Skip to content
OpenAdvisories
Medium · 6.2 CVE-2022-46146 EUVD-2022-7555GHSA-7rg2-cxvp-9p7pGO-2022-1130

Prometheus Exporter Toolkit vulnerable to basic authentication bypass

Published Nov 29, 2022 · Updated Aug 3, 2024 · Assigned by GitHub_M

Vendor: prometheus Product: exporter-toolkit Package: github.com/prometheus/exporter-toolkit Package: golang-github-prometheus-exporter-toolkit Package: golang-github-prometheus-exporter-toolkit Package: prometheus Package: prometheus Package: prometheus-node-exporter Package: prometheus-process-exporter Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu

Description

Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. Versions 0.7.2 and 0.8.2 contain a fix for the issue. There is no workaround, but attacker must have access to the hashed password to use this functionality.

Affected products

VendorProductAffectedFixed
prometheus exporter-toolkit < 0.7.2, >= 0.8.0, < 0.8.2 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-github-prometheus-exporter-toolkit 0.8.2-1 —
Debian 13 golang-github-prometheus-exporter-toolkit 0.8.2-1 —
Debian 12 golang-github-prometheus-exporter-toolkit 0.8.2-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 prometheus No fix yet —
Ubuntu 25.10 prometheus No fix yet —
Ubuntu 22.04 LTS golang-github-prometheus-exporter-toolkit No fix yet —
Ubuntu 20.04 LTS prometheus No fix yet —
Ubuntu 18.04 LTS prometheus No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS prometheus No fix yet —
Ubuntu Pro 26.04 LTS prometheus No fix yet —
Ubuntu Pro 24.04 LTS prometheus No fix yet —
Ubuntu Pro 22.04 LTS prometheus No fix yet —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP5 golang-github-prometheus-prometheus 2.37.6-150100.4.17.1 SUSE-SU-2023:2598-1
SLES 15 SP4 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
SLES 15 SP4 grafana 8.5.20-150200.3.35.1 SUSE-SU-2023:0821-1
SLES 15 SP4 prometheus-ha_cluster_exporter 1.3.1+git.1676027782.ad3c0e9-150200.3.21.1 SUSE-SU-2023:0465-1
SLES 15 SP4 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2023:0812-1
SLES 15 SP3 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
SLES 15 SP3 prometheus-ha_cluster_exporter 1.3.1+git.1676027782.ad3c0e9-150200.3.21.1 SUSE-SU-2023:0465-1
SLES 15 SP3 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2023:0812-1
SLES 15 SP2 bind 9.16.6-150000.12.65.1 SUSE-SU-2023:2578-1
SLES 15 SP2 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
SLES 15 SP2 prometheus-ha_cluster_exporter 1.3.1+git.1676027782.ad3c0e9-150200.3.21.1 SUSE-SU-2023:0465-1
SLES 15 SP2 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2023:0812-1
SLES 15 SP1 bind 9.16.6-150000.12.65.1 SUSE-SU-2023:2578-1
SLES 15 SP1 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
SLES 15 SP1 prometheus-ha_cluster_exporter 1.3.1+git.1676027782.ad3c0e9-150000.1.24.1 SUSE-SU-2023:0460-1
SLES 15 SP1 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2023:0812-1
Show 29 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 golang-github-prometheus-node_exporter 1.5.0-1.24.4 SUSE-SU-2023:3867-1, SUSE-SU-2023:2183-1
SLES 12 SP4 golang-github-prometheus-node_exporter 1.5.0-1.24.4 SUSE-SU-2023:2183-1
SLES for SAP 15 SP3 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
SLES for SAP 15 SP3 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2023:0812-1
SLES for SAP 15 SP2 bind 9.16.6-150000.12.65.1 SUSE-SU-2023:2578-1
