Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: prometheus3.5: prometheus3.5-3.5.5-0.6.hum1 aarch64, x8664 prometheus3.5-3.5.5-0.6.hum1.src src Security Fixes: prometheus3.5: CVE-2026-53669...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: prometheus3.13: prometheus3.13-3.13.1-0.5.hum1 aarch64, x8664 prometheus3.13-3.13.1-0.5.hum1.src src Security Fixes: prometheus3.13: CVE-2026-53669...

CVE-2026-18381 Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_address

A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-account bearer token to queries sent to this...

Security update for prometheus-ha_cluster_exporter

This update for prometheus-haclusterexporter fixes the following issue: CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: Release 1.4.2 Use proper obs time forma...

SUSE-SU-2026:3421-1 Security update for prometheus-ha_cluster_exporter

This update for prometheus-haclusterexporter fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266552. Other updates and bugfixes: - Release 1.4.2 Use proper obs time...

CLEANSTART-2026-ZZ86582 Security fixes in prometheus-operator-fips 0.86.2-r0

Package prometheus-operator-fips version 0.86.2-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-AV37069 Security fixes in prometheus-mysqld-exporter 0.16.0-r2

Package prometheus-mysqld-exporter version 0.16.0-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-UQ52900 Security fixes in prometheus-blackbox-exporter 0.28.0-r1

Package prometheus-blackbox-exporter version 0.28.0-r1 fixes 2 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-NT47758 Security fixes in prometheus 2.27.1-r0

Package prometheus version 2.27.1-r0 fixes 1 vulnerabilities: CVE-2021-29622...

CLEANSTART-2026-TR82670 Security fixes in prometheus-redis-exporter 1.87.0-r0

Package prometheus-redis-exporter version 1.87.0-r0 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-JP03758 Security fixes in prometheus-operator 0.90.1-r1

Package prometheus-operator version 0.90.1-r1 fixes 3 vulnerabilities: CVE-2026-42504, CVE-2026-42507, CVE-2026-27145...

CLEANSTART-2026-WI70970 Security fixes in prometheus-fips 3.9.0-r0

Package prometheus-fips version 3.9.0-r0 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-ZM91572 Security fixes in prometheus-mysqld-exporter 0.19.0-r0

Package prometheus-mysqld-exporter version 0.19.0-r0 fixes 1 vulnerabilities: CVE-2026-26958...

CLEANSTART-2026-RM44589 Security fixes in prometheus-node-exporter-fips 1.8.2-r0

Package prometheus-node-exporter-fips version 1.8.2-r0 fixes 1 vulnerabilities: ghsa-6v2p-p543-phr9...

CLEANSTART-2026-YA69220 Security fixes in prometheus 3.11.3-r2

Package prometheus version 3.11.3-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-SP33530 Security fixes in prometheus-nats-exporter 0.16.0-r0

Package prometheus-nats-exporter version 0.16.0-r0 fixes 1 vulnerabilities: ghsa-fhg8-qxh5-7q3w...

CLEANSTART-2026-LG92218 Security fixes in prometheus-redis-exporter-fips 1.80.2-r0

Package prometheus-redis-exporter-fips version 1.80.2-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-JU04978 Security fixes in prometheus-elasticsearch-exporter 1.10.0-r0

Package prometheus-elasticsearch-exporter version 1.10.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...

CLEANSTART-2026-ET08057 Security fixes in prometheus-operator-fips 0.87.0-r1

Package prometheus-operator-fips version 0.87.0-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-KW76884 Security fixes in prometheus 3.9.0-r0

Package prometheus version 3.9.0-r0 fixes 1 vulnerabilities: CVE-2026-24051...