July 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:1747-1: moderate: Recommended update for yast2-support
by maintenance＠opensuse.org 19 Jul '19

19 Jul '19

openSUSE Recommended Update: Recommended update for yast2-support ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1747-1 Rating: moderate References: #1136145 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-support fixes the following issues: - Fixes a typo in the support url (bsc#1136145) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1747=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-support-4.1.1-lp151.2.3.1 References: https://bugzilla.suse.com/1136145

1 0

openSUSE-RU-2019:1732-1: moderate: Recommended update for permissions
by maintenance＠opensuse.org 19 Jul '19

19 Jul '19

openSUSE Recommended Update: Recommended update for permissions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1732-1 Rating: moderate References: #1128598 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for permissions fixes the following issues: - Added whitelisting for /usr/lib/singularity/bin/starter-suid in the new singularity 3.1 version. (bsc#1128598) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1732=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): permissions-20181116-lp151.4.3.1 permissions-debuginfo-20181116-lp151.4.3.1 permissions-debugsource-20181116-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): permissions-zypp-plugin-20181116-lp151.4.3.1 References: https://bugzilla.suse.com/1128598

1 0

openSUSE-SU-2019:1718-1: moderate: Security update for libqb
by opensuse-security＠opensuse.org 19 Jul '19

19 Jul '19

openSUSE Security Update: Security update for libqb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1718-1 Rating: moderate References: #1137835 Cross-References: CVE-2019-12779 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libqb fixes the following issues: Security issue fixed: - CVE-2019-12779: Fixed an issue where a local attacker could overwrite privileged system files (bsc#1137835). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1718=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libqb-debugsource-1.0.3+20171226.6d62b64-lp150.2.3.1 libqb-devel-1.0.3+20171226.6d62b64-lp150.2.3.1 libqb0-1.0.3+20171226.6d62b64-lp150.2.3.1 libqb0-debuginfo-1.0.3+20171226.6d62b64-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libqb-devel-32bit-1.0.3+20171226.6d62b64-lp150.2.3.1 libqb0-32bit-1.0.3+20171226.6d62b64-lp150.2.3.1 libqb0-32bit-debuginfo-1.0.3+20171226.6d62b64-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-12779.html https://bugzilla.suse.com/1137835

1 0

openSUSE-RU-2019:1709-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 19 Jul '19

19 Jul '19

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1709-1 Rating: moderate References: #1123102 #1134784 #1136103 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for yast2-network is fixing the following issues: - A bug has been fixed when configuring a static IP address without any hostname (bsc#1123102) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1709=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-network-4.0.49-lp150.2.19.1 References: https://bugzilla.suse.com/1123102 https://bugzilla.suse.com/1134784 https://bugzilla.suse.com/1136103

1 0

openSUSE-RU-2019:1717-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 19 Jul '19

19 Jul '19

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1717-1 Rating: moderate References: #1127293 #928131 #940457 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for grub2 fixes the following issues: - Check/refresh zipl-kernel before hibernate on s390x. (bsc#940457) - Removing hardcoded 'vmlinuz'. - Try to refresh zipl-kernel on failed kexec. (bsc#1127293) - Fully support "previous" zipl-kernel with 'mem=1G' being available on dedicated entries. (bsc#928131) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1717=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): grub2-2.02-lp150.13.23.1 grub2-branding-upstream-2.02-lp150.13.23.1 grub2-debuginfo-2.02-lp150.13.23.1 grub2-debugsource-2.02-lp150.13.23.1 grub2-i386-pc-2.02-lp150.13.23.1 - openSUSE Leap 15.0 (x86_64): grub2-x86_64-efi-2.02-lp150.13.23.1 grub2-x86_64-xen-2.02-lp150.13.23.1 - openSUSE Leap 15.0 (noarch): grub2-snapper-plugin-2.02-lp150.13.23.1 grub2-systemd-sleep-plugin-2.02-lp150.13.23.1 - openSUSE Leap 15.0 (i586): grub2-i386-efi-2.02-lp150.13.23.1 grub2-i386-xen-2.02-lp150.13.23.1 References: https://bugzilla.suse.com/1127293 https://bugzilla.suse.com/928131 https://bugzilla.suse.com/940457

1 0

openSUSE-RU-2019:1720-1: moderate: Recommended update for lxd
by maintenance＠opensuse.org 19 Jul '19