SLES for SAP 15 SP2 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
SLES for SAP 15 SP2 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2023:0812-1
SLES for SAP 15 SP1 bind 9.16.6-150000.12.65.1 SUSE-SU-2023:2578-1
SLES for SAP 15 SP1 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
SLES for SAP 15 SP1 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2023:0812-1
SLES for SAP 12 SP5 golang-github-prometheus-node_exporter 1.5.0-1.24.4 SUSE-SU-2023:3867-1, SUSE-SU-2023:2183-1
SLES for SAP 12 SP5 prometheus-ha_cluster_exporter 1.3.1+git.1676027782.ad3c0e9-4.26.1 SUSE-SU-2023:0467-1
SLES for SAP 12 SP4 golang-github-prometheus-node_exporter 1.5.0-1.24.4 SUSE-SU-2023:2183-1
SLES for SAP 12 SP4 prometheus-ha_cluster_exporter 1.3.1+git.1676027782.ad3c0e9-4.26.1 SUSE-SU-2023:0467-1
SLE Real Time 15 SP3 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
SLE Real Time 15 SP3 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2023:0812-1
SLE HPC 15 SP3 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
SLE HPC 15 SP3 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2023:0812-1
SLE HPC 15 SP2 bind 9.16.6-150000.12.65.1 SUSE-SU-2023:2578-1
SLE HPC 15 SP2 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
SLE HPC 15 SP2 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2023:0812-1
SLE HPC 15 SP1 bind 9.16.6-150000.12.65.1 SUSE-SU-2023:2578-1
SLE HPC 15 SP1 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
SLE HPC 15 SP1 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2023:0812-1
SUSE OpenStack Cloud Crowbar 9 golang-github-prometheus-node_exporter 1.5.0-1.24.4 SUSE-SU-2023:2183-1
SUSE OpenStack Cloud 9 golang-github-prometheus-node_exporter 1.5.0-1.24.4 SUSE-SU-2023:2183-1
SUSE Manager Server Module 4.3 golang-github-QubitProducts-exporter_exporter 0.4.0-150000.1.18.3 SUSE-SU-2023:3868-1
SUSE Manager Server Module 4.3 golang-github-lusitaniae-apache_exporter 1.0.0-150000.1.17.2 SUSE-SU-2023:3868-1
SUSE Manager Server Module 4.2 golang-github-QubitProducts-exporter_exporter 0.4.0-150000.1.18.3 SUSE-SU-2023:3868-1
SUSE Manager Server Module 4.2 golang-github-lusitaniae-apache_exporter 1.0.0-150000.1.17.2 SUSE-SU-2023:3868-1
SUSE Manager Server Module 4.2 prometheus-postgres_exporter 0.10.1-150000.1.11.4 SUSE-SU-2023:3868-1, SUSE-SU-2023:2182-1
SUSE Manager Server 4.3 release-notes-susemanager 4.3.6-150400.3.63.2 SUSE-RU-2023:2592-1
SUSE Manager Server 4.2 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
SUSE Manager Server 4.2 release-notes-susemanager 4.2.13-150300.3.81.1 SUSE-SU-2023:2594-1
SUSE Manager Server 4.2 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2023:0812-1
SUSE Manager Proxy Module 4.3 golang-github-QubitProducts-exporter_exporter 0.4.0-150000.1.18.3 SUSE-SU-2023:3868-1
SUSE Manager Proxy Module 4.3 golang-github-lusitaniae-apache_exporter 1.0.0-150000.1.17.2 SUSE-SU-2023:3868-1
SUSE Manager Proxy Module 4.3 golang-github-prometheus-alertmanager 0.23.0-150100.4.13.2 SUSE-SU-2023:2187-1
SUSE Manager Proxy Module 4.3 golang-github-prometheus-prometheus 2.32.1-150100.4.12.1 SUSE-SU-2023:2598-1, SUSE-SU-2023:1859-1
SUSE Manager Proxy Module 4.3 prometheus-blackbox_exporter 0.19.0-150000.1.17.2 SUSE-SU-2023:3868-1, SUSE-SU-2023:2182-1
SUSE Manager Proxy Module 4.3 zypp-plugin-spacewalk 1.0.14-150000.3.35.1 SUSE-SU-2023:2578-1
SUSE Manager Proxy Module 4.2 golang-github-QubitProducts-exporter_exporter 0.4.0-150000.1.18.3 SUSE-SU-2023:3868-1
