[prometheus-announce] Re: Prometheus 2.37.5 LTS and Prometheus 2.40.6 are available

2022-12-09 Thread Julien Pivotto
Note: The CVE in the email title is incorrect, there is no CVE from the Prometheus project itself fixed with those releases. On 09 Dec 15:59, Julien Pivotto wrote: > Hello everyone, > > Prometheus 2.37.5 and 2.40.6 are out! > > > Those releases are built with go1.18.9 and 1.19.4 respectively,

[prometheus-announce] Prometheus 2.37.5 LTS and Prometheus 2.40.6 are available (CVE-2022-46146)

2022-12-09 Thread Julien Pivotto
Hello everyone, Prometheus 2.37.5 and 2.40.6 are out! Those releases are built with go1.18.9 and 1.19.4 respectively, which include security fixes to the net/http and os packages. Prometheus 2.37.5 is part of the 2.37 Long-Term Supported release of Prometheus, supported for _at least_ until