diff options
| author | Piotr Parczewski <piotr@stackhpc.com> | 2021-05-19 10:01:45 +0200 |
|---|---|---|
| committer | Piotr Parczewski <piotr@stackhpc.com> | 2021-05-19 10:01:45 +0200 |
| commit | 16b5a8c1c797dde79a6520f196338a00608014f9 (patch) | |
| tree | cf958f50cdf60b3f991fd546362ef6e061f2d13a | |
| parent | a93f171da3df0491e2bf3d5c1bf7a5a856a6e128 (diff) | |
| download | kolla-16b5a8c1c797dde79a6520f196338a00608014f9.tar.gz kolla-16b5a8c1c797dde79a6520f196338a00608014f9.zip | |
[Security] Fix open redirect in Prometheus
Bump up Prometheus to the oldest non affected version as per
security advisory [1].
[1] https://github.com/prometheus/prometheus/security/advisories/GHSA-vx57-7f4q-fpc7
Change-Id: I505b0645dc3331264c8fc6762df1c6cb8bb2f2ed
| -rw-r--r-- | docker/prometheus/prometheus-v2-server/Dockerfile.j2 | 2 | ||||
| -rw-r--r-- | releasenotes/notes/security-fix-prometheus-v2.26.1-03e1410ad8ed4410.yaml | 4 |
2 files changed, 5 insertions, 1 deletions
diff --git a/docker/prometheus/prometheus-v2-server/Dockerfile.j2 b/docker/prometheus/prometheus-v2-server/Dockerfile.j2 index 6b12f27c1..63646649a 100644 --- a/docker/prometheus/prometheus-v2-server/Dockerfile.j2 +++ b/docker/prometheus/prometheus-v2-server/Dockerfile.j2 @@ -6,7 +6,7 @@ LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" build-date="{{ build {% block prometheus_v2_server_header %}{% endblock %} {% block prometheus_v2_server_repository_version %} -ENV prometheus_version=2.23.0 +ENV prometheus_version=2.26.1 {% endblock %} {% block prometheus_v2_server_install %} diff --git a/releasenotes/notes/security-fix-prometheus-v2.26.1-03e1410ad8ed4410.yaml b/releasenotes/notes/security-fix-prometheus-v2.26.1-03e1410ad8ed4410.yaml new file mode 100644 index 000000000..d6aa95a52 --- /dev/null +++ b/releasenotes/notes/security-fix-prometheus-v2.26.1-03e1410ad8ed4410.yaml @@ -0,0 +1,4 @@ +--- +security: + - | + Fixes security issue in Prometheus as per `advisory <https://github.com/prometheus/prometheus/security/advisories/GHSA-vx57-7f4q-fpc7>`__. |