SUSE Manager Proxy Module 4.2 golang-github-lusitaniae-apache_exporter 1.0.0-150000.1.17.2 SUSE-SU-2023:3868-1
SUSE Manager Proxy Module 4.2 golang-github-prometheus-alertmanager 0.23.0-150100.4.13.2 SUSE-SU-2023:2187-1
SUSE Manager Proxy Module 4.2 golang-github-prometheus-prometheus 2.32.1-150100.4.12.1 SUSE-SU-2023:2598-1, SUSE-SU-2023:1859-1
SUSE Manager Proxy Module 4.2 prometheus-blackbox_exporter 0.19.0-150000.1.17.2 SUSE-SU-2023:3868-1, SUSE-SU-2023:2182-1
SUSE Manager Proxy Module 4.2 zypp-plugin-spacewalk 1.0.14-150000.3.35.1 SUSE-SU-2023:2578-1
SUSE Manager Proxy 4.3 release-notes-susemanager-proxy 4.3.6-150400.3.55.4 SUSE-RU-2023:2592-1
SUSE Manager Proxy 4.2 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
SUSE Manager Proxy 4.2 release-notes-susemanager-proxy 4.2.13-150300.3.64.2 SUSE-SU-2023:2594-1
SUSE Manager Proxy 4.2 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2023:0812-1
SUSE Manager Client Tools for SLE Micro 5 bind 9.16.6-150000.12.65.1 SUSE-SU-2023:2578-1
SUSE Manager Client Tools for SLE Micro 5 dracut-saltboot 0.1.1674034019.a93ff61-150000.1.47.1 SUSE-SU-2023:2578-1, SUSE-SU-2023:0812-1
SUSE Manager Client Tools for SLE Micro 5 golang-github-QubitProducts-exporter_exporter 0.4.0-150000.1.18.3 SUSE-SU-2023:3868-1
SUSE Manager Client Tools for SLE Micro 5 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
SUSE Manager Client Tools for SLE Micro 5 prometheus-blackbox_exporter 0.19.0-150000.1.17.2 SUSE-SU-2023:3868-1, SUSE-SU-2023:2182-1
SUSE Manager Client Tools for SLE Micro 5 uyuni-proxy-systemd-services 4.3.8-150000.1.12.1 SUSE-SU-2023:0812-1
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 golang-github-QubitProducts-exporter_exporter 0.4.0-1.6.1 SUSE-SU-2023:3875-1, SUSE-EL-9-CLIENT-TOOLS-2023-3875
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 golang-github-lusitaniae-apache_exporter 1.0.0-1.8.1 SUSE-SU-2023:3875-1, SUSE-EL-9-CLIENT-TOOLS-2023-3875
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 golang-github-prometheus-node_exporter 1.5.0-1.6.1 SUSE-SU-2023:3875-1, SUSE-SU-2023:2185-1, SUSE-EL-9-CLIENT-TOOLS-2023-3875
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 prometheus-postgres_exporter 0.10.1-1.6.2 SUSE-SU-2023:3875-1, SUSE-SU-2023:2185-1, SUSE-EL-9-CLIENT-TOOLS-2023-3875
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 scap-security-guide 0.1.69-1.12.2 SUSE-SU-2023:3875-1, SUSE-EL-9-CLIENT-TOOLS-2023-3875
SUSE Manager Client Tools for RHEL, Liberty and Clones 9 spacecmd 4.3.23-1.18.2 SUSE-SU-2023:3875-1, SUSE-EL-9-CLIENT-TOOLS-2023-3875
SUSE Manager Client Tools Beta for SLE Micro 5 dracut-saltboot 0.1.1681904360.84ef141-159000.3.30.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools Beta for SLE Micro 5 golang-github-QubitProducts-exporter_exporter 0.4.0-159000.4.6.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools Beta for SLE Micro 5 prometheus-blackbox_exporter 0.24.0-159000.3.6.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools Beta for SLE Micro 5 uyuni-proxy-systemd-services 5.0.1-159000.3.9.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15 ansible 2.9.27-159000.3.9.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15 dracut-saltboot 0.1.1674034019.a93ff61-150000.1.47.1 SUSE-SU-2024:0196-1, SUSE-SU-2023:2578-1, SUSE-SU-2023:0812-1
SUSE Manager Client Tools 15 golang-github-QubitProducts-exporter_exporter 0.4.0-150000.1.18.3 SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1