19 Jul '19

openSUSE Recommended Update: Recommended update for lxd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1720-1 Rating: moderate References: #1138769 #1138770 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for lxd fixes the following issues: Update to LXD 3.14. (boo#1138770) The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxd-3-14-has-been-released/5045 + Cluster: Re-worked DNS forwarding + Script to factory reset LXD + Improvements to syscall interception + Lots of bug fixes... - Update build to use go_nostrip, in order to attempt to fix the broken binaries on Leap 15.1. (boo#1138769) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1720=1 Package List: - openSUSE Leap 15.1 (x86_64): lxd-3.14-lp151.5.1 - openSUSE Leap 15.1 (noarch): lxd-bash-completion-3.14-lp151.5.1 References: https://bugzilla.suse.com/1138769 https://bugzilla.suse.com/1138770

1 0

openSUSE-SU-2019:1719-1: Security update for fence-agents
by opensuse-security＠opensuse.org 19 Jul '19

19 Jul '19

openSUSE Security Update: Security update for fence-agents ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1719-1 Rating: low References: #1049852 #1137314 Cross-References: CVE-2019-10153 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for fence-agents version 4.4.0 fixes the following issues: Security issue fixed: - CVE-2019-10153: Fixed a denial of service via guest VM comments (bsc#1137314). Non-security issue fixed: - Included timestamps when logging (bsc#1049852). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1719=1 Package List: - openSUSE Leap 15.0 (x86_64): fence-agents-4.4.0+git.1558595666.5f79f9e9-lp150.2.10.1 fence-agents-amt_ws-4.4.0+git.1558595666.5f79f9e9-lp150.2.10.1 fence-agents-debuginfo-4.4.0+git.1558595666.5f79f9e9-lp150.2.10.1 fence-agents-debugsource-4.4.0+git.1558595666.5f79f9e9-lp150.2.10.1 fence-agents-devel-4.4.0+git.1558595666.5f79f9e9-lp150.2.10.1 References: https://www.suse.com/security/cve/CVE-2019-10153.html https://bugzilla.suse.com/1049852 https://bugzilla.suse.com/1137314

1 0

openSUSE-RU-2019:1707-1: moderate: Recommended update for rdma-core
by maintenance＠opensuse.org 19 Jul '19

