Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

SUSE-SU-2025:01990-1 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceSUSE-SU-2025:01990-1

SUSE-SU-2025:01990-1

UNKNOWN

Security update for golang-github-prometheus-prometheus

Published Jun 18, 2025

Modified 7 months ago

Fix available

Details

This update for golang-github-prometheus-prometheus fixes the following issues:

Security issues fixed:
- CVE-2023-45288: Require Go >= 1.23 for building (bsc#1236516)
- CVE-2025-22870: Bump golang.org/x/net to version 0.39.0 (bsc#1238686)
Version was updated to 2.53.4 with the following bug fixes:
- Runtime: fix GOGC is being set to 0 when installed with empty prometheus.yml file resulting high cpu usage
- Scrape: fix dropping valid metrics after previous scrape failed

Affected Packages

golang-github-prometheus-prometheus

SUSE Linux Enterprise Module for Package Hub 15 SP6SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Manager Proxy Module 4.3openSUSE Leap 15.6

Fixed in:

2.53.4-150100.4.26.2

firewalld-prometheus-config

openSUSE Leap 15.6

Fixed in:

0.1-150100.4.26.2

References

REPORThttps://bugzilla.suse.com/1208752 REPORThttps://bugzilla.suse.com/1236516 REPORThttps://bugzilla.suse.com/1238686 WEBhttps://www.suse.com/security/cve/CVE-2023-45288 WEBhttps://www.suse.com/security/cve/CVE-2025-22870 ADVISORYhttps://www.suse.com/support/update/announcement/2025/suse-su-202501990-1/

Upstream

CVE-2023-45288 CVE-2025-22870

Related

CVE-2023-45288 CVE-2025-22870

Ecosystems

SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Manager Proxy Module 4.3 openSUSE Leap 15.6

Timeline

PublishedJun 18, 2025

ModifiedJun 18, 2025