SUSE Manager Client Tools 15 golang-github-boynux-squid_exporter 1.6-159000.4.9.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15 golang-github-lusitaniae-apache_exporter 1.0.0-150000.1.17.2 SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1
SUSE Manager Client Tools 15 golang-github-prometheus-alertmanager 0.23.0-150100.4.13.2 SUSE-SU-2023:2187-1
SUSE Manager Client Tools 15 golang-github-prometheus-prometheus 2.32.1-150000.3.44.1 SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1, SUSE-SU-2023:2182-1
SUSE Manager Client Tools 15 grafana 8.5.20-150000.1.42.1 SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1, SUSE-SU-2023:2578-1
SUSE Manager Client Tools 15 mgr-daemon 4.3.7-150000.1.41.1 SUSE-SU-2023:2578-1
SUSE Manager Client Tools 15 mgr-push 5.0.1-159000.4.21.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15 prometheus-blackbox_exporter 0.19.0-150000.1.17.2 SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1, SUSE-SU-2023:2182-1
SUSE Manager Client Tools 15 prometheus-postgres_exporter 0.10.1-150000.1.11.4 SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1, SUSE-SU-2023:2182-1
SUSE Manager Client Tools 15 python-hwdata 2.3.5-159000.5.13.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15 python-pyvmomi 6.7.3-150000.1.6.2 SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1
SUSE Manager Client Tools 15 rhnlib 5.0.1-159000.6.30.1 SUSE-SU-2024:0196-1
SUSE Manager Client Tools 15 spacecmd 4.3.19-150000.3.95.1 SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1, SUSE-SU-2023:2578-1
SUSE Manager Client Tools 15 spacewalk-client-tools 4.3.15-150000.3.77.1 SUSE-SU-2024:0196-1, SUSE-SU-2023:0812-1
SUSE Manager Client Tools 15 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2024:0196-1, SUSE-SU-2023:0812-1
SUSE Manager Client Tools 15 supportutils-plugin-susemanager-client 4.3.3-150000.3.21.2 SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1
SUSE Manager Client Tools 15 uyuni-common-libs 4.3.8-150000.1.33.1 SUSE-SU-2024:0196-1, SUSE-SU-2023:3868-1, SUSE-SU-2023:2578-1
SUSE Manager Client Tools 15 uyuni-proxy-systemd-services 4.3.8-150000.1.12.1 SUSE-SU-2024:0196-1, SUSE-SU-2023:0812-1
SUSE Manager Client Tools 15 zypp-plugin-spacewalk 1.0.14-150000.3.35.1 SUSE-SU-2023:2578-1
SUSE Manager Client Tools 12 golang-github-QubitProducts-exporter_exporter 0.4.0-1.12.2 SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1
SUSE Manager Client Tools 12 golang-github-boynux-squid_exporter 1.6-4.9.2 SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12 golang-github-lusitaniae-apache_exporter 1.0.0-1.18.2 SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1
SUSE Manager Client Tools 12 golang-github-prometheus-alertmanager 0.23.0-1.18.3 SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1, SUSE-SU-2023:2183-1
SUSE Manager Client Tools 12 golang-github-prometheus-node_exporter 1.5.0-1.24.4 SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1, SUSE-SU-2023:2183-1
SUSE Manager Client Tools 12 golang-github-prometheus-prometheus 2.32.1-1.41.1 SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1, SUSE-SU-2023:2183-1
SUSE Manager Client Tools 12 golang-github-prometheus-promu 0.14.0-1.12.1 SUSE-SU-2024:0191-1, SUSE-SU-2023:2183-1
SUSE Manager Client Tools 12 grafana 8.5.20-1.42.1 SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1, SUSE-SU-2023:2579-1
