The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3267-1 advisory. golang-github-prometheus-prometheus: – Security issues fixed: * CVE-2024-6104: Update go-retryablehttp to version 0.7.7 (bsc#1227038) * CVE-2023-45142: Updated otelhttp to version 0.46.1 (bsc#1228556) – Require Go > 1.20 for building – Migrate from `disabled` to `manual` service mode – Update to 2.45.6 (jsc#PED-3577): * Security fixes in dependencies – Update to 2.45.5: * [BUGFIX] tsdb/agent: ensure that new series get written to WAL on rollback. * [BUGFIX] Remote write: Avoid a race condition when applying configuration. – Update to 2.45.4: * [BUGFIX] Remote read: Release querier resources before encoding the results. – Update to 2.45.3: * [BUGFIX] TSDB: Remove double memory snapshot on shutdown. – Update to 2.45.2: * [BUGFIX] TSDB: Fix PostingsForMatchers race with creating new series. – Update to 2.45.1: * [ENHANCEMENT] Hetzner SD: Support larger ID's that will be used by Hetzner in September. * [BUGFIX] Linode SD: Cast InstanceSpec values to int64 to avoid overflows on 386 architecture. * [BUGFIX] TSDB: Handle TOC parsing failures. rhnlib: – Version 5.0.4-0 * Add the old TLS code for very old traditional clients still on python 2.7 (bsc#1228198) spacecmd: – Version 5.0.9-0 * Update translation strings uyuni-tools: – Version 0.1.21-0 …Read More
References
Back to Main