SUSE-SU-2022:2140-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2140-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2022:2140-1

Related

CVE-2022-21698

Published

2022-06-20T12:58:53Z

Modified

2022-06-20T12:58:53Z

Summary

Security update for node_exporter

Details

This security update for golang-github-prometheus-node_exporter provides:

Update golang-github-prometheus-node_exporter from version 1.1.2 to version 1.3.0 (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239)

CVE-2022-21698: Denial of service using InstrumentHandlerCounter
Update vendor tarball with prometheus/client_golang 1.11.1
Update to 1.3.0
- [CHANGE] Add path label to rapl collector #2146
- [CHANGE] Exclude filesystems under /run/credentials #2157
- [CHANGE] Add TCPTimeouts to netstat default filter #2189
- [FEATURE] Add lnstat collector for metrics from /proc/net/stat/ #1771
- [FEATURE] Add darwin powersupply collector #1777
- [FEATURE] Add support for monitoring GPUs on Linux #1998
- [FEATURE] Add Darwin thermal collector #2032
- [FEATURE] Add os release collector #2094
- [FEATURE] Add netdev.address-info collector #2105
- [FEATURE] Add clocksource metrics to time collector #2197
- [ENHANCEMENT] Support glob textfile collector directories #1985
- [ENHANCEMENT] ethtool: Expose nodeethtoolinfo metric #2080
- [ENHANCEMENT] Use include/exclude flags for ethtool filtering #2165
- [ENHANCEMENT] Add flag to disable guest CPU metrics #2123
- [ENHANCEMENT] Add DMI collector #2131
- [ENHANCEMENT] Add threads metrics to processes collector #2164
- [ENHANCMMENT] Reduce timer GC delays in the Linux filesystem collector #2169
- [ENHANCMMENT] Add TCPTimeouts to netstat default filter #2189
- [ENHANCMMENT] Use SysctlTimeval for boottime collector on BSD #2208
- [BUGFIX] ethtool: Sanitize metric names #2093
- [BUGFIX] Fix ethtool collector for multiple interfaces #2126
- [BUGFIX] Fix possible panic on macOS #2133
- [BUGFIX] Collect flaginfo and buginfo only for one core #2156
- [BUGFIX] Prevent duplicate ethtool metric names #2187
Update to 1.2.2
- Bug fixes Fix processes collector long int parsing #2112
Update to 1.2.1
- Removed Remove obsolete capture permission denied error fix already included upstream
- Bug fixes Fix zoneinfo parsing prometheus/procfs#386 Fix nvme collector log noise #2091 Fix rapl collector log noise #2092
Update to 1.2.0
- Changes Rename filesystem collector flags to match other collectors #2012 Make node_exporter print usage to STDOUT #203
- Features Add conntrack statistics metrics #1155 Add ethtool stats collector #1832 Add flag to ignore network speed if it is unknown #1989 Add tapestats collector for Linux #2044 Add nvme collector #2062
- Enhancements Add ErrorLog plumbing to promhttp #1887 Add more Infiniband counters #2019 netclass: retrieve interface names and filter before parsing #2033 Add time zone offset metric #2060
- Bug fixes Handle errors from disabled PSI subsystem #1983 Fix panic when using backwards compatible flags #2000 Fix wrong value for OpenBSD memory buffer cache #2015 Only initiate collectors once #2048 Handle small backwards jumps in CPU idle #2067
Capture permission denied error for 'energy_uj' file (bsc#1190535)

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP3 / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP4 / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

SUSE:Linux Enterprise Server 15 SP1-BCL / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

SUSE:Linux Enterprise Server 15 SP1-LTSS / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

SUSE:Linux Enterprise Server 15 SP2-BCL / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

SUSE:Linux Enterprise Server 15 SP2-LTSS / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 15 SP1 / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 15 SP2 / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

SUSE:Manager Proxy 4.1 / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Manager%20Proxy%204.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

SUSE:Manager Retail Branch Server 4.1 / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

SUSE:Manager Server 4.1 / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Manager%20Server%204.1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

SUSE:Enterprise Storage 6 / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Enterprise%20Storage%206

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

SUSE:Enterprise Storage 7 / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=SUSE%20Enterprise%20Storage%207

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

openSUSE:Leap 15.3 / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=openSUSE%20Leap%2015.3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}

openSUSE:Leap 15.4 / golang-github-prometheus-node_exporter

Package

Name: golang-github-prometheus-node_exporter
Purl: purl:rpm/suse/golang-github-prometheus-node_exporter&distro=openSUSE%20Leap%2015.4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-150100.3.12.1

Ecosystem specific

{
    "binaries": [
        {
            "golang-github-prometheus-node_exporter": "1.3.0-150100.3.12.1"
        }
    ]
}