SUSE Manager Client Tools 12 kiwi-desc-saltboot 0.1.1687520761.cefb248-4.15.2 SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12 mgr-daemon 4.3.7-1.41.1 SUSE-SU-2023:2579-1
SUSE Manager Client Tools 12 mgr-push 5.0.1-4.21.4 SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12 prometheus-blackbox_exporter 0.19.0-1.17.1 SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1, SUSE-SU-2023:2183-1
SUSE Manager Client Tools 12 prometheus-postgres_exporter 0.10.1-1.11.5 SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1, SUSE-SU-2023:2183-1
SUSE Manager Client Tools 12 python-hwdata 2.3.5-15.12.2 SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12 rhnlib 5.0.1-24.30.3 SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12 spacecmd 4.3.19-38.118.1 SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1, SUSE-SU-2023:2579-1
SUSE Manager Client Tools 12 spacewalk-client-tools 4.3.15-52.86.1 SUSE-SU-2023:0811-1
SUSE Manager Client Tools 12 supportutils-plugin-salt 1.2.2-9.9.2 SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12 supportutils-plugin-susemanager-client 4.3.3-6.27.2 SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1
SUSE Manager Client Tools 12 system-user-grafana +1 1.0.0-3.7.2 SUSE-SU-2024:0191-1
SUSE Manager Client Tools 12 uyuni-common-libs 4.3.8-1.33.1 SUSE-SU-2024:0191-1, SUSE-SU-2023:3867-1, SUSE-SU-2023:2579-1
SUSE Manager Client Tools 12 zypp-plugin-spacewalk 1.0.14-30.42.1 SUSE-SU-2023:2579-1
SUSE Enterprise Storage 7.1 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
SUSE Enterprise Storage 7.1 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2023:0812-1
SUSE Enterprise Storage 7 bind 9.16.6-150000.12.65.1 SUSE-SU-2023:2578-1
SUSE Enterprise Storage 7 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
SUSE Enterprise Storage 7 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2023:0812-1
SUSE EL-9:Update:Products:ManagerTools:Update golang-github-QubitProducts-exporter_exporter 0.4.0-1.6.1 SUSE-SU-2023:3875-1
SUSE EL-9:Update:Products:ManagerTools:Update golang-github-lusitaniae-apache_exporter 1.0.0-1.8.1 SUSE-SU-2023:3875-1
SUSE EL-9:Update:Products:ManagerTools:Update golang-github-prometheus-node_exporter 1.5.0-1.6.1 SUSE-SU-2023:3875-1, SUSE-SU-2023:2185-1
SUSE EL-9:Update:Products:ManagerTools:Update golang-packaging 15.0.16-1.3.2 SUSE-SU-2023:2185-1
SUSE EL-9:Update:Products:ManagerTools:Update prometheus-postgres_exporter 0.10.1-1.6.2 SUSE-SU-2023:3875-1, SUSE-SU-2023:2185-1
SUSE EL-9:Update:Products:ManagerTools:Update scap-security-guide 0.1.69-1.12.2 SUSE-SU-2023:3875-1
SUSE EL-9:Update:Products:ManagerTools:Update spacecmd 4.3.23-1.18.2 SUSE-SU-2023:3875-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed golang-github-lusitaniae-apache_exporter 1.0.0-1.1 openSUSE-SU-2024:13109-1
openSUSE Tumbleweed golang-github-prometheus-node_exporter 1.5.0-1.1 openSUSE-SU-2024:12637-1
openSUSE Tumbleweed golang-github-prometheus-prometheus 2.41.0-1.1 openSUSE-SU-2024:12650-1
openSUSE Tumbleweed grafana 8.5.20-2.1 openSUSE-SU-2024:12700-1
openSUSE Tumbleweed prometheus-blackbox_exporter 0.19.0-13.1 openSUSE-SU-2024:12904-1
openSUSE Tumbleweed prometheus-ha_cluster_exporter 1.3.1+git.1676027782.ad3c0e9-2.1 openSUSE-SU-2024:12691-1
openSUSE Tumbleweed prometheus-postgres_exporter 0.10.1-2.1 openSUSE-SU-2024:12872-1
openSUSE Leap 15.5 dracut-saltboot 0.1.1681904360.84ef141-150000.1.50.1 SUSE-SU-2023:2578-1
