SUSE-SU-2025:01992-1

Details

This update for golang-github-prometheus-alertmanager fixes the following issues:

Security:
- CVE-2025-22870: Fix proxy bypassing using IPv6 zone IDs (bsc#1238686)
- CVE-2023-45288: Fix HTTP/2 CONTINUATION flood in net/http (bsc#1236516)

Affected Packages

golang-github-prometheus-alertmanager

SUSE Linux Enterprise Module for Package Hub 15 SP6SUSE Linux Enterprise Module for Package Hub 15 SP7SUSE Manager Client Tools 15SUSE Manager Proxy Module 4.3openSUSE Leap 15.6

Fixed in:

0.26.0-150100.4.25.2

References

REPORThttps://bugzilla.suse.com/1236516 REPORThttps://bugzilla.suse.com/1238686 WEBhttps://www.suse.com/security/cve/CVE-2023-45288 WEBhttps://www.suse.com/security/cve/CVE-2025-22870 ADVISORYhttps://www.suse.com/support/update/announcement/2025/suse-su-202501992-1/

SUSE-SU-2025:01992-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline