Bug 885109

Summary:	<app-metrics/prometheus-2.43.0: security fixes in bundled code
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	IN_PROGRESS ---
Severity:	normal	CC:	williamh, zlogene
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/prometheus/prometheus/releases/tag/v2.40.6
Whiteboard:	?? [glsa? cleanup]
Package list:		Runtime testing required:	---
Bug Depends on:	905390
Bug Blocks:

Description John Helmert III archtester

2022-12-10 02:29:21 UTC

"[SECURITY] Security upgrade from go and upstream
dependencies that include security fixes to the net/http and os
packages. #11691"

Please bump to 2.40.6.

Comment 1 Larry the Git Cow gentoo-dev

2023-03-25 18:16:47 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1b3af9816cecc845ee74fb870ecb30d27ad6264a

commit 1b3af9816cecc845ee74fb870ecb30d27ad6264a
Author:     William Hubbs <williamh@gentoo.org>
AuthorDate: 2023-03-25 18:15:53 +0000
Commit:     William Hubbs <williamh@gentoo.org>
CommitDate: 2023-03-25 18:16:38 +0000

    app-metrics/prometheus: add 2.43.0
    
    Bug: https://bugs.gentoo.org/885109
    Signed-off-by: William Hubbs <williamh@gentoo.org>

 app-metrics/prometheus/Manifest                 |  3 ++
 app-metrics/prometheus/prometheus-2.43.0.ebuild | 72 +++++++++++++++++++++++++
 2 files changed, 75 insertions(+)

Comment 2 John Helmert III archtester

2023-04-30 22:29:15 UTC

Please stabilize >2.43.