Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 885109 - <app-metrics/prometheus-2.43.0: security fixes in bundled code
Summary: <app-metrics/prometheus-2.43.0: security fixes in bundled code
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
Whiteboard: ?? [glsa? cleanup]
Depends on: 905390
  Show dependency tree
Reported: 2022-12-10 02:29 UTC by John Helmert III
Modified: 2023-05-01 04:40 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-12-10 02:29:21 UTC
"[SECURITY] Security upgrade from go and upstream
dependencies that include security fixes to the net/http and os
packages. #11691"

Please bump to 2.40.6.
Comment 1 Larry the Git Cow gentoo-dev 2023-03-25 18:16:47 UTC
The bug has been referenced in the following commit(s):

commit 1b3af9816cecc845ee74fb870ecb30d27ad6264a
Author:     William Hubbs <>
AuthorDate: 2023-03-25 18:15:53 +0000
Commit:     William Hubbs <>
CommitDate: 2023-03-25 18:16:38 +0000

    app-metrics/prometheus: add 2.43.0
    Signed-off-by: William Hubbs <>

 app-metrics/prometheus/Manifest                 |  3 ++
 app-metrics/prometheus/prometheus-2.43.0.ebuild | 72 +++++++++++++++++++++++++
 2 files changed, 75 insertions(+)
Comment 2 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2023-04-30 22:29:15 UTC
Please stabilize >2.43.