19 Jul '19

openSUSE Recommended Update: Recommended update for rdma-core ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1707-1 Rating: moderate References: #1049515 #1058504 #1060413 #1072884 #1086910 #1093170 #996146 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for rdma-core fixes the following issues: - Update rdma-core (bsc#996146) - suse: fix dracut support - mlx5: Fix masking service level in mlx5_create_ah - cmake: Explicitly convert build type to be STRING - libhns: Bugfix for filtering zero length sge - buildlib: Ensure stanza is properly sorted - mlx4: Allow loopback when using raw Ethernet QP - travis: Change SuSE package target due to Travis CI failures - cbuild: fix tumbleweed docker image - libhns: Bugfix for using buffer length - mlx5: Fix incorrect error handling when SQ wqe count is 0 - mlx5: Fix SL to Ethernet priority conversion - travis: Fix travis failures - verbs: If the uverbs module is not loaded allow get_devices to retry init - mlx5: Fix flow tag mask - rxe: fix rxe compilation with newer kernels - Revert "buildlib: pick leap over tumbleweed" - buildlib: pick leap over tumbleweed - mlx5: Fix compilation on 32 bit systems when sse3 is on - mlx5: Allocate huge page chunks only when needed - rxe: Do not use _sockaddr in struct rxe_av - rxe: Remove duplicate include - Update rdma-core with backport fixes: - buildilb: Fix -msse breakage on ARM builds - buildlib: Use -msse if the compiler does not support target(sse) (bsc#1086910) - suse: do not call %service rules on a template file (bsc#1093170) - mlx5: Convert ah_attr static rate to mlx5 static rate - ccan: Add array_size.h file - iwpmd: Initialize address of sockaddr - mlx5: Fix need_uuar_lock when there are no medium bfregs - verbs: Fix wrong clean up flow in ibv_rc_pingpong - Match kernel ABI to for 4.17 for 32 bit - librdmacm: Set errno correctly if status is positive - verbs: Remove bogus cq_fd - verbs: Fix typo in copying IBV_FLOW_SPEC_UDP/TCP 'val' - SRP daemon not handling SM changes. (bsc#1072884, bsc#1049515) - Remove dracut requirement. (bsc#1058504) - Includes Broadcom patches. (bsc#1060413) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1707=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ibacm-16.9-lp150.4.3.1 ibacm-debuginfo-16.9-lp150.4.3.1 iwpmd-16.9-lp150.4.3.1 iwpmd-debuginfo-16.9-lp150.4.3.1 libibumad3-16.9-lp150.4.3.1 libibumad3-debuginfo-16.9-lp150.4.3.1 libibverbs-16.9-lp150.4.3.1 libibverbs-debuginfo-16.9-lp150.4.3.1 libibverbs-utils-16.9-lp150.4.3.1 libibverbs-utils-debuginfo-16.9-lp150.4.3.1 libibverbs1-16.9-lp150.4.3.1 libibverbs1-debuginfo-16.9-lp150.4.3.1 libmlx4-1-16.9-lp150.4.3.1 libmlx4-1-debuginfo-16.9-lp150.4.3.1 libmlx5-1-16.9-lp150.4.3.1 libmlx5-1-debuginfo-16.9-lp150.4.3.1 librdmacm-utils-16.9-lp150.4.3.1 librdmacm-utils-debuginfo-16.9-lp150.4.3.1 librdmacm1-16.9-lp150.4.3.1 librdmacm1-debuginfo-16.9-lp150.4.3.1 rdma-core-16.9-lp150.4.3.1 rdma-core-debugsource-16.9-lp150.4.3.1 rdma-core-devel-16.9-lp150.4.3.1 rdma-ndd-16.9-lp150.4.3.1 rdma-ndd-debuginfo-16.9-lp150.4.3.1 rsocket-16.9-lp150.4.3.1 rsocket-debuginfo-16.9-lp150.4.3.1 srp_daemon-16.9-lp150.4.3.1 srp_daemon-debuginfo-16.9-lp150.4.3.1 - openSUSE Leap 15.0 (x86_64): libibumad3-32bit-16.9-lp150.4.3.1 libibumad3-32bit-debuginfo-16.9-lp150.4.3.1 libibverbs-32bit-16.9-lp150.4.3.1 libibverbs-32bit-debuginfo-16.9-lp150.4.3.1 libibverbs1-32bit-16.9-lp150.4.3.1 libibverbs1-32bit-debuginfo-16.9-lp150.4.3.1 libmlx4-1-32bit-16.9-lp150.4.3.1 libmlx4-1-32bit-debuginfo-16.9-lp150.4.3.1 libmlx5-1-32bit-16.9-lp150.4.3.1 libmlx5-1-32bit-debuginfo-16.9-lp150.4.3.1 librdmacm1-32bit-16.9-lp150.4.3.1 librdmacm1-32bit-debuginfo-16.9-lp150.4.3.1 rdma-core-devel-32bit-16.9-lp150.4.3.1 rsocket-32bit-16.9-lp150.4.3.1 rsocket-32bit-debuginfo-16.9-lp150.4.3.1 References: https://bugzilla.suse.com/1049515 https://bugzilla.suse.com/1058504 https://bugzilla.suse.com/1060413 https://bugzilla.suse.com/1072884 https://bugzilla.suse.com/1086910 https://bugzilla.suse.com/1093170 https://bugzilla.suse.com/996146

1 0

openSUSE-RU-2019:1710-1: moderate: Recommended update for llvm7
by maintenance＠opensuse.org 19 Jul '19

