Bug 2155615 - prometheus: Update grafana
Summary: prometheus: Update grafana
Keywords:
Status: NEW
Alias: None
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2155618 2155619 2155616 2155617
Blocks: 2152394
TreeView+ depends on / blocked
 
Reported: 2022-12-21 16:17 UTC by Sage McTaggart
Modified: 2023-07-07 08:34 UTC (History)
14 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Sage McTaggart 2022-12-21 16:17:34 UTC 
Prometheus, as used in grafana, needs updating to fix security vulnerabilities. 

"[SECURITY] Security upgrade from go and upstream
dependencies that include security fixes to the net/http and os
packages. #11691"

Please bump to 2.40.6.

https://bugs.gentoo.org/885109
https://github.com/prometheus/prometheus/releases/tag/v2.40.6
Comment 1 Sage McTaggart 2022-12-21 16:19:15 UTC 
Marked low as there's no CVE fixes listed in any of the github reports.
Comment 2 Sage McTaggart 2022-12-21 16:19:35 UTC 
Created grafana tracking bugs for this issue:

Affects: fedora-36 [bug 2155616]
Affects: fedora-37 [bug 2155617]
Note You need to log in before you can comment on or make changes to this bug.