Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth c…
Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate th…
Prometheus is an open-source monitoring system and time series database. From 2.49.0 to before 3.5.3 and 3.11.3, in the Prometheus server's legacy web UI (enabled via th…
VuXML only (0) · listed, port not fixed yet
None. pkg audit reports nothing for this version.
Fixed (1)
Show 1 fixed
VuXML entries whose affected range this version has left.
net-mgmt/prometheus2: Update to 2.36.0
Changes: https://github.com/prometheus/prometheus/releases
PR: 264370
There are a lot of changes since 2.33.5 which can be viewed at
https://github.com/prometheus/prometheus/releases, but the main change
is that TLS 1.0 and 1.1 are now disabled by default. They can be
re-enabled via the tls_config section of the Prometheus configuration as
documented at
https://prometheus.io/docs/prometheus/latest/configuration/configuration/#tls_config.
Certificates using SHA-1 hash functions are also rejected, this support
can be re-enabled (for now) via some Go debug environment variables:
https://go.dev/doc/go1.18#sha1
net-mgmt/prometheus2: Update to 2.26.0
This release changes the default AlertManager API to v2 and changes
promtool to output to stdout by default, in addition to other
enhancements and added features.
Changes https://github.com/prometheus/prometheus/releases/tag/v2.26.0
PR: 255021
Approved by: David O'Rourke <dor.bsd@xm0.uk> (maintainer)
net-mgmt/prometheus2: Update to 2.18.1
This patch updates net-mgmt/prometheus2 to v2.18.1.
[CHANGE] Federation: Only use local TSDB for federation (ignore remote read).
[CHANGE] Rules: rule_evaluations_total and rule_evaluation_failures_total have a rule_group label now.
[FEATURE] Tracing: Added experimental Jaeger support
[ENHANCEMENT] TSDB: Significantly reduce WAL size kept around after a block cut. #7098
[ENHANCEMENT] Discovery: Add architecture meta label for EC2.
[BUGFIX] UI: Fixed wrong MinTime reported by /status.
[BUGFIX] React UI: Fixed multiselect legend on OSX.
[BUGFIX] Remote Write: Fixed blocked resharding edge case.
[BUGFIX] Remote Write: Fixed remote write not updating on relabel configs change.
[BUGFIX] TSDB: Fixed snapshot API.
The full changelogs with links to the issues can be found at
https://github.com/prometheus/prometheus/releases/tag/v2.18.0 and
https://github.com/prometheus/prometheus/releases/tag/v2.18.1
PR: 246463
Submitted by: David O'Rourke (maintainer)
net-mgmt/prometheus2: update 2.17.1 -> 2.17.2
[BUGFIX] Federation: Register federation metrics
[BUGFIX] PromQL: Fix panic in parser error handling
[BUGFIX] Rules: Fix reloads hanging when deleting a rule group
that is being evaluated
[BUGFIX] TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL
[BUGFIX] TSDB: Make isolation more robust to panics in web handlers
PR: 245845
Submitted by: David O'Rourke <dor.bsd@xm0.uk> (maintainer)
Relnotes: https://github.com/prometheus/prometheus/releases/tag/v2.17.2
net-mgmt/prometheus2: Update 2.15.2 -> 2.16.0
The release adds a few new features, and includes a number of enhancements and bug fixes.
Changelog: https://github.com/prometheus/prometheus/releases/tag/v2.16.0
PR: 244174
Submitted by: David O'Rourke <dor.bsd@xm0.uk> (maintainer)
net-mgmt/prometheus2: Add missing frontend files
Pull in pre-compiled assets from the ports-assets/net-mgmt_prometheus2 GitHub
repository and use them when compiling Prometheus, enabling the new UI to
function properly.
While here, remove GO_PKGNAME which is not needed with USES=go:modules.
PR: 241925
Submitted by: David O'Rourke <dor.bsd@xm0.uk> (maintainer)
Approved by: tz (mentor, implicit)
net-mgmt/prometheus2: update to 2.12
A changelog is available at:
https://github.com/prometheus/prometheus/releases/tag/v2.12.0
there are no breaking changes.
PR: 240204
Submitted by: dor.bsd@xm0.uk (maintainer)
Update to 2.11.2
- [BUGFIX/SECURITY] Fix a Stored DOM XSS vulnerability with query history.
PR: 239839
Submitted by: David O'Rourke <dor.bsd@xm0.uk> (maintainer)
MFH: 2019Q3
Sponsored by: Netzkommune GmbH
net-mgmt/prometheus2: Update to 2.9.2
Changelog:
* Make sure subquery range is taken into account for selection
* Exhaust every request body before closing it
* Cmd/promtool: return errors from rule evaluations
* Remote Storage: string interner should not panic in release
* Fix memory allocation regression in mergedPostings.Seek
https://github.com/prometheus/prometheus/releases/tag/v2.9.2
PR: 237671
Submitted by: David O'Rourke <dor.bsd@xm0.uk> (maintainer)
Approved by: mentors (implicit)