19 Jul '19

openSUSE Recommended Update: Recommended update for llvm7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1710-1 Rating: moderate References: #1138457 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for llvm7 fixes the following issues: - Add a clang-%{_sonum} symlink, which is referenced by /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1710=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): clang7-7.0.1-lp151.2.3.1 clang7-checker-7.0.1-lp151.2.3.1 clang7-debuginfo-7.0.1-lp151.2.3.1 clang7-devel-7.0.1-lp151.2.3.1 libLLVM7-7.0.1-lp151.2.3.1 libLLVM7-debuginfo-7.0.1-lp151.2.3.1 libLTO7-7.0.1-lp151.2.3.1 libLTO7-debuginfo-7.0.1-lp151.2.3.1 libclang7-7.0.1-lp151.2.3.1 libclang7-debuginfo-7.0.1-lp151.2.3.1 libomp7-devel-7.0.1-lp151.2.3.1 libomp7-devel-debuginfo-7.0.1-lp151.2.3.1 lld7-7.0.1-lp151.2.3.1 lld7-debuginfo-7.0.1-lp151.2.3.1 llvm7-7.0.1-lp151.2.3.1 llvm7-LTO-devel-7.0.1-lp151.2.3.1 llvm7-debuginfo-7.0.1-lp151.2.3.1 llvm7-debugsource-7.0.1-lp151.2.3.1 llvm7-devel-7.0.1-lp151.2.3.1 llvm7-devel-debuginfo-7.0.1-lp151.2.3.1 llvm7-gold-7.0.1-lp151.2.3.1 llvm7-gold-debuginfo-7.0.1-lp151.2.3.1 llvm7-polly-7.0.1-lp151.2.3.1 llvm7-polly-debuginfo-7.0.1-lp151.2.3.1 llvm7-polly-devel-7.0.1-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): clang7-devel-32bit-7.0.1-lp151.2.3.1 libLLVM7-32bit-7.0.1-lp151.2.3.1 libLLVM7-32bit-debuginfo-7.0.1-lp151.2.3.1 libLTO7-32bit-7.0.1-lp151.2.3.1 libLTO7-32bit-debuginfo-7.0.1-lp151.2.3.1 libc++-devel-7.0.1-lp151.2.3.1 libc++1-7.0.1-lp151.2.3.1 libc++1-debuginfo-7.0.1-lp151.2.3.1 libc++abi-devel-7.0.1-lp151.2.3.1 libc++abi1-7.0.1-lp151.2.3.1 libc++abi1-debuginfo-7.0.1-lp151.2.3.1 libclang7-32bit-7.0.1-lp151.2.3.1 libclang7-32bit-debuginfo-7.0.1-lp151.2.3.1 liblldb7-7.0.1-lp151.2.3.1 liblldb7-debuginfo-7.0.1-lp151.2.3.1 lldb7-7.0.1-lp151.2.3.1 lldb7-debuginfo-7.0.1-lp151.2.3.1 lldb7-devel-7.0.1-lp151.2.3.1 llvm7-LTO-devel-32bit-7.0.1-lp151.2.3.1 llvm7-devel-32bit-7.0.1-lp151.2.3.1 llvm7-devel-32bit-debuginfo-7.0.1-lp151.2.3.1 python3-lldb7-7.0.1-lp151.2.3.1 python3-lldb7-debuginfo-7.0.1-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): llvm7-emacs-plugins-7.0.1-lp151.2.3.1 llvm7-opt-viewer-7.0.1-lp151.2.3.1 llvm7-vim-plugins-7.0.1-lp151.2.3.1 python3-clang-7.0.1-lp151.2.3.1 References: https://bugzilla.suse.com/1138457

1 0

openSUSE-RU-2019:1722-1: moderate: Recommended update for golang-github-prometheus-prometheus
by maintenance＠opensuse.org 19 Jul '19

