prometheus-ha_cluster_exporter-1.4.2-1.1 on GA media (moderate)

prometheus-haclusterexporter-1.4.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11340-1 Rating: moderate Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-39821 SUSE : 9.1...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: prometheus3.5: prometheus3.5-3.5.5-0.3.hum1 aarch64, x8664 prometheus3.5-3.5.5-0.3.hum1.src src Security Fixes: prometheus3.5: CVE-2026-56852...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, gitlab-kas, commercial-grafana, flagger-fips, kube-router-fips, karpenter, kustomize, mediamtx, flux-notification-controller-fips, pguser, syncthing-fips, ko-fips, fulcio-fips, knative-eventing-fips, aws-nuke-fips, buildkite-agent, kubo,...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, gitlab-kas, commercial-grafana, flagger-fips, kube-router-fips, karpenter, kustomize, mediamtx, flux-notification-controller-fips, pguser, syncthing-fips, ko-fips, fulcio-fips, knative-eventing-fips, aws-nuke-fips, buildkite-agent, kubo,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: prometheus3.13: prometheus3.13-3.13.1-0.3.hum1 aarch64, x8664 prometheus3.13-3.13.1-0.3.hum1.src src Security Fixes: prometheus3.13: CVE-2026-56852...

OPENSUSE-SU-2026:11340-1 prometheus-ha_cluster_exporter-1.4.2-1.1 on GA media

These are all security issues fixed in the prometheus-haclusterexporter-1.4.2-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-64065

These are all security issues fixed in the prometheus-ha cluster exporter-1.4.2-1.1 package on the GA media of openSUSE Tumbleweed...

AZL-93282 CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93279 CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

AZL-93285 CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CLEANSTART-2026-DS82965 Security fixes for CVE-2026-2303, CVE-2026-27145, CVE-2026-42504, CVE-2026-42507, ghsa-cp6g-7hqx-qxhp applied in versions: 0.89.0-r2, 0.89.0-r3

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LK99645 Security fixes for CVE-2026-2303, CVE-2026-27145, CVE-2026-42504, CVE-2026-42507 applied in versions: 0.88.1-r1, 0.88.1-r2

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HD68184 Security fixes for CVE-2026-2303, CVE-2026-42504, ghsa-cp6g-7hqx-qxhp applied in versions: 3.11.3-r2, 3.11.3-r3

Multiple security vulnerabilities affect the prometheus package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OS58683 Security fixes for CVE-2026-42504 applied in versions: 3.11.3-r2

Security vulnerability affects the prometheus package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LP13983 Security fixes for CVE-2026-2303, CVE-2026-42504, ghsa-cp6g-7hqx-qxhp applied in versions: 3.10.0-r3, 3.10.0-r4, 3.10.0-r5

Multiple security vulnerabilities affect the prometheus package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KS96802 Security fixes for CVE-2026-39822, CVE-2026-42505 applied in versions: 3.5.3-r4

Multiple security vulnerabilities affect the prometheus package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KL21881 Security fixes for CVE-2026-39822, CVE-2026-42505, CVE-2026-46600, CVE-2026-56852 applied in versions: 3.9.1-r7, 3.9.1-r8

Multiple security vulnerabilities affect the prometheus package. These issues are resolved in later releases. See references for individual vulnerability details...

[SECURITY] Fedora 43 Update: node-exporter-1.12.1-1.fc43

Prometheus exporter for hardware and OS metrics exposed by NIX kernels, writ ten in Go with pluggable metric collectors...

DEBIAN-CVE-2026-49835

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.1.0, the global wrapMetrics middleware records raw HTTP request path r.URL.Path and raw HTTP request method r.Method as Prometheus labels for latency and request count metric vectors before routing, allowing an...

CVE-2026-49835

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Prior to 2.1.0, the global wrapMetrics middleware records raw HTTP request path r.URL.Path and raw HTTP request method r.Method as Prometheus labels for latency and request count metric vectors before routing, allowing an...