Summary
This update fixes the following issues:
golang-github-QubitProducts-exporter_exporter:
- Adapted to build on Enterprise Linux.
- Fix build for Red Hat 7
- Require Go >= 1.14 also for CentOS
- Add support for CentOS
- Replace %{?systemd_requires} with %{?systemd_ordering}
golang-github-lusitaniae-apache_exporter:
- Require building with Go 1.15
- Add %license macro for LICENSE file
golang-github-prometheus-node_exporter:
- CVE-2022-21698: Update vendor tarball with prometheus/client_golang 1.11.1
(bsc#1196338, jsc#SLE-24238, jsc#SLE-24239)
- Update to 1.3.0
* [CHANGE] Add path label to rapl collector #2146
* [CHANGE] Exclude filesystems under /run/credentials #2157
* [CHANGE] Add TCPTimeouts to netstat default filter #2189
* [FEATURE] Add lnstat collector for metrics from /proc/net/stat/ #1771
* [FEATURE] Add darwin powersupply collector #1777
* [FEATURE] Add support for monitoring GPUs on Linux #1998
* [FEATURE] Add Darwin thermal collector #2032
* [FEATURE] Add os release collector #2094
* [FEATURE] Add netdev.address-info collector #2105
* [FEATURE] Add clocksource metrics to time collector #2197
* [ENHANCEMENT] Support glob textfile collector directories #1985
* [ENHANCEMENT] ethtool: Expose node_ethtool_info metric #2080
* [ENHANCEMENT] Use include/exclude flags for ethtool filtering #2165
* [ENHANCEMENT] Add flag to disable guest CPU metrics #2123
* [ENHANCEMENT] Add DMI collector #2131
* [ENHANCEMENT] Add threads metrics to processes collector #2164
* [ENHANCMMENT] Reduce timer GC delays in the Linux filesystem collector #2169
* [ENHANCMMENT] Add TCPTimeouts to netstat default filter #2189
* [ENHANCMMENT] Use SysctlTimeval for boottime collector on BSD #2208
* [BUGFIX] ethtool: Sanitize metric names #2093
* [BUGFIX] Fix ethtool collector for multiple interfaces #2126
* [BUGFIX] Fix possible panic on macOS #2133
* [BUGFIX] Collect flag_info and bug_info only for one core #2156
* [BUGFIX] Prevent duplicate ethtool metric names #2187
- Update to 1.2.2
* Bug fixes
Fix processes collector long int parsing #2112
- Update to 1.2.1
* Removed
Remove obsolete capture permission denied error patch already included upstream
Fix zoneinfo parsing prometheus/procfs#386
Fix nvme collector log noise #2091
Fix rapl collector log noise #2092
- Update to 1.2.0
* Changes
Rename filesystem collector flags to match other collectors #2012
Make node_exporter print usage to STDOUT #203
* Features
Add conntrack statistics metrics #1155
Add ethtool stats collector #1832
Add flag to ignore network speed if it is unknown #1989
Add tapestats collector for Linux #2044
Add nvme collector #2062
* Enhancements
Add ErrorLog plumbing to promhttp #1887
Add more Infiniband counters #2019
netclass: retrieve interface names and filter before parsing #2033
Add time zone offset metric #2060
Handle errors from disabled PSI subsystem #1983
Fix panic when using backwards compatible flags #2000
Fix wrong value for OpenBSD memory buffer cache #2015
Only initiate collectors once #2048
Handle small backwards jumps in CPU idle #2067
- Apply patch to capture permission denied error for 'energy_uj' file (bsc#1190535)
from https://github.com/prometheus/node_exporter/pull/2092
patterns-suse-manager:
- Golang-github-wrouesnel-postgres_exporter was renamed to prometheus-postgres_exporter
spacecmd:
- Version 4.1.18-1
* implement system.bootstrap (bsc#1194909)
spacewalk-backend:
- Version 4.1.31-1
* Fix traceback on calling spacewalk-repo-sync --show-packages
(bsc#1193238)
* Fix virt_notify SQL syntax error (bsc#1199528)
* Do not raise error on file:// based DEB repo when looking
for alternative Release files (bsc#1199142)
* Improve parsing deb packages dependencies (bsc#1194594)
* Fix reposync update notice formatting and date parsing (bsc#1194447)
* implement more decompression algorithms for reposync (bsc#1196704)
spacewalk-web:
- Version 4.1.33-1
* Added support for end of life notifications
How to apply this update:
1. Log in as root user to the SUSE Manager proxy.
2. Stop the proxy service:
spacewalk-proxy stop
3. Apply the patch using either zypper patch or YaST Online Update.
4. Start the Spacewalk service:
spacewalk-proxy start
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| SUSE · Manager Proxy Module 4.1 | golang-github-lusitaniae-apache_exporter | 0.7.0-150200.2.6.2 |
| SUSE · Manager Proxy Module 4.1 | golang-github-prometheus-node_exporter | 1.3.0-150200.3.9.3 |
| SUSE · Manager Proxy Module 4.1 | golang-github-QubitProducts-exporter_exporter | 0.4.0-150200.6.12.2 |
| SUSE · Manager Proxy Module 4.1 | patterns-suse-manager | 4.1-150200.6.12.2 |
| SUSE · Manager Proxy Module 4.1 | spacecmd | 4.1.18-150200.4.39.3 |
| SUSE · Manager Proxy Module 4.1 | spacewalk-backend | 4.1.31-150200.4.50.4 |
| SUSE · Manager Proxy Module 4.1 | spacewalk-web | 4.1.34-150200.3.47.6 |
Vulnerabilities 1
-
High 7.5
Uncontrolled Resource Consumption in promhttp
client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling around HTTP servers and clients. In client_golang prior to version 1.11.1, HTTP server is susceptible to a Denial of Ser…
References
-
report
https://bugzilla.suse.com/1190535
-
report
https://bugzilla.suse.com/1193238
-
report
https://bugzilla.suse.com/1194447
-
report
https://bugzilla.suse.com/1194594
-
report
https://bugzilla.suse.com/1194909
-
report
https://bugzilla.suse.com/1196338
-
report
https://bugzilla.suse.com/1196704
-
report
https://bugzilla.suse.com/1199142
-
report
https://bugzilla.suse.com/1199528
-
web
https://www.suse.com/security/cve/CVE-2022-21698