prometheus-postgres-exporter - Debian Package Tracker

general

source: prometheus-postgres-exporter (main)
version: 0.19.1-1
maintainer: Debian Go Packaging Team (DMD)
uploaders: Martina Ferrari [DMD] – Daniel Swarbrick [DMD]
arch: any
std-ver: 4.7.3
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.8.0+ds-1
oldstable: 0.11.1-3
stable: 0.17.1-1
testing: 0.19.1-1
unstable: 0.19.1-1

versioned links

0.8.0+ds-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.11.1-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.17.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.19.1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

prometheus-postgres-exporter

action needed

A new upstream version is available: 0.20.1 high

A new upstream version 0.20.1 is available, you should consider packaging it.

Created: 2026-07-03 Last update: 2026-10-13 07:32

2 security issues in trixie high

There are 2 open security issues in trixie.

2 important issues:

CVE-2026-80220:
CVE-2026-83550: A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process arguments, full goroutine stacks, and sensitive data like database connection strings or passwords from heap dumps. Additionally, repeated CPU profiling through these endpoints can lead to a denial of service.

Created: 2026-09-02 Last update: 2026-10-07 04:49

2 security issues in sid high

There are 2 open security issues in sid.

2 important issues:

CVE-2026-80220:
CVE-2026-83550: A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process arguments, full goroutine stacks, and sensitive data like database connection strings or passwords from heap dumps. Additionally, repeated CPU profiling through these endpoints can lead to a denial of service.

Created: 2026-09-02 Last update: 2026-10-07 04:49

2 security issues in forky high

There are 2 open security issues in forky.

2 important issues:

CVE-2026-80220:
CVE-2026-83550: A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process arguments, full goroutine stacks, and sensitive data like database connection strings or passwords from heap dumps. Additionally, repeated CPU profiling through these endpoints can lead to a denial of service.

Created: 2026-09-02 Last update: 2026-10-07 04:49

2 security issues in bookworm high

There are 2 open security issues in bookworm.

2 important issues:

CVE-2026-80220:
CVE-2026-83550: A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process arguments, full goroutine stacks, and sensitive data like database connection strings or passwords from heap dumps. Additionally, repeated CPU profiling through these endpoints can lead to a denial of service.

Created: 2026-09-02 Last update: 2026-10-07 04:49

1 new commit since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 69aedf9aaf3cba65f2cef8edac2273f4ebc1660f
Author: Marcos Talau <talau@debian.org>
Date:   Mon Jul 20 08:51:03 2026 -0300

    debian/salsa-ci.yml: Add to provide CI tests for Salsa

Created: 2026-07-20 Last update: 2026-10-11 21:19

1 open merge request in Salsa normal

There is 1 open merge request for this package on Salsa. You should consider reviewing and/or merging these merge requests.

Created: 2026-10-05 Last update: 2026-10-05 01:32

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.7.3).

Created: 2026-03-31 Last update: 2026-03-31 15:01

news

[rss feed]

[2026-04-01] prometheus-postgres-exporter 0.19.1-1 MIGRATED to testing (Debian testing watch)
[2026-03-29] Accepted prometheus-postgres-exporter 0.19.1-1 (source) into unstable (Daniel Swarbrick)
[2026-02-20] prometheus-postgres-exporter 0.19.0-1 MIGRATED to testing (Debian testing watch)
[2026-02-15] Accepted prometheus-postgres-exporter 0.19.0-1 (source) into unstable (Daniel Swarbrick)
[2026-01-07] prometheus-postgres-exporter 0.18.1-1 MIGRATED to testing (Debian testing watch)
[2026-01-05] Accepted prometheus-postgres-exporter 0.18.1-1 (source) into unstable (Daniel Swarbrick)
[2025-03-01] prometheus-postgres-exporter 0.17.1-1 MIGRATED to testing (Debian testing watch)
[2025-02-26] Accepted prometheus-postgres-exporter 0.17.1-1 (source) into unstable (Daniel Swarbrick)
[2025-02-25] prometheus-postgres-exporter 0.17.0-1 MIGRATED to testing (Debian testing watch)
[2025-02-23] Accepted prometheus-postgres-exporter 0.17.0-1 (source) into unstable (Daniel Swarbrick)
[2024-11-22] prometheus-postgres-exporter 0.16.0-1 MIGRATED to testing (Debian testing watch)
[2024-11-19] Accepted prometheus-postgres-exporter 0.16.0-1 (source) into unstable (Daniel Swarbrick)
[2024-09-25] prometheus-postgres-exporter 0.15.0-4 MIGRATED to testing (Debian testing watch)
[2024-09-22] Accepted prometheus-postgres-exporter 0.15.0-4 (source) into unstable (Daniel Swarbrick)
[2024-05-17] prometheus-postgres-exporter 0.15.0-3 MIGRATED to testing (Debian testing watch)
[2024-05-07] Accepted prometheus-postgres-exporter 0.15.0-3 (source) into unstable (Daniel Swarbrick)
[2024-03-20] prometheus-postgres-exporter 0.15.0-2 MIGRATED to testing (Debian testing watch)
[2024-03-17] Accepted prometheus-postgres-exporter 0.15.0-2 (source) into unstable (Daniel Swarbrick)
[2023-10-31] prometheus-postgres-exporter 0.15.0-1 MIGRATED to testing (Debian testing watch)
[2023-10-27] Accepted prometheus-postgres-exporter 0.15.0-1 (source) into unstable (Daniel Swarbrick)
[2023-10-23] prometheus-postgres-exporter 0.14.0-3 MIGRATED to testing (Debian testing watch)
[2023-10-20] Accepted prometheus-postgres-exporter 0.14.0-3 (source) into unstable (Daniel Swarbrick)
[2023-09-23] prometheus-postgres-exporter 0.14.0-2 MIGRATED to testing (Debian testing watch)
[2023-09-21] Accepted prometheus-postgres-exporter 0.14.0-2 (source) into unstable (Daniel Swarbrick)
[2023-09-20] Accepted prometheus-postgres-exporter 0.14.0-1 (source) into unstable (Daniel Swarbrick)
[2023-07-26] prometheus-postgres-exporter 0.13.2-1 MIGRATED to testing (Debian testing watch)
[2023-07-24] Accepted prometheus-postgres-exporter 0.13.2-1 (source) into unstable (Daniel Swarbrick)
[2023-07-07] prometheus-postgres-exporter 0.13.1-2 MIGRATED to testing (Debian testing watch)
[2023-07-07] prometheus-postgres-exporter 0.13.1-2 MIGRATED to testing (Debian testing watch)
[2023-07-07] prometheus-postgres-exporter 0.13.1-2 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 0

links

homepage
lintian
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.19.1-1
1 bug