OPENSUSE-SU-2026:22027-1: golang-github-prometheus-alertmanager&distro=openSUSE Leap 16.0 openSUSE

Published
Published 06-10-2026Last modified 07-10-2026

Vulnerability summary

OPENSUSE-SU-2026:22027-1 is a vulnerability in golang-github-prometheus-alertmanager&distro=openSUSE Leap 16.0 openSUSE with no CVSS score yet.

Priority
Insufficient evidence

No CVSS vector published; no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
Not scored
010
No CVSS score recorded
EPSS scoreNot scoredRisk metrics not yet published.
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 2 · Downstream 0 · Related 2
CVE-2026-2303CVE-2026-39821

Timeline

  1. 06-10-2026
    PublishedVulnerability first disclosed.
  2. 07-10-2026
    Last modifiedVulnerability information updated.

Description

Security update for golang-github-prometheus-alertmanager This update for golang-github-prometheus-alertmanager fixes the following issues: Changes in golang-github-prometheus-alertmanager: - CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.57.0 (bsc#1266615) - Update to version 0.33.1 (jsc#PED-16708): * [BUGFIX] silences: fix silences snapshot missing legacy matchers field. This caused a bug that prevented older alertmanager versions from reading newer snapshots unnecessarily. * [BUGFIX] silence with no matchers should populate an empty array in API response - Update to version 0.33.0: * The '--enable-feature=auto-gomaxprocs' option has been removed. * Add a new Microsoft Teams integration that supports adaptive cards. * Add support for AWS Signature V4 to call AWS services that require authentication. * Add support for Google Chat as a notification channel. * Add support for custom payloads in webhooks. - Update to version 0.32.2: * [BUGFIX] Fix dispatcher goroutine leaks on destroyed alertgroup swap. - Update to version 0.32.1: * [BUGFIX] dispatcher: Fix issue with dispatching to a contended route. - Update to version 0.32.0: * Reduce memory allocations through pre-sizing collections and batch allocation. * CVE-2026-2303: Removed indirect dep on vulnerable mongodb driver (bsc#1269834) - Update to version 0.31.1: * No user-visible changes - Update to version 0.31.0: * Add full payload templating support for webhook notifier. * Add support for UTF-8 label names in UI matchers. * Fix escaping for matcher values with quotes in the UI. - Update to version 0.30.1: * [BUGFIX] Fix memory leak in tracing client. - Update to version 0.30.0: * Add Mattermost integration. * Add support for Slack apps. * Add distributed tracing support. * Add names to inhibition rules. * Add templating functions for working with URLs and JSON. * Allow persistent peer names in a cluster. - Update to version 0.29.0: * Add incident.io notifier. * Add monospace message formatting. * Update Jira notifier to support both Jira cloud API v3 and Jira datacenter API v2.

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: not stated in public data.

Opensuse1 product
  • golang-github-prometheus-alertmanager&distro=openSUSE Leap 16.0< 0.33.1-bp160.1.1

1 vendor · 1 product

References

4 links