SUSE-SU-2025:01990-1

UNKNOWN

Security update for golang-github-prometheus-prometheus

Published Jun 18, 2025

Modified 7 months ago

Fix available

This update for golang-github-prometheus-prometheus fixes the following issues:

Security issues fixed:
- CVE-2023-45288: Require Go >= 1.23 for building (bsc#1236516)
- CVE-2025-22870: Bump golang.org/x/net to version 0.39.0 (bsc#1238686)
Version was updated to 2.53.4 with the following bug fixes:
- Runtime: fix GOGC is being set to 0 when installed with empty prometheus.yml file resulting high cpu usage
- Scrape: fix dropping valid metrics after previous scrape failed

SUSE:Linux Enterprise Module for Package Hub 15 SP6golang-github-prometheus-prometheus

Fixed in:

2.53.4-150100.4.26.2

SUSE:Linux Enterprise Module for Package Hub 15 SP7golang-github-prometheus-prometheus

Fixed in:

2.53.4-150100.4.26.2

SUSE:Manager Proxy Module 4.3golang-github-prometheus-prometheus

Fixed in:

2.53.4-150100.4.26.2

openSUSE:Leap 15.6firewalld-prometheus-config

Fixed in:

0.1-150100.4.26.2

openSUSE:Leap 15.6golang-github-prometheus-prometheus

Fixed in:

2.53.4-150100.4.26.2

PublishedJun 18, 2025

ModifiedJun 18, 2025