SUSE-SU-2025:4481-1

Source
https://www.suse.com/support/update/announcement/2025/suse-su-20254481-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:4481-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2025:4481-1
Upstream
Related
Published
2025-12-18T12:18:50Z
Modified
2026-03-23T04:49:23Z
Summary
Security update for golang-github-prometheus-alertmanager
Details

This update for golang-github-prometheus-alertmanager fixes the following issues:

  • Update to version 0.28.1 (jsc#PED-13285):
    • Improved performance of inhibition rules when using Equal labels.
    • Improve the documentation on escaping in UTF-8 matchers.
    • Update alertmanager_config_hash metric help to document the hash is not cryptographically strong.
    • Fix panic in amtool when using --verbose.
    • Fix templating of channel field for Rocket.Chat.
    • Fix rocketchat_configs written as rocket_configs in docs.
    • Fix usage for --enable-feature flag.
    • Trim whitespace from OpsGenie API Key.
    • Fix Jira project template not rendered when searching for existing issues.
    • Fix subtle bug in JSON/YAML encoding of inhibition rules that would cause Equal labels to be omitted.
    • Fix header for slack_configs in docs.
    • Fix weight and wrap of Microsoft Teams notifications.
  • Upgrade to version 0.28.0:
    • CVE-2025-47908: Bump github.com/rs/cors (bsc#1247748).
    • Templating errors in the SNS integration now return an error.
    • Adopt log/slog, drop go-kit/log.
    • Add a new Microsoft Teams integration based on Flows.
    • Add a new Rocket.Chat integration.
    • Add a new Jira integration.
    • Add support for GOMEMLIMIT, enable it via the feature flag --enable-feature=auto-gomemlimit.
    • Add support for GOMAXPROCS, enable it via the feature flag --enable-feature=auto-gomaxprocs.
    • Add support for limits of silences including the maximum number of active and pending silences, and the maximum size per silence (in bytes). You can use the flags --silences.max-silences and --silences.max-silence-size-bytes to set them accordingly.
    • Muted alerts now show whether they are suppressed or not in both the /api/v2/alerts endpoint and the Alertmanager UI.
  • Upgrade to version 0.27.0:
    • API: Removal of all api/v1/ endpoints. These endpoints now log and return a deprecation message and respond with a status code of 410.
    • UTF-8 Support: Introduction of support for any UTF-8 character as part of label names and matchers.
    • Discord Integration: Enforce max length in message.
    • Metrics: Introduced the experimental feature flag --enable-feature=receiver-name-in-metrics to include the receiver name.
    • Metrics: Introduced a new gauge named alertmanager_inhibition_rules that counts the number of configured inhibition rules.
    • Metrics: Introduced a new counter named alertmanager_alerts_supressed_total that tracks muted alerts, it contains a reason label to indicate the source of the mute.
    • Discord Integration: Introduced support for webhook_url_file.
    • Microsoft Teams Integration: Introduced support for webhook_url_file.
    • Microsoft Teams Integration: Add support for summary.
    • Metrics: Notification metrics now support two new values for the label reason, contextCanceled and contextDeadlineExceeded.
    • Email Integration: Contents of auth_password_file are now trimmed of prefixed and suffixed whitespace.
    • amtool: Fixes the error scheme required for webhook url when using amtool with --alertmanager.url.
    • Mixin: Fix AlertmanagerFailedToSendAlerts, AlertmanagerClusterFailedToSendAlerts, and AlertmanagerClusterFailedToSendAlerts to make sure they ignore the reason label.
References

Affected packages

openSUSE:Leap 15.6
golang-github-prometheus-alertmanager

Package

Name
golang-github-prometheus-alertmanager
Purl
pkg:rpm/opensuse/golang-github-prometheus-alertmanager&distro=openSUSE%20Leap%2015.6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.28.1-150100.4.28.2

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-alertmanager":  "0.28.1-150100.4.28.2"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:4481-1.json"
SUSE:Linux Enterprise Module for Package Hub 15 SP6
golang-github-prometheus-alertmanager

Package

Name
golang-github-prometheus-alertmanager
Purl
pkg:rpm/suse/golang-github-prometheus-alertmanager&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.28.1-150100.4.28.2

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-alertmanager":  "0.28.1-150100.4.28.2"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:4481-1.json"
SUSE:Linux Enterprise Module for Package Hub 15 SP7
golang-github-prometheus-alertmanager

Package

Name
golang-github-prometheus-alertmanager
Purl
pkg:rpm/suse/golang-github-prometheus-alertmanager&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.28.1-150100.4.28.2

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-alertmanager":  "0.28.1-150100.4.28.2"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:4481-1.json"
SUSE:Manager Client Tools 15
golang-github-prometheus-alertmanager

Package

Name
golang-github-prometheus-alertmanager
Purl
pkg:rpm/suse/golang-github-prometheus-alertmanager&distro=SUSE%20Manager%20Client%20Tools%2015

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.28.1-150100.4.28.2

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-alertmanager":  "0.28.1-150100.4.28.2"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:4481-1.json"
SUSE:Manager Proxy LTS 4.3
golang-github-prometheus-alertmanager

Package

Name
golang-github-prometheus-alertmanager
Purl
pkg:rpm/suse/golang-github-prometheus-alertmanager&distro=SUSE%20Manager%20Proxy%20LTS%204.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.28.1-150100.4.28.2

Ecosystem specific

{
    "binaries":  [
        {
            "golang-github-prometheus-alertmanager":  "0.28.1-150100.4.28.2"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:4481-1.json"