-2026-42507, ghsa-cp6g-7hqx-qxhp applied in versions: 0.89.0-r2, 0.89.0-r3

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...