19 Jul '19

openSUSE Recommended Update: Recommended update for golang-github-prometheus-prometheus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1722-1 Rating: moderate References: #1124610 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for golang-github-prometheus-prometheus fixes the following issues: - fix spec file: actually ship promtool - Update to 2.7.1: + Bug Fixes: * Fix a Stored DOM XSS vulnerability with query history (bsc#1124610) * prometheus_rule_group_last_duration_seconds now reports seconds instead of nanoseconds * Make sure the targets are consistently sorted in the targets page - Update to 2.7.0: + cli flag depreacted: storage.tsdb.retention use storage.tsdb.retention.time instead; depreacted flag will be removed in 3.0 + Features: * Add subqueries to PromQL * Add support for disk size based retention. Note that we don't consider the WAL size which could be significant and the time based retention policy also applies (experimental) * Add CORS origin flag + Bug Fixes: * Don't depend on given order when comparing samples in alert unit testing * Make sure the retention period doesn't overflow * Don't generate blocks with no samples - Update to 2.6.0: + Remove default flags from the container's entrypoint, run Prometheus from /etc/prometheus and symlink the storage directory to /etc/prometheus/data + Promtool: Remove the update command + Features: * Add JSON log format via the --log.format flag * API: Add /api/v1/labels endpoint to get all label names * Web: Allow setting the page's title via the --web.ui-title flag + Enhancements: * Add prometheus_tsdb_lowest_timestamp_seconds, prometheus_tsdb_head_min_time_seconds and prometheus_tsdb_head_max_time_seconds metrics * Add rule_group_last_evaluation_timestamp_seconds metric * Add prometheus_template_text_expansion_failures_total and prometheus_template_text_expansions_total metrics * Set consistent User-Agent header in outgoing requests * Azure SD: Error out at load time when authentication parameters are missing * EC2 SD: Add the machine's private DNS name to the discovery metadata * EC2 SD: Add the operating system's platform to the discovery metadata * Kubernetes SD: Add the pod's phase to the discovery metadata * Kubernetes SD: Log Kubernetes messages * Promtool: Collect CPU and trace profiles * Promtool: Support writing output as JSON * Remote Read: Return available data if remote read fails partially * Remote Write: Improve queue performance * Remote Write: Add min_shards parameter to set the minimum number of shards * TSDB: Improve WAL reading * TSDB: Memory improvements * Web: Log stack traces on panic * Web UI: Add copy to clipboard button for configuration * Web UI: Support console queries at specific times * Web UI: group targets by job then instance + Bug Fixes: * Deduplicate handler labels for HTTP metrics * Fix leaked queriers causing shutdowns to hang * Fix configuration loading panics on nil pointer slice elements * API: Correctly skip mismatching targets on /api/v1/targets/metadata * API: Better rounding for incoming query timestamps * Discovery: Remove all targets when the scrape configuration gets empty * PromQL: Fix a goroutine leak in the lexer/parser * Scrape: Fix deadlock in the scrape's manager * Scrape: Scrape targets at fixed intervals even after Prometheus restarts * TSDB: Support restored snapshots including the head properly * TSDB: Repair WAL when the last record in a segment is torn - Update to 2.5.0: + Group targets by scrape config instead of job name + Marathon SD: Various changes to adapt to Marathon 1.5+ + Discovery: Split prometheus_sd_discovered_targets metric by scrape and notify (Alertmanager SD) as well as by section in the respective configuration + Enhancements: * Support s390x platform for Linux * API: Add prometheus_api_remote_read_queries metric tracking currently executed or waiting remote read API requests * Remote Read: Add prometheus_remote_storage_remote_read_queries metric tracking currently in-flight remote read queries * Remote Read: Reduced memory usage * Discovery: Add prometheus_sd_discovered_targets, prometheus_sd_received_updates_total, prometheus_sd_updates_delayed_total, and prometheus_sd_updates_total metrics for discovery subsystem * Discovery: Improve performance of previously slow updates of changes of targets * Kubernetes SD: Add extended metrics * OpenStack SD: Support discovering instances from all projects * OpenStack SD: Discover all interfaces * OpenStack SD: Support tls_config for the used HTTP client * Triton SD: Add ability to filter triton_sd targets by pre-defined groups * Web UI: Avoid browser spell-checking in expression field * Web UI: Add scrape duration and last evaluation time in targets and rules pages * Web UI: Improve rule view by wrapping lines * Rules: Error out at load time for invalid templates, rather than at evaluation time + Bug Fixes: * Change max/min over_time to handle NaNs properly * Check label name for count_values PromQL function * Ensure that vectors and matrices do not contain identical label-sets - Update to 2.4.3: + Bug Fixes: * Fix panic when using custom EC2 API for SD #4672 * Fix panic when Zookeeper SD cannot connect to servers #4669 * Make the skip_head an optional parameter for snapshot API #4674 - Update to 2.4.2: + Bug Fixes: * Handle WAL corruptions properly prometheus/tsdb#389 * Handle WAL migrations correctly on Windows prometheus/tsdb#392 - Update to 2.4.1: + New TSDB metrics + [BUGFIX] Render UI correctly for Windows - Update to 2.4.0: + The WAL implementation has been re-written so the storage is not forward compatible. Prometheus 2.3 storage will