AZL-42928 CVE-2024-6104 affecting package prometheus for versions less than 2.37.0-14

go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: nuclei, crossplane-provider-azure-managedidentity, gitsign, rook, flux, crossplane-provider-family-azure, kargo, actions-runner-controller, flux-image-reflector-controller, vault-csi-provider, src-fingerprint-fips, neuvector-sigstore-interface-fips, zot, sops, tkn,...

Security Bulletin: IBM DataPower Gateway is vulnerable to denial of service due to Golang Go

Summary IBM DataPower Gateway is vulnerable to denial of service due to use of Golang Go in DataPower Operator and Prometheus Metrics . CVE-2024-24783 Vulnerability Details CVEID:CVE-2024-24783 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by a flaw in the crypto/x509 packag...

OPENSUSE-SU-2024:12872-1 prometheus-postgres_exporter-0.10.1-2.1 on GA media

These are all security issues fixed in the prometheus-postgresexporter-0.10.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12691-1 prometheus-ha_cluster_exporter-1.3.1+git.1676027782.ad3c0e9-2.1 on GA media

These are all security issues fixed in the prometheus-haclusterexporter-1.3.1+git.1676027782.ad3c0e9-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13599-1 golang-github-prometheus-alertmanager-0.26.0-4.1 on GA media

These are all security issues fixed in the golang-github-prometheus-alertmanager-0.26.0-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12904-1 prometheus-blackbox_exporter-0.19.0-13.1 on GA media

These are all security issues fixed in the prometheus-blackboxexporter-0.19.0-13.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13604-1 golang-github-prometheus-prometheus-2.48.1-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-2.48.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13143-1 golang-github-prometheus-prometheus-2.46.0-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-2.46.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12650-1 golang-github-prometheus-prometheus-2.41.0-1.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-2.41.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12637-1 golang-github-prometheus-node_exporter-1.5.0-1.1 on GA media

These are all security issues fixed in the golang-github-prometheus-nodeexporter-1.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10814-1 golang-github-prometheus-prometheus-2.27.1-4.2 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-2.27.1-4.2 package on the GA media of openSUSE Tumbleweed...

Report Generation Fails with "lookup prometheus-server-exp: no such host"

Challenge After enabling Veeam Kasten for Kubernetes reports, reports are not generated. When running an on-demand report policy, the following error message is observed within the executor logs: "message":"Post "http://prometheus-server-exp:80/k10/prometheus/api/v1/query": dial tcp: lookup...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: tempo, prometheus-operator-fips, fluent-bit-plugin-loki, nuclei, rook, flux, rclone, external-secrets-fips, k8sgpt, flux-image-reflector-controller, velero-fips, step, zot, sops, restic-fips, tkn, sigstore-scaffolding-fips, prometheus, request-1276, pulumi,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: spire-server, prometheus-operator, ksops, grafana-agent-operator, step-ca, tkn, cosign, up, chezmoi, py3-azure-identity, terragrunt, restic, fulcio, cortex, py3-cassandra-medusa, flux-source-controller, rook, harbor-registry, flux, trino, rclone, druid, thanos,...

AZL-42646 CVE-2024-35255 affecting package prometheus for versions less than 2.45.4-12

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

[SECURITY] Fedora 39 Update: prometheus-podman-exporter-1.12.0-1.fc39

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

[SECURITY] Fedora 40 Update: prometheus-podman-exporter-1.12.0-1.fc40

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

Fedora 40 : prometheus-podman-exporter (2024-2f8a62d6d6)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-2f8a62d6d6 advisory. release 1.12.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...

Fedora: Security Advisory (FEDORA-2024-2f8a62d6d6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...