Back Linuxsecurity

Fedora 43 alertmanager 0.31.1 Important Updates 2026

Linuxsecurity •LinuxSecurity Advisories • March 16, 2026

The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing them to the correct receiver integrations such as email, PagerDuty, or OpsGenie. It also takes care of silencing and inhibition of alerts. Update Information : Initial build after rename and update to 0.31.1

The Alertmanager handles alerts sent by client applications such as the

Prometheus server. It takes care of deduplicating, grouping, and routing them to

the correct receiver integrations such as email, PagerDuty, or OpsGenie. It also

takes care of silencing and inhibition of alerts.

Initial build after rename and update to 0.31.1

* Fri Mar 6 2026 Mikel Olasagasti Uranga - 0.31.1-1 - Initial package after rename - Closes rhbz#2444340

[ 1 ] Bug #2408246 - CVE-2025-58189 golang-github-prometheus-alertmanager: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43] [ 2 ] Bug #2408713 - CVE-2025-61725 golang-github-prometheus-alertmanager: Excessive CPU consumption in ParseAddress in net/mail [fedora-43] [ 3 ] Bug #2409717 - CVE-2025-61723 golang-github-prometheus-alertmanager: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43] [ 4 ] Bug #2410670 - CVE-2025-58185 golang-github-prometheus-alertmanager: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43] [ 5 ] Bug #2411566 - CVE-2025-58188 golang-github-prometheus-alertmanager: Panic when validating certificates with DSA publi... Read the Full Advisory

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-efbceeec2f' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 43 Alertmanager Update Addresses Multiple CVEs On March 16, 2026, Fedora released an important update for Alertmanager version 0.31.1, addressing several critical vulnerabilities. The update resolves issues including CVE-2025-58189, which involves an attacker-controlled information exposure during ALPN negotiation, and CVE-2025-61725, which leads to excessive CPU consumption. Other vulnerabilities fixed include CVE-2025-61723, CVE-2025-58185, and CVE-2025-58188, all of which pose risks of memory exhaustion and panic conditions. Users of Fedora 43 are urged to upgrade to the latest version to mitigate these risks. The vulnerabilities affect systems utilizing the Prometheus server for alert management. The update can be installed using the 'dnf' update program. The previous version, Fedora 42, had already reported critical vulnerabilities, emphasizing the importance of timely updates. 2 sources 71

Extracted Entities

Fedora 43 alertmanager 0.31.1 Important Updates 2026

The full story

Extracted Entities

Companies (1)

CVEs (5)

Platforms (2)