work on 2.4 but not vice-versa + Reduce remote write default retries + Remove /heap endpoint + Features: * Persist alert 'for' state across restarts * Add API providing per target metric metadata * Add API providing recording and alerting rules + Enhancements: * Brand new WAL implementation for TSDB. Forwards incompatible with previous WAL. * Show rule evaluation errors in UI * Throttle resends of alerts to Alertmanager * Send EndsAt along with the alert to Alertmanager * Limit the samples returned by remote read endpoint * Limit the data read in through remote read * Coalesce identical SD configuations * promtool: Add new commands for debugging and querying * Update console examples for node_exporter v0.16.0 * Optimize PromQL aggregations * Remote read: Add Offset to hints * consul_sd: Add support for ServiceMeta field * ec2_sd: Maintain order of subnet_id label * ec2_sd: Add support for custom endpoint to support EC2 compliant APIs * ec2_sd: Add instance_owner label * azure_sd: Add support for VMSS discovery and multiple environments * gce_sd: Add instance_id label * Forbid rule-abiding robots from indexing * Log virtual memory limits on startup + Bug Fixes: * Wait for service discovery to stop before exiting * Render SD configs properly * Only add LookbackDelta to vector selectors * ec2_sd: Handle panic-ing nil pointer * consul_sd: Stop leaking connections * Use templated labels also to identify alerts * Reduce floating point errors in stddev and related functions * Log errors while encoding responses - Update to 2.3.2: + Bug Fixes: * Fix various tsdb bugs * Reorder startup and shutdown to prevent panics. * Exit with non-zero code on error * discovery/kubernetes/ingress: fix scheme discovery * Fix race in zookeeper sd * Better timeout handling in promql * Propogate errors when selecting series from the tsdb - Update to 2.3.1: + Bug Fixes: * Avoid infinite loop on duplicate NaN values. * Fix nil pointer deference when using various API endpoints * config: set target group source index during unmarshalling * discovery/file: fix logging * kubernetes_sd: fix namespace filtering * web: restore old path prefix behavior * web: remove security headers added in 2.3.0 - Update to 2.3.0 + marathon_sd: use auth_token and auth_token_file for token-based authentication instead of bearer_token and bearer_token_file respectively + Metric names for HTTP server metrics changed + Features: * Add query commands to promtool * Add security headers to HTTP server responses * Pass query hints via remote read API * Basic auth passwords can now be configured via file across all configuration + Enhancements: * Optimise PromQL and API serialization for memory usage and allocations * Limit number of dropped targets in web UI * Consul and EC2 service discovery allow using server-side filtering for performance improvement * Add advanced filtering configuration to EC2 service discovery * marathon_sd: adds support for basic and bearer authentication, plus all other common HTTP client options (TLS config, proxy URL, etc.) * Provide machine type metadata and labels in GCE service discovery * Add pod controller kind and name to Kubernetes service discovery data * Move TSDB to flock-based log file that works with Docker containers + Bug Fixes: * Properly propagate storage errors in PromQL * Fix path prefix for web pages * Fix goroutine leak in Consul service discovery * Fix races in scrape manager * Fix OOM for very large k in PromQL topk() queries * Make remote write more resilient to unavailable receivers * Make remote write shutdown cleanly * Don't leak files on errors in TSDB's tombstone cleanup * Unary minus expressions now removes the metric name from results * Fix bug that lead to wrong amount of samples considered for time range expressions - Update to 2.2.1 + Bug Fixes: * Fix data loss in TSDB on compaction * Correctly stop timer in remote-write path * Fix deadlock triggered by loading targets page * Fix incorrect buffering of samples on range selection queries * Handle large index files on windows properly - Update to 2.2.0 + This release introduces improvements to the storage format and fixes a regression introduced in 2.1. As a result Prometheus servers upgraded to 2.2 cannot be downgraded to a lower version anymore! + Rename file SD mtime metric + Send target update on empty pod IP in Kubernetes SD + Features: * Add API endpoint for flags. * Add API endpoint for dropped targets. * Display annotations on alerts page. * Add option to skip head data when taking snapshots + Enhancements: * Federation performance improvement. * Read bearer token file on every scrape. * Improve typeahead on /graph page. * Change rule file formatting. * Set consul server default to localhost:8500. * Add dropped Alertmanagers to API info endpoint. * Add OS type meta label to Azure SD. * Validate required fields in SD configuration. + Bug Fixes: * Prevent stack overflow on deep recursion in TSDB. * Correctly read offsets in index files that are greater than 4GB. * Fix scraping behavior for empty labels. * Drop metric name for bool modifier. * Fix races in discovery. * Fix Kubernetes endpoints SD for empty subsets. * Throttle updates from SD providers, which caused increased CPU usage and allocations. * Fix TSDB block reload issue. * Fix PromQL printing of empty without(). * Don't reset FiredAt for inactive alerts. * Fix erroneous file version changes and repair existing data. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1722=1 Package List: - openSUSE Leap 15.0 (x86_64): golang-github-prometheus-prometheus-2.7.1-lp150.2.3.1 References: https://bugzilla.suse.com/1124610

1 0