openSUSE Leap 15.5 golang-github-QubitProducts-exporter_exporter 0.4.0-150000.1.18.3 SUSE-SU-2023:3868-1
openSUSE Leap 15.5 golang-github-lusitaniae-apache_exporter 1.0.0-150000.1.17.2 SUSE-SU-2023:3868-1
openSUSE Leap 15.5 golang-github-prometheus-prometheus 2.37.6-150100.4.17.1 SUSE-SU-2023:2598-1
openSUSE Leap 15.5 prometheus-blackbox_exporter 0.24.0-150000.1.23.3 SUSE-SU-2023:3868-1
openSUSE Leap 15.5 prometheus-postgres_exporter 0.10.1-150000.1.14.3 SUSE-SU-2023:3868-1
openSUSE Leap 15.5 spacecmd 4.3.21-150000.3.98.1 SUSE-SU-2023:3868-1, SUSE-SU-2023:2578-1
openSUSE Leap 15.5 supportutils-plugin-susemanager-client 4.3.3-150000.3.21.2 SUSE-SU-2023:3868-1
openSUSE Leap 15.5 wire 0.5.0-150000.1.12.3 SUSE-SU-2023:2578-1
openSUSE Leap 15.4 bind 9.16.6-150000.12.65.1 SUSE-SU-2023:2578-1
openSUSE Leap 15.4 dracut-saltboot 0.1.1674034019.a93ff61-150000.1.47.1 SUSE-SU-2023:2578-1, SUSE-SU-2023:0812-1
openSUSE Leap 15.4 golang-github-QubitProducts-exporter_exporter 0.4.0-150000.1.18.3 SUSE-SU-2023:3868-1
openSUSE Leap 15.4 golang-github-lusitaniae-apache_exporter 1.0.0-150000.1.17.2 SUSE-SU-2023:3868-1
openSUSE Leap 15.4 golang-github-prometheus-alertmanager 0.23.0-150100.4.13.2 SUSE-SU-2023:2187-1
openSUSE Leap 15.4 golang-github-prometheus-node_exporter 1.5.0-150100.3.23.2 SUSE-SU-2023:2187-1
openSUSE Leap 15.4 golang-github-prometheus-prometheus 2.32.1-150100.4.12.1 SUSE-SU-2023:2598-1, SUSE-SU-2023:1859-1
openSUSE Leap 15.4 golang-github-prometheus-promu 0.14.0-150000.3.12.2 SUSE-SU-2023:2182-1
openSUSE Leap 15.4 grafana 8.5.20-150200.3.35.1 SUSE-SU-2023:0821-1
openSUSE Leap 15.4 prometheus-blackbox_exporter 0.19.0-150000.1.17.2 SUSE-SU-2023:3868-1, SUSE-SU-2023:2182-1
openSUSE Leap 15.4 prometheus-ha_cluster_exporter 1.3.1+git.1676027782.ad3c0e9-150200.3.21.1 SUSE-SU-2023:0465-1
openSUSE Leap 15.4 prometheus-postgres_exporter 0.10.1-150000.1.11.4 SUSE-SU-2023:3868-1, SUSE-SU-2023:2182-1
openSUSE Leap 15.4 spacecmd 4.3.19-150000.3.95.1 SUSE-SU-2023:3868-1, SUSE-SU-2023:2578-1, SUSE-SU-2023:0812-1
openSUSE Leap 15.4 supportutils-plugin-salt 1.2.2-150000.3.13.1 SUSE-SU-2023:0812-1
openSUSE Leap 15.4 supportutils-plugin-susemanager-client 4.3.3-150000.3.21.2 SUSE-SU-2023:3868-1
openSUSE Leap 15.4 wire 0.5.0-150000.1.12.3 SUSE-SU-2023:2578-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 prometheus 2.40.4-r1 —
Alpine v3.24 prometheus-node-exporter 1.5.0-r0 —
Alpine v3.23 prometheus 2.40.4-r1 —
Alpine v3.23 prometheus-node-exporter 1.5.0-r0 —
Alpine v3.22 prometheus 2.40.4-r1 —
Alpine v3.22 prometheus-node-exporter 1.5.0-r0 —
Alpine v3.21 prometheus 2.40.4-r1 —
Alpine v3.21 prometheus-node-exporter 1.5.0-r0 —
Alpine v3.20 prometheus 2.40.4-r1 —
Alpine v3.20 prometheus-node-exporter 1.5.0-r0 —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 prometheus 2.40.4-r1 —
Alpine v3.19 prometheus-node-exporter 1.5.0-r0 —
Alpine v3.18 prometheus 2.40.4-r1 —
Alpine v3.18 prometheus-node-exporter 1.5.0-r0 —
Alpine v3.17 prometheus 2.40.5-r0 —
Alpine v3.17 prometheus-node-exporter 1.5.0-r0 —

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 prometheus-process-exporter 0.8.2-1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/prometheus/exporter-toolkit < 0.7.2 0.7.2 GHSA-7rg2-cxvp-9p7p
Go github.com/prometheus/exporter-toolkit >= 0.8.0, < 0.8.2 0.8.2 GHSA-7rg2-cxvp-9p7p
Go github.com/prometheus/exporter-toolkit < 0.7.2 · >= 0.8.0, < 0.8.2 0.7.2, 0.8.2 GO-2022-1130

Advisories 34

References