{"schema_version":"1.7.3","id":"SUSE-SU-2022:2139-1","published":"2022-06-20T12:56:16Z","modified":"2026-02-04T02:48:14.186011Z","related":["CVE-2022-21698"],"upstream":["CVE-2022-21698"],"summary":"Security update for golang-github-prometheus-alertmanager","details":"This update for golang-github-prometheus-alertmanager fixes the following issues:\n\nUpdate golang-github-prometheus-alertmanager from version 0.21.0 to version 0.23.0 (bsc#1196338, jsc#SLE-24077)\n\n- CVE-2022-21698: Denial of service using InstrumentHandlerCounter\n- Update vendor tarball with prometheus/client_golang 1.11.1\n- Update required Go version to 1.16\n- Use %autosetup macro\n- Update to version 0.23.0:\n  * Release 0.23.0\n  * Release 0.23.0-rc.0\n  * amtool: Detect version drift and warn users (#2672)\n  * Add ability to skip TLS verification for amtool (#2663)\n  * Fix empty isEqual in amtool. (#2668)\n  * Fix main tests (#2670)\n  * cli: add new template render command (#2538)\n  * OpsGenie: refer to alert instead of incident (#2609)\n  * Docs: target_match and source_match are DEPRECATED (#2665)\n  * Fix test not waiting for cluster member to be ready\n- Add go_modules to _service.\n- Added hardening to systemd service(s) with a modified prometheus-alertmanager.service (bsc#1181400)\n","affected":[{"package":{"name":"golang-github-prometheus-alertmanager","ecosystem":"SUSE:Manager Client Tools 15","purl":"pkg:rpm/suse/golang-github-prometheus-alertmanager&distro=SUSE%20Manager%20Client%20Tools%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-150100.4.7.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-alertmanager":"0.23.0-150100.4.7.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2139-1.json"}},{"package":{"name":"golang-github-prometheus-alertmanager","ecosystem":"SUSE:Manager Proxy Module 4.1","purl":"pkg:rpm/suse/golang-github-prometheus-alertmanager&distro=SUSE%20Manager%20Proxy%20Module%204.1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-150100.4.7.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-alertmanager":"0.23.0-150100.4.7.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2139-1.json"}},{"package":{"name":"golang-github-prometheus-alertmanager","ecosystem":"SUSE:Manager Proxy Module 4.2","purl":"pkg:rpm/suse/golang-github-prometheus-alertmanager&distro=SUSE%20Manager%20Proxy%20Module%204.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-150100.4.7.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-alertmanager":"0.23.0-150100.4.7.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2139-1.json"}},{"package":{"name":"golang-github-prometheus-alertmanager","ecosystem":"SUSE:Manager Proxy Module 4.3","purl":"pkg:rpm/suse/golang-github-prometheus-alertmanager&distro=SUSE%20Manager%20Proxy%20Module%204.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-150100.4.7.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-alertmanager":"0.23.0-150100.4.7.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2139-1.json"}},{"package":{"name":"golang-github-prometheus-alertmanager","ecosystem":"SUSE:Enterprise Storage 6","purl":"pkg:rpm/suse/golang-github-prometheus-alertmanager&distro=SUSE%20Enterprise%20Storage%206"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-150100.4.7.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-alertmanager":"0.23.0-150100.4.7.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2139-1.json"}},{"package":{"name":"golang-github-prometheus-alertmanager","ecosystem":"openSUSE:Leap 15.3","purl":"pkg:rpm/opensuse/golang-github-prometheus-alertmanager&distro=openSUSE%20Leap%2015.3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-150100.4.7.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-alertmanager":"0.23.0-150100.4.7.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2139-1.json"}},{"package":{"name":"golang-github-prometheus-alertmanager","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/golang-github-prometheus-alertmanager&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23.0-150100.4.7.1"}]}],"ecosystem_specific":{"binaries":[{"golang-github-prometheus-alertmanager":"0.23.0-150100.4.7.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:2139-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222139-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1181400"},{"type":"REPORT","url":"https://bugzilla.suse.com/1196338"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-21698"}]}