openSUSE-SU-2026:21841-1
openSUSE-SU-2026:21841-1 · Security update for hauler
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for hauler fixes the following issues: Changes in hauler: - update vendor.tar to fix: * bsc#1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662: hauler: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library - update vendor.tar to fix: * bsc#1279416, CVE-2026-84304 * bsc#1279296, CVE-2026-84303 * bsc#1278934, CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers Update to 2.1.0 (bsc#1265425, CVE-2026-41888).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
hauler openSUSE:Leap 16.0
- Intervalos de versiones afectados
- ECOSYSTEM: < 2.1.0-bp160.3.1
Actualiza a 2.1.0-bp160.3.1
Fuentes originales
- https://bugzilla.suse.com/1265425
- https://bugzilla.suse.com/1278584
- https://bugzilla.suse.com/1278934
- https://bugzilla.suse.com/1279296
- https://bugzilla.suse.com/1279416
- https://www.suse.com/security/cve/CVE-2026-41888
- https://www.suse.com/security/cve/CVE-2026-56854
- https://www.suse.com/security/cve/CVE-2026-56855
- https://www.suse.com/security/cve/CVE-2026-78662
- https://www.suse.com/security/cve/CVE-2026-84303
- https://www.suse.com/security/cve/CVE-2026-84304
- https://www.suse.com/security/cve/CVE-2026-84445
- https://osv.dev/vulnerability/openSUSE-SU